Aug 13 00:02:58.999882 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Aug 13 00:02:58.999900 kernel: Linux version 5.15.189-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Tue Aug 12 22:50:30 -00 2025 Aug 13 00:02:58.999909 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Aug 13 00:02:58.999916 kernel: printk: bootconsole [pl11] enabled Aug 13 00:02:58.999921 kernel: efi: EFI v2.70 by EDK II Aug 13 00:02:58.999927 kernel: efi: ACPI 2.0=0x3fd5f018 SMBIOS=0x3e580000 SMBIOS 3.0=0x3e560000 MEMATTR=0x3f215018 RNG=0x3fd5f998 MEMRESERVE=0x3761cf98 Aug 13 00:02:58.999934 kernel: random: crng init done Aug 13 00:02:58.999939 kernel: ACPI: Early table checksum verification disabled Aug 13 00:02:58.999945 kernel: ACPI: RSDP 0x000000003FD5F018 000024 (v02 VRTUAL) Aug 13 00:02:58.999950 kernel: ACPI: XSDT 0x000000003FD5FF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Aug 13 00:02:58.999955 kernel: ACPI: FACP 0x000000003FD5FC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Aug 13 00:02:58.999961 kernel: ACPI: DSDT 0x000000003FD41018 01DFCD (v02 MSFTVM DSDT01 00000001 INTL 20230628) Aug 13 00:02:58.999968 kernel: ACPI: DBG2 0x000000003FD5FB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Aug 13 00:02:58.999973 kernel: ACPI: GTDT 0x000000003FD5FD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Aug 13 00:02:58.999980 kernel: ACPI: OEM0 0x000000003FD5F098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Aug 13 00:02:58.999986 kernel: ACPI: SPCR 0x000000003FD5FA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Aug 13 00:02:58.999991 kernel: ACPI: APIC 0x000000003FD5F818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Aug 13 00:02:58.999998 kernel: ACPI: SRAT 0x000000003FD5F198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Aug 13 00:02:59.000004 kernel: ACPI: PPTT 0x000000003FD5F418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Aug 13 00:02:59.000010 kernel: ACPI: BGRT 0x000000003FD5FE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Aug 13 00:02:59.000015 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Aug 13 00:02:59.000021 kernel: NUMA: Failed to initialise from firmware Aug 13 00:02:59.000027 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Aug 13 00:02:59.000033 kernel: NUMA: NODE_DATA [mem 0x1bf7f2900-0x1bf7f7fff] Aug 13 00:02:59.000039 kernel: Zone ranges: Aug 13 00:02:59.000045 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Aug 13 00:02:59.000051 kernel: DMA32 empty Aug 13 00:02:59.000056 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Aug 13 00:02:59.000063 kernel: Movable zone start for each node Aug 13 00:02:59.000069 kernel: Early memory node ranges Aug 13 00:02:59.000075 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Aug 13 00:02:59.004823 kernel: node 0: [mem 0x0000000000824000-0x000000003e54ffff] Aug 13 00:02:59.004847 kernel: node 0: [mem 0x000000003e550000-0x000000003e87ffff] Aug 13 00:02:59.004853 kernel: node 0: [mem 0x000000003e880000-0x000000003fc7ffff] Aug 13 00:02:59.004860 kernel: node 0: [mem 0x000000003fc80000-0x000000003fcfffff] Aug 13 00:02:59.004866 kernel: node 0: [mem 0x000000003fd00000-0x000000003fffffff] Aug 13 00:02:59.004871 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Aug 13 00:02:59.004878 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Aug 13 00:02:59.004884 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Aug 13 00:02:59.004890 kernel: psci: probing for conduit method from ACPI. Aug 13 00:02:59.004904 kernel: psci: PSCIv1.1 detected in firmware. Aug 13 00:02:59.004910 kernel: psci: Using standard PSCI v0.2 function IDs Aug 13 00:02:59.004916 kernel: psci: MIGRATE_INFO_TYPE not supported. Aug 13 00:02:59.004922 kernel: psci: SMC Calling Convention v1.4 Aug 13 00:02:59.004928 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Aug 13 00:02:59.004936 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Aug 13 00:02:59.004942 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Aug 13 00:02:59.004948 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Aug 13 00:02:59.004955 kernel: pcpu-alloc: [0] 0 [0] 1 Aug 13 00:02:59.004961 kernel: Detected PIPT I-cache on CPU0 Aug 13 00:02:59.004968 kernel: CPU features: detected: GIC system register CPU interface Aug 13 00:02:59.004974 kernel: CPU features: detected: Hardware dirty bit management Aug 13 00:02:59.004980 kernel: CPU features: detected: Spectre-BHB Aug 13 00:02:59.004986 kernel: CPU features: kernel page table isolation forced ON by KASLR Aug 13 00:02:59.004992 kernel: CPU features: detected: Kernel page table isolation (KPTI) Aug 13 00:02:59.004999 kernel: CPU features: detected: ARM erratum 1418040 Aug 13 00:02:59.005006 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Aug 13 00:02:59.005013 kernel: CPU features: detected: SSBS not fully self-synchronizing Aug 13 00:02:59.005019 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Aug 13 00:02:59.005025 kernel: Policy zone: Normal Aug 13 00:02:59.005033 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=32404c0887e5b8a80b0f069916a8040bfd969c7a8f47a2db1168b24bc04220cc Aug 13 00:02:59.005040 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Aug 13 00:02:59.005046 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Aug 13 00:02:59.005053 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Aug 13 00:02:59.005059 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Aug 13 00:02:59.005065 kernel: software IO TLB: mapped [mem 0x000000003a550000-0x000000003e550000] (64MB) Aug 13 00:02:59.005072 kernel: Memory: 3986876K/4194160K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 207284K reserved, 0K cma-reserved) Aug 13 00:02:59.005089 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Aug 13 00:02:59.005096 kernel: trace event string verifier disabled Aug 13 00:02:59.005102 kernel: rcu: Preemptible hierarchical RCU implementation. Aug 13 00:02:59.005109 kernel: rcu: RCU event tracing is enabled. Aug 13 00:02:59.005115 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Aug 13 00:02:59.005121 kernel: Trampoline variant of Tasks RCU enabled. Aug 13 00:02:59.005128 kernel: Tracing variant of Tasks RCU enabled. Aug 13 00:02:59.005134 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Aug 13 00:02:59.005140 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Aug 13 00:02:59.005147 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Aug 13 00:02:59.005153 kernel: GICv3: 960 SPIs implemented Aug 13 00:02:59.005160 kernel: GICv3: 0 Extended SPIs implemented Aug 13 00:02:59.005166 kernel: GICv3: Distributor has no Range Selector support Aug 13 00:02:59.005173 kernel: Root IRQ handler: gic_handle_irq Aug 13 00:02:59.005179 kernel: GICv3: 16 PPIs implemented Aug 13 00:02:59.005185 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Aug 13 00:02:59.005191 kernel: ITS: No ITS available, not enabling LPIs Aug 13 00:02:59.005198 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Aug 13 00:02:59.005204 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Aug 13 00:02:59.005210 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Aug 13 00:02:59.005217 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Aug 13 00:02:59.005223 kernel: Console: colour dummy device 80x25 Aug 13 00:02:59.005231 kernel: printk: console [tty1] enabled Aug 13 00:02:59.005238 kernel: ACPI: Core revision 20210730 Aug 13 00:02:59.005244 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Aug 13 00:02:59.005250 kernel: pid_max: default: 32768 minimum: 301 Aug 13 00:02:59.005257 kernel: LSM: Security Framework initializing Aug 13 00:02:59.005263 kernel: SELinux: Initializing. Aug 13 00:02:59.005270 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Aug 13 00:02:59.005277 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Aug 13 00:02:59.005283 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Aug 13 00:02:59.005291 kernel: Hyper-V: Host Build 10.0.22477.1619-1-0 Aug 13 00:02:59.005297 kernel: rcu: Hierarchical SRCU implementation. Aug 13 00:02:59.005304 kernel: Remapping and enabling EFI services. Aug 13 00:02:59.005310 kernel: smp: Bringing up secondary CPUs ... Aug 13 00:02:59.005316 kernel: Detected PIPT I-cache on CPU1 Aug 13 00:02:59.005323 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Aug 13 00:02:59.005329 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Aug 13 00:02:59.005336 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Aug 13 00:02:59.005342 kernel: smp: Brought up 1 node, 2 CPUs Aug 13 00:02:59.005348 kernel: SMP: Total of 2 processors activated. Aug 13 00:02:59.005356 kernel: CPU features: detected: 32-bit EL0 Support Aug 13 00:02:59.005363 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Aug 13 00:02:59.005369 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Aug 13 00:02:59.005376 kernel: CPU features: detected: CRC32 instructions Aug 13 00:02:59.005382 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Aug 13 00:02:59.005389 kernel: CPU features: detected: LSE atomic instructions Aug 13 00:02:59.005395 kernel: CPU features: detected: Privileged Access Never Aug 13 00:02:59.005401 kernel: CPU: All CPU(s) started at EL1 Aug 13 00:02:59.005408 kernel: alternatives: patching kernel code Aug 13 00:02:59.005415 kernel: devtmpfs: initialized Aug 13 00:02:59.005426 kernel: KASLR enabled Aug 13 00:02:59.005433 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Aug 13 00:02:59.005441 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Aug 13 00:02:59.005448 kernel: pinctrl core: initialized pinctrl subsystem Aug 13 00:02:59.005455 kernel: SMBIOS 3.1.0 present. Aug 13 00:02:59.005462 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 Aug 13 00:02:59.005469 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Aug 13 00:02:59.005476 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Aug 13 00:02:59.005484 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Aug 13 00:02:59.005491 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Aug 13 00:02:59.005498 kernel: audit: initializing netlink subsys (disabled) Aug 13 00:02:59.005504 kernel: audit: type=2000 audit(0.087:1): state=initialized audit_enabled=0 res=1 Aug 13 00:02:59.005511 kernel: thermal_sys: Registered thermal governor 'step_wise' Aug 13 00:02:59.005518 kernel: cpuidle: using governor menu Aug 13 00:02:59.005525 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Aug 13 00:02:59.005532 kernel: ASID allocator initialised with 32768 entries Aug 13 00:02:59.005539 kernel: ACPI: bus type PCI registered Aug 13 00:02:59.005546 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Aug 13 00:02:59.005553 kernel: Serial: AMBA PL011 UART driver Aug 13 00:02:59.005559 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Aug 13 00:02:59.005566 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Aug 13 00:02:59.005573 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Aug 13 00:02:59.005580 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Aug 13 00:02:59.005587 kernel: cryptd: max_cpu_qlen set to 1000 Aug 13 00:02:59.005595 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Aug 13 00:02:59.005601 kernel: ACPI: Added _OSI(Module Device) Aug 13 00:02:59.005608 kernel: ACPI: Added _OSI(Processor Device) Aug 13 00:02:59.005615 kernel: ACPI: Added _OSI(Processor Aggregator Device) Aug 13 00:02:59.005621 kernel: ACPI: Added _OSI(Linux-Dell-Video) Aug 13 00:02:59.005628 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Aug 13 00:02:59.005635 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Aug 13 00:02:59.005642 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Aug 13 00:02:59.005648 kernel: ACPI: Interpreter enabled Aug 13 00:02:59.005657 kernel: ACPI: Using GIC for interrupt routing Aug 13 00:02:59.005663 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Aug 13 00:02:59.005670 kernel: printk: console [ttyAMA0] enabled Aug 13 00:02:59.005677 kernel: printk: bootconsole [pl11] disabled Aug 13 00:02:59.005684 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Aug 13 00:02:59.005690 kernel: iommu: Default domain type: Translated Aug 13 00:02:59.005697 kernel: iommu: DMA domain TLB invalidation policy: strict mode Aug 13 00:02:59.005704 kernel: vgaarb: loaded Aug 13 00:02:59.005710 kernel: pps_core: LinuxPPS API ver. 1 registered Aug 13 00:02:59.005717 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Aug 13 00:02:59.005725 kernel: PTP clock support registered Aug 13 00:02:59.005732 kernel: Registered efivars operations Aug 13 00:02:59.005738 kernel: No ACPI PMU IRQ for CPU0 Aug 13 00:02:59.005745 kernel: No ACPI PMU IRQ for CPU1 Aug 13 00:02:59.005752 kernel: clocksource: Switched to clocksource arch_sys_counter Aug 13 00:02:59.005758 kernel: VFS: Disk quotas dquot_6.6.0 Aug 13 00:02:59.005765 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Aug 13 00:02:59.005772 kernel: pnp: PnP ACPI init Aug 13 00:02:59.005779 kernel: pnp: PnP ACPI: found 0 devices Aug 13 00:02:59.005787 kernel: NET: Registered PF_INET protocol family Aug 13 00:02:59.005794 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Aug 13 00:02:59.005800 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Aug 13 00:02:59.005807 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Aug 13 00:02:59.005814 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Aug 13 00:02:59.005821 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Aug 13 00:02:59.005829 kernel: TCP: Hash tables configured (established 32768 bind 32768) Aug 13 00:02:59.005835 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Aug 13 00:02:59.005843 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Aug 13 00:02:59.005850 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Aug 13 00:02:59.005857 kernel: PCI: CLS 0 bytes, default 64 Aug 13 00:02:59.005864 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Aug 13 00:02:59.005870 kernel: kvm [1]: HYP mode not available Aug 13 00:02:59.005877 kernel: Initialise system trusted keyrings Aug 13 00:02:59.005884 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Aug 13 00:02:59.005890 kernel: Key type asymmetric registered Aug 13 00:02:59.005897 kernel: Asymmetric key parser 'x509' registered Aug 13 00:02:59.005905 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Aug 13 00:02:59.005912 kernel: io scheduler mq-deadline registered Aug 13 00:02:59.005919 kernel: io scheduler kyber registered Aug 13 00:02:59.005925 kernel: io scheduler bfq registered Aug 13 00:02:59.005932 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Aug 13 00:02:59.005939 kernel: thunder_xcv, ver 1.0 Aug 13 00:02:59.005945 kernel: thunder_bgx, ver 1.0 Aug 13 00:02:59.005952 kernel: nicpf, ver 1.0 Aug 13 00:02:59.005959 kernel: nicvf, ver 1.0 Aug 13 00:02:59.010115 kernel: rtc-efi rtc-efi.0: registered as rtc0 Aug 13 00:02:59.010253 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-08-13T00:02:58 UTC (1755043378) Aug 13 00:02:59.010264 kernel: efifb: probing for efifb Aug 13 00:02:59.010272 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Aug 13 00:02:59.010279 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Aug 13 00:02:59.010286 kernel: efifb: scrolling: redraw Aug 13 00:02:59.010292 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Aug 13 00:02:59.010299 kernel: Console: switching to colour frame buffer device 128x48 Aug 13 00:02:59.010308 kernel: fb0: EFI VGA frame buffer device Aug 13 00:02:59.010314 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Aug 13 00:02:59.010321 kernel: hid: raw HID events driver (C) Jiri Kosina Aug 13 00:02:59.010328 kernel: NET: Registered PF_INET6 protocol family Aug 13 00:02:59.010335 kernel: Segment Routing with IPv6 Aug 13 00:02:59.010342 kernel: In-situ OAM (IOAM) with IPv6 Aug 13 00:02:59.010349 kernel: NET: Registered PF_PACKET protocol family Aug 13 00:02:59.010355 kernel: Key type dns_resolver registered Aug 13 00:02:59.010363 kernel: registered taskstats version 1 Aug 13 00:02:59.010370 kernel: Loading compiled-in X.509 certificates Aug 13 00:02:59.010379 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.189-flatcar: 72b807ae6dac6ab18c2f4ab9460d3472cf28c19d' Aug 13 00:02:59.010385 kernel: Key type .fscrypt registered Aug 13 00:02:59.010392 kernel: Key type fscrypt-provisioning registered Aug 13 00:02:59.010399 kernel: ima: No TPM chip found, activating TPM-bypass! Aug 13 00:02:59.010406 kernel: ima: Allocated hash algorithm: sha1 Aug 13 00:02:59.010412 kernel: ima: No architecture policies found Aug 13 00:02:59.010419 kernel: clk: Disabling unused clocks Aug 13 00:02:59.010426 kernel: Freeing unused kernel memory: 36416K Aug 13 00:02:59.010434 kernel: Run /init as init process Aug 13 00:02:59.010441 kernel: with arguments: Aug 13 00:02:59.010448 kernel: /init Aug 13 00:02:59.010454 kernel: with environment: Aug 13 00:02:59.010461 kernel: HOME=/ Aug 13 00:02:59.010467 kernel: TERM=linux Aug 13 00:02:59.010474 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Aug 13 00:02:59.010483 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 00:02:59.010495 systemd[1]: Detected virtualization microsoft. Aug 13 00:02:59.010502 systemd[1]: Detected architecture arm64. Aug 13 00:02:59.010510 systemd[1]: Running in initrd. Aug 13 00:02:59.010517 systemd[1]: No hostname configured, using default hostname. Aug 13 00:02:59.010524 systemd[1]: Hostname set to . Aug 13 00:02:59.010531 systemd[1]: Initializing machine ID from random generator. Aug 13 00:02:59.010539 systemd[1]: Queued start job for default target initrd.target. Aug 13 00:02:59.010546 systemd[1]: Started systemd-ask-password-console.path. Aug 13 00:02:59.010554 systemd[1]: Reached target cryptsetup.target. Aug 13 00:02:59.010561 systemd[1]: Reached target paths.target. Aug 13 00:02:59.010568 systemd[1]: Reached target slices.target. Aug 13 00:02:59.010576 systemd[1]: Reached target swap.target. Aug 13 00:02:59.010583 systemd[1]: Reached target timers.target. Aug 13 00:02:59.010590 systemd[1]: Listening on iscsid.socket. Aug 13 00:02:59.010598 systemd[1]: Listening on iscsiuio.socket. Aug 13 00:02:59.010605 systemd[1]: Listening on systemd-journald-audit.socket. Aug 13 00:02:59.010614 systemd[1]: Listening on systemd-journald-dev-log.socket. Aug 13 00:02:59.010621 systemd[1]: Listening on systemd-journald.socket. Aug 13 00:02:59.010628 systemd[1]: Listening on systemd-networkd.socket. Aug 13 00:02:59.010636 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 00:02:59.010644 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 00:02:59.010651 systemd[1]: Reached target sockets.target. Aug 13 00:02:59.010659 systemd[1]: Starting kmod-static-nodes.service... Aug 13 00:02:59.010666 systemd[1]: Finished network-cleanup.service. Aug 13 00:02:59.010674 systemd[1]: Starting systemd-fsck-usr.service... Aug 13 00:02:59.010683 systemd[1]: Starting systemd-journald.service... Aug 13 00:02:59.010690 systemd[1]: Starting systemd-modules-load.service... Aug 13 00:02:59.010697 systemd[1]: Starting systemd-resolved.service... Aug 13 00:02:59.010704 systemd[1]: Starting systemd-vconsole-setup.service... Aug 13 00:02:59.010716 systemd-journald[276]: Journal started Aug 13 00:02:59.010759 systemd-journald[276]: Runtime Journal (/run/log/journal/71381235ed1c40119fe0650e55310904) is 8.0M, max 78.5M, 70.5M free. Aug 13 00:02:59.002726 systemd-modules-load[277]: Inserted module 'overlay' Aug 13 00:02:59.043099 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Aug 13 00:02:59.043147 systemd[1]: Started systemd-journald.service. Aug 13 00:02:59.051503 kernel: Bridge firewalling registered Aug 13 00:02:59.047646 systemd-resolved[278]: Positive Trust Anchors: Aug 13 00:02:59.083737 kernel: audit: type=1130 audit(1755043379.056:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.083761 kernel: audit: type=1130 audit(1755043379.079:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.047664 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 00:02:59.129914 kernel: SCSI subsystem initialized Aug 13 00:02:59.129937 kernel: audit: type=1130 audit(1755043379.107:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.047693 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 00:02:59.197060 kernel: audit: type=1130 audit(1755043379.133:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.197086 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Aug 13 00:02:59.197098 kernel: device-mapper: uevent: version 1.0.3 Aug 13 00:02:59.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.049849 systemd-resolved[278]: Defaulting to hostname 'linux'. Aug 13 00:02:59.221492 kernel: audit: type=1130 audit(1755043379.202:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.056181 systemd-modules-load[277]: Inserted module 'br_netfilter' Aug 13 00:02:59.249864 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Aug 13 00:02:59.056588 systemd[1]: Started systemd-resolved.service. Aug 13 00:02:59.079568 systemd[1]: Finished kmod-static-nodes.service. Aug 13 00:02:59.107414 systemd[1]: Finished systemd-fsck-usr.service. Aug 13 00:02:59.310823 kernel: audit: type=1130 audit(1755043379.265:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.310847 kernel: audit: type=1130 audit(1755043379.285:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.134214 systemd[1]: Finished systemd-vconsole-setup.service. Aug 13 00:02:59.202635 systemd[1]: Reached target nss-lookup.target. Aug 13 00:02:59.337185 kernel: audit: type=1130 audit(1755043379.310:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.231385 systemd[1]: Starting dracut-cmdline-ask.service... Aug 13 00:02:59.235248 systemd-modules-load[277]: Inserted module 'dm_multipath' Aug 13 00:02:59.236144 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Aug 13 00:02:59.377538 kernel: audit: type=1130 audit(1755043379.358:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.377709 dracut-cmdline[296]: dracut-dracut-053 Aug 13 00:02:59.249598 systemd[1]: Finished systemd-modules-load.service. Aug 13 00:02:59.386397 dracut-cmdline[296]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=32404c0887e5b8a80b0f069916a8040bfd969c7a8f47a2db1168b24bc04220cc Aug 13 00:02:59.270414 systemd[1]: Finished dracut-cmdline-ask.service. Aug 13 00:02:59.286056 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Aug 13 00:02:59.311935 systemd[1]: Starting dracut-cmdline.service... Aug 13 00:02:59.338066 systemd[1]: Starting systemd-sysctl.service... Aug 13 00:02:59.353436 systemd[1]: Finished systemd-sysctl.service. Aug 13 00:02:59.487116 kernel: Loading iSCSI transport class v2.0-870. Aug 13 00:02:59.502115 kernel: iscsi: registered transport (tcp) Aug 13 00:02:59.523578 kernel: iscsi: registered transport (qla4xxx) Aug 13 00:02:59.523645 kernel: QLogic iSCSI HBA Driver Aug 13 00:02:59.559380 systemd[1]: Finished dracut-cmdline.service. Aug 13 00:02:59.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:02:59.564938 systemd[1]: Starting dracut-pre-udev.service... Aug 13 00:02:59.617103 kernel: raid6: neonx8 gen() 13715 MB/s Aug 13 00:02:59.638094 kernel: raid6: neonx8 xor() 10756 MB/s Aug 13 00:02:59.659092 kernel: raid6: neonx4 gen() 13533 MB/s Aug 13 00:02:59.679104 kernel: raid6: neonx4 xor() 11274 MB/s Aug 13 00:02:59.701094 kernel: raid6: neonx2 gen() 12950 MB/s Aug 13 00:02:59.721093 kernel: raid6: neonx2 xor() 10462 MB/s Aug 13 00:02:59.741093 kernel: raid6: neonx1 gen() 10532 MB/s Aug 13 00:02:59.762095 kernel: raid6: neonx1 xor() 8789 MB/s Aug 13 00:02:59.782102 kernel: raid6: int64x8 gen() 6273 MB/s Aug 13 00:02:59.803093 kernel: raid6: int64x8 xor() 3540 MB/s Aug 13 00:02:59.824099 kernel: raid6: int64x4 gen() 7211 MB/s Aug 13 00:02:59.844096 kernel: raid6: int64x4 xor() 3855 MB/s Aug 13 00:02:59.864097 kernel: raid6: int64x2 gen() 6155 MB/s Aug 13 00:02:59.885094 kernel: raid6: int64x2 xor() 3320 MB/s Aug 13 00:02:59.906093 kernel: raid6: int64x1 gen() 5047 MB/s Aug 13 00:02:59.930511 kernel: raid6: int64x1 xor() 2647 MB/s Aug 13 00:02:59.930524 kernel: raid6: using algorithm neonx8 gen() 13715 MB/s Aug 13 00:02:59.930533 kernel: raid6: .... xor() 10756 MB/s, rmw enabled Aug 13 00:02:59.935478 kernel: raid6: using neon recovery algorithm Aug 13 00:02:59.953101 kernel: xor: measuring software checksum speed Aug 13 00:02:59.953123 kernel: 8regs : 16133 MB/sec Aug 13 00:02:59.960959 kernel: 32regs : 20702 MB/sec Aug 13 00:02:59.964735 kernel: arm64_neon : 27832 MB/sec Aug 13 00:02:59.964744 kernel: xor: using function: arm64_neon (27832 MB/sec) Aug 13 00:03:00.026109 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Aug 13 00:03:00.036639 systemd[1]: Finished dracut-pre-udev.service. Aug 13 00:03:00.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:00.045000 audit: BPF prog-id=7 op=LOAD Aug 13 00:03:00.045000 audit: BPF prog-id=8 op=LOAD Aug 13 00:03:00.046171 systemd[1]: Starting systemd-udevd.service... Aug 13 00:03:00.065361 systemd-udevd[475]: Using default interface naming scheme 'v252'. Aug 13 00:03:00.070430 systemd[1]: Started systemd-udevd.service. Aug 13 00:03:00.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:00.080556 systemd[1]: Starting dracut-pre-trigger.service... Aug 13 00:03:00.099200 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Aug 13 00:03:00.127295 systemd[1]: Finished dracut-pre-trigger.service. Aug 13 00:03:00.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:00.132805 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 00:03:00.171303 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 00:03:00.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:00.232175 kernel: hv_vmbus: Vmbus version:5.3 Aug 13 00:03:00.254113 kernel: hv_vmbus: registering driver hyperv_keyboard Aug 13 00:03:00.254160 kernel: hv_vmbus: registering driver hv_storvsc Aug 13 00:03:00.254170 kernel: hv_vmbus: registering driver hid_hyperv Aug 13 00:03:00.261106 kernel: scsi host1: storvsc_host_t Aug 13 00:03:00.261285 kernel: hv_vmbus: registering driver hv_netvsc Aug 13 00:03:00.268594 kernel: scsi host0: storvsc_host_t Aug 13 00:03:00.269107 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Aug 13 00:03:00.293506 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Aug 13 00:03:00.293570 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Aug 13 00:03:00.293605 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Aug 13 00:03:00.308104 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Aug 13 00:03:00.335107 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Aug 13 00:03:00.356356 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Aug 13 00:03:00.356378 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Aug 13 00:03:00.364744 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Aug 13 00:03:00.364850 kernel: sd 0:0:0:0: [sda] Write Protect is off Aug 13 00:03:00.364929 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Aug 13 00:03:00.365006 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Aug 13 00:03:00.365108 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Aug 13 00:03:00.365222 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Aug 13 00:03:00.365239 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Aug 13 00:03:00.419103 kernel: hv_netvsc 000d3a6d-2095-000d-3a6d-2095000d3a6d eth0: VF slot 1 added Aug 13 00:03:00.429111 kernel: hv_vmbus: registering driver hv_pci Aug 13 00:03:00.436104 kernel: hv_pci 23429cd8-84b4-4d22-b36a-488e517f9db7: PCI VMBus probing: Using version 0x10004 Aug 13 00:03:00.504309 kernel: hv_pci 23429cd8-84b4-4d22-b36a-488e517f9db7: PCI host bridge to bus 84b4:00 Aug 13 00:03:00.504407 kernel: pci_bus 84b4:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Aug 13 00:03:00.504506 kernel: pci_bus 84b4:00: No busn resource found for root bus, will use [bus 00-ff] Aug 13 00:03:00.504582 kernel: pci 84b4:00:02.0: [15b3:1018] type 00 class 0x020000 Aug 13 00:03:00.504714 kernel: pci 84b4:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Aug 13 00:03:00.504797 kernel: pci 84b4:00:02.0: enabling Extended Tags Aug 13 00:03:00.504882 kernel: pci 84b4:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 84b4:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Aug 13 00:03:00.504975 kernel: pci_bus 84b4:00: busn_res: [bus 00-ff] end is updated to 00 Aug 13 00:03:00.505051 kernel: pci 84b4:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Aug 13 00:03:00.541883 kernel: mlx5_core 84b4:00:02.0: enabling device (0000 -> 0002) Aug 13 00:03:00.854175 kernel: mlx5_core 84b4:00:02.0: firmware version: 16.31.2424 Aug 13 00:03:00.854295 kernel: mlx5_core 84b4:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Aug 13 00:03:00.854376 kernel: hv_netvsc 000d3a6d-2095-000d-3a6d-2095000d3a6d eth0: VF registering: eth1 Aug 13 00:03:00.854486 kernel: mlx5_core 84b4:00:02.0 eth1: joined to eth0 Aug 13 00:03:00.833364 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Aug 13 00:03:00.866101 kernel: mlx5_core 84b4:00:02.0 enP33972s1: renamed from eth1 Aug 13 00:03:00.926115 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (533) Aug 13 00:03:00.938700 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 00:03:01.060862 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Aug 13 00:03:01.072273 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Aug 13 00:03:01.080235 systemd[1]: Starting disk-uuid.service... Aug 13 00:03:01.153746 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Aug 13 00:03:02.115511 disk-uuid[601]: The operation has completed successfully. Aug 13 00:03:02.120431 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Aug 13 00:03:02.170570 systemd[1]: disk-uuid.service: Deactivated successfully. Aug 13 00:03:02.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.170665 systemd[1]: Finished disk-uuid.service. Aug 13 00:03:02.180023 systemd[1]: Starting verity-setup.service... Aug 13 00:03:02.224117 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Aug 13 00:03:02.397932 systemd[1]: Found device dev-mapper-usr.device. Aug 13 00:03:02.404492 systemd[1]: Mounting sysusr-usr.mount... Aug 13 00:03:02.414897 systemd[1]: Finished verity-setup.service. Aug 13 00:03:02.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.472114 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Aug 13 00:03:02.472600 systemd[1]: Mounted sysusr-usr.mount. Aug 13 00:03:02.476494 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Aug 13 00:03:02.477299 systemd[1]: Starting ignition-setup.service... Aug 13 00:03:02.492488 systemd[1]: Starting parse-ip-for-networkd.service... Aug 13 00:03:02.518004 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Aug 13 00:03:02.518037 kernel: BTRFS info (device sda6): using free space tree Aug 13 00:03:02.518046 kernel: BTRFS info (device sda6): has skinny extents Aug 13 00:03:02.581144 systemd[1]: Finished parse-ip-for-networkd.service. Aug 13 00:03:02.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.590000 audit: BPF prog-id=9 op=LOAD Aug 13 00:03:02.588313 systemd[1]: mnt-oem.mount: Deactivated successfully. Aug 13 00:03:02.590880 systemd[1]: Starting systemd-networkd.service... Aug 13 00:03:02.628025 systemd-networkd[875]: lo: Link UP Aug 13 00:03:02.628035 systemd-networkd[875]: lo: Gained carrier Aug 13 00:03:02.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.628819 systemd-networkd[875]: Enumeration completed Aug 13 00:03:02.631536 systemd[1]: Started systemd-networkd.service. Aug 13 00:03:02.632215 systemd-networkd[875]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 00:03:02.636194 systemd[1]: Reached target network.target. Aug 13 00:03:02.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.644500 systemd[1]: Starting iscsiuio.service... Aug 13 00:03:02.657837 systemd[1]: Started iscsiuio.service. Aug 13 00:03:02.671051 systemd[1]: Starting iscsid.service... Aug 13 00:03:02.692247 iscsid[880]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Aug 13 00:03:02.692247 iscsid[880]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Aug 13 00:03:02.692247 iscsid[880]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Aug 13 00:03:02.692247 iscsid[880]: If using hardware iscsi like qla4xxx this message can be ignored. Aug 13 00:03:02.692247 iscsid[880]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Aug 13 00:03:02.692247 iscsid[880]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Aug 13 00:03:02.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.689312 systemd[1]: Started iscsid.service. Aug 13 00:03:02.696538 systemd[1]: Finished ignition-setup.service. Aug 13 00:03:02.709100 systemd[1]: Starting dracut-initqueue.service... Aug 13 00:03:02.742687 systemd[1]: Starting ignition-fetch-offline.service... Aug 13 00:03:02.753484 systemd[1]: Finished dracut-initqueue.service. Aug 13 00:03:02.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:02.763973 systemd[1]: Reached target remote-fs-pre.target. Aug 13 00:03:02.768510 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 00:03:02.780025 systemd[1]: Reached target remote-fs.target. Aug 13 00:03:02.791819 systemd[1]: Starting dracut-pre-mount.service... Aug 13 00:03:02.812184 systemd[1]: Finished dracut-pre-mount.service. Aug 13 00:03:02.878100 kernel: mlx5_core 84b4:00:02.0 enP33972s1: Link up Aug 13 00:03:02.955097 kernel: hv_netvsc 000d3a6d-2095-000d-3a6d-2095000d3a6d eth0: Data path switched to VF: enP33972s1 Aug 13 00:03:02.955277 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:03:02.960025 systemd-networkd[875]: enP33972s1: Link UP Aug 13 00:03:02.962348 systemd-networkd[875]: eth0: Link UP Aug 13 00:03:02.962487 systemd-networkd[875]: eth0: Gained carrier Aug 13 00:03:02.968271 systemd-networkd[875]: enP33972s1: Gained carrier Aug 13 00:03:02.982180 systemd-networkd[875]: eth0: DHCPv4 address 10.200.20.20/24, gateway 10.200.20.1 acquired from 168.63.129.16 Aug 13 00:03:04.214230 systemd-networkd[875]: eth0: Gained IPv6LL Aug 13 00:03:05.343441 ignition[884]: Ignition 2.14.0 Aug 13 00:03:05.343459 ignition[884]: Stage: fetch-offline Aug 13 00:03:05.343537 ignition[884]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:03:05.343576 ignition[884]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Aug 13 00:03:05.410039 ignition[884]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Aug 13 00:03:05.410222 ignition[884]: parsed url from cmdline: "" Aug 13 00:03:05.410225 ignition[884]: no config URL provided Aug 13 00:03:05.410230 ignition[884]: reading system config file "/usr/lib/ignition/user.ign" Aug 13 00:03:05.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.424242 systemd[1]: Finished ignition-fetch-offline.service. Aug 13 00:03:05.470470 kernel: kauditd_printk_skb: 18 callbacks suppressed Aug 13 00:03:05.470493 kernel: audit: type=1130 audit(1755043385.432:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.410239 ignition[884]: no config at "/usr/lib/ignition/user.ign" Aug 13 00:03:05.442681 systemd[1]: Starting ignition-fetch.service... Aug 13 00:03:05.410245 ignition[884]: failed to fetch config: resource requires networking Aug 13 00:03:05.410479 ignition[884]: Ignition finished successfully Aug 13 00:03:05.450027 ignition[902]: Ignition 2.14.0 Aug 13 00:03:05.450034 ignition[902]: Stage: fetch Aug 13 00:03:05.450160 ignition[902]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:03:05.450180 ignition[902]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Aug 13 00:03:05.454436 ignition[902]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Aug 13 00:03:05.454658 ignition[902]: parsed url from cmdline: "" Aug 13 00:03:05.454663 ignition[902]: no config URL provided Aug 13 00:03:05.454668 ignition[902]: reading system config file "/usr/lib/ignition/user.ign" Aug 13 00:03:05.454676 ignition[902]: no config at "/usr/lib/ignition/user.ign" Aug 13 00:03:05.454734 ignition[902]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Aug 13 00:03:05.605734 ignition[902]: GET result: OK Aug 13 00:03:05.605919 ignition[902]: config has been read from IMDS userdata Aug 13 00:03:05.606026 ignition[902]: parsing config with SHA512: 363308ed1227129c09f1d3a802a7a398892c373ef133d5b8655ed7c984e7a143017fa42a7eb5e182b4a2506759e236664b6e7bdf29dffc4a8a6653f1114175f7 Aug 13 00:03:05.610251 unknown[902]: fetched base config from "system" Aug 13 00:03:05.610859 ignition[902]: fetch: fetch complete Aug 13 00:03:05.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.610258 unknown[902]: fetched base config from "system" Aug 13 00:03:05.650105 kernel: audit: type=1130 audit(1755043385.622:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.610865 ignition[902]: fetch: fetch passed Aug 13 00:03:05.610264 unknown[902]: fetched user config from "azure" Aug 13 00:03:05.610918 ignition[902]: Ignition finished successfully Aug 13 00:03:05.614625 systemd[1]: Finished ignition-fetch.service. Aug 13 00:03:05.652893 ignition[908]: Ignition 2.14.0 Aug 13 00:03:05.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.623862 systemd[1]: Starting ignition-kargs.service... Aug 13 00:03:05.652900 ignition[908]: Stage: kargs Aug 13 00:03:05.725920 kernel: audit: type=1130 audit(1755043385.670:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.725946 kernel: audit: type=1130 audit(1755043385.701:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.662801 systemd[1]: Finished ignition-kargs.service. Aug 13 00:03:05.653006 ignition[908]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:03:05.672015 systemd[1]: Starting ignition-disks.service... Aug 13 00:03:05.653026 ignition[908]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Aug 13 00:03:05.697632 systemd[1]: Finished ignition-disks.service. Aug 13 00:03:05.655723 ignition[908]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Aug 13 00:03:05.702272 systemd[1]: Reached target initrd-root-device.target. Aug 13 00:03:05.658729 ignition[908]: kargs: kargs passed Aug 13 00:03:05.726136 systemd[1]: Reached target local-fs-pre.target. Aug 13 00:03:05.658786 ignition[908]: Ignition finished successfully Aug 13 00:03:05.734544 systemd[1]: Reached target local-fs.target. Aug 13 00:03:05.684798 ignition[914]: Ignition 2.14.0 Aug 13 00:03:05.744669 systemd[1]: Reached target sysinit.target. Aug 13 00:03:05.684805 ignition[914]: Stage: disks Aug 13 00:03:05.755061 systemd[1]: Reached target basic.target. Aug 13 00:03:05.684919 ignition[914]: reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:03:05.765266 systemd[1]: Starting systemd-fsck-root.service... Aug 13 00:03:05.684942 ignition[914]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Aug 13 00:03:05.688887 ignition[914]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Aug 13 00:03:05.696705 ignition[914]: disks: disks passed Aug 13 00:03:05.834473 systemd-fsck[922]: ROOT: clean, 629/7326000 files, 481082/7359488 blocks Aug 13 00:03:05.696774 ignition[914]: Ignition finished successfully Aug 13 00:03:05.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.849033 systemd[1]: Finished systemd-fsck-root.service. Aug 13 00:03:05.876426 kernel: audit: type=1130 audit(1755043385.854:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:05.871841 systemd[1]: Mounting sysroot.mount... Aug 13 00:03:05.902101 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Aug 13 00:03:05.900316 systemd[1]: Mounted sysroot.mount. Aug 13 00:03:05.904573 systemd[1]: Reached target initrd-root-fs.target. Aug 13 00:03:05.942883 systemd[1]: Mounting sysroot-usr.mount... Aug 13 00:03:05.947762 systemd[1]: Starting flatcar-metadata-hostname.service... Aug 13 00:03:05.955198 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Aug 13 00:03:05.955239 systemd[1]: Reached target ignition-diskful.target. Aug 13 00:03:05.967696 systemd[1]: Mounted sysroot-usr.mount. Aug 13 00:03:06.029165 systemd[1]: Mounting sysroot-usr-share-oem.mount... Aug 13 00:03:06.034529 systemd[1]: Starting initrd-setup-root.service... Aug 13 00:03:06.066604 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (933) Aug 13 00:03:06.066658 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Aug 13 00:03:06.066892 initrd-setup-root[938]: cut: /sysroot/etc/passwd: No such file or directory Aug 13 00:03:06.077746 kernel: BTRFS info (device sda6): using free space tree Aug 13 00:03:06.084663 kernel: BTRFS info (device sda6): has skinny extents Aug 13 00:03:06.088052 systemd[1]: Mounted sysroot-usr-share-oem.mount. Aug 13 00:03:06.102231 initrd-setup-root[964]: cut: /sysroot/etc/group: No such file or directory Aug 13 00:03:06.127299 initrd-setup-root[972]: cut: /sysroot/etc/shadow: No such file or directory Aug 13 00:03:06.136818 initrd-setup-root[980]: cut: /sysroot/etc/gshadow: No such file or directory Aug 13 00:03:06.528962 systemd[1]: Finished initrd-setup-root.service. Aug 13 00:03:06.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:06.552070 systemd[1]: Starting ignition-mount.service... Aug 13 00:03:06.563909 kernel: audit: type=1130 audit(1755043386.533:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:06.558155 systemd[1]: Starting sysroot-boot.service... Aug 13 00:03:06.568473 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Aug 13 00:03:06.568587 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Aug 13 00:03:06.596530 ignition[1000]: INFO : Ignition 2.14.0 Aug 13 00:03:06.600536 ignition[1000]: INFO : Stage: mount Aug 13 00:03:06.604877 ignition[1000]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:03:06.604877 ignition[1000]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Aug 13 00:03:06.626539 ignition[1000]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Aug 13 00:03:06.626539 ignition[1000]: INFO : mount: mount passed Aug 13 00:03:06.626539 ignition[1000]: INFO : Ignition finished successfully Aug 13 00:03:06.684899 kernel: audit: type=1130 audit(1755043386.637:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:06.684925 kernel: audit: type=1130 audit(1755043386.660:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:06.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:06.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:06.632780 systemd[1]: Finished ignition-mount.service. Aug 13 00:03:06.639625 systemd[1]: Finished sysroot-boot.service. Aug 13 00:03:07.210867 coreos-metadata[932]: Aug 13 00:03:07.210 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Aug 13 00:03:07.222182 coreos-metadata[932]: Aug 13 00:03:07.222 INFO Fetch successful Aug 13 00:03:07.256098 coreos-metadata[932]: Aug 13 00:03:07.256 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Aug 13 00:03:07.278887 coreos-metadata[932]: Aug 13 00:03:07.278 INFO Fetch successful Aug 13 00:03:07.299209 coreos-metadata[932]: Aug 13 00:03:07.299 INFO wrote hostname ci-3510.3.8-a-c7286a0eab to /sysroot/etc/hostname Aug 13 00:03:07.307998 systemd[1]: Finished flatcar-metadata-hostname.service. Aug 13 00:03:07.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:07.313996 systemd[1]: Starting ignition-files.service... Aug 13 00:03:07.340045 kernel: audit: type=1130 audit(1755043387.312:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:07.339533 systemd[1]: Mounting sysroot-usr-share-oem.mount... Aug 13 00:03:07.362055 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (1011) Aug 13 00:03:07.362106 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Aug 13 00:03:07.366678 kernel: BTRFS info (device sda6): using free space tree Aug 13 00:03:07.366689 kernel: BTRFS info (device sda6): has skinny extents Aug 13 00:03:07.375691 systemd[1]: Mounted sysroot-usr-share-oem.mount. Aug 13 00:03:07.389785 ignition[1030]: INFO : Ignition 2.14.0 Aug 13 00:03:07.389785 ignition[1030]: INFO : Stage: files Aug 13 00:03:07.398787 ignition[1030]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:03:07.398787 ignition[1030]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Aug 13 00:03:07.398787 ignition[1030]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Aug 13 00:03:07.398787 ignition[1030]: DEBUG : files: compiled without relabeling support, skipping Aug 13 00:03:07.398787 ignition[1030]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Aug 13 00:03:07.398787 ignition[1030]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Aug 13 00:03:07.486212 ignition[1030]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Aug 13 00:03:07.494806 ignition[1030]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Aug 13 00:03:07.494806 ignition[1030]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Aug 13 00:03:07.494243 unknown[1030]: wrote ssh authorized keys file for user: core Aug 13 00:03:07.514696 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Aug 13 00:03:07.514696 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Aug 13 00:03:07.637181 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Aug 13 00:03:07.731575 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Aug 13 00:03:07.744697 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Aug 13 00:03:07.744697 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Aug 13 00:03:07.744697 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Aug 13 00:03:07.744697 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Aug 13 00:03:07.744697 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 00:03:07.744697 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Aug 13 00:03:07.744697 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 00:03:07.744697 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3250838616" Aug 13 00:03:07.826113 ignition[1030]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3250838616": device or resource busy Aug 13 00:03:07.826113 ignition[1030]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3250838616", trying btrfs: device or resource busy Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3250838616" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3250838616" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem3250838616" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem3250838616" Aug 13 00:03:07.826113 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Aug 13 00:03:07.804287 systemd[1]: mnt-oem3250838616.mount: Deactivated successfully. Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem229114805" Aug 13 00:03:07.991443 ignition[1030]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem229114805": device or resource busy Aug 13 00:03:07.991443 ignition[1030]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem229114805", trying btrfs: device or resource busy Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem229114805" Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem229114805" Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem229114805" Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem229114805" Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Aug 13 00:03:07.991443 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Aug 13 00:03:08.367626 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Aug 13 00:03:08.804229 ignition[1030]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Aug 13 00:03:08.817521 ignition[1030]: INFO : files: op(13): [started] processing unit "nvidia.service" Aug 13 00:03:08.817521 ignition[1030]: INFO : files: op(13): [finished] processing unit "nvidia.service" Aug 13 00:03:08.817521 ignition[1030]: INFO : files: op(14): [started] processing unit "waagent.service" Aug 13 00:03:08.817521 ignition[1030]: INFO : files: op(14): [finished] processing unit "waagent.service" Aug 13 00:03:08.817521 ignition[1030]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Aug 13 00:03:08.817521 ignition[1030]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 00:03:08.817521 ignition[1030]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Aug 13 00:03:08.918610 kernel: audit: type=1130 audit(1755043388.829:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:08.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:08.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:08.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:08.918736 ignition[1030]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Aug 13 00:03:08.918736 ignition[1030]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Aug 13 00:03:08.918736 ignition[1030]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Aug 13 00:03:08.918736 ignition[1030]: INFO : files: op(18): [started] setting preset to enabled for "waagent.service" Aug 13 00:03:08.918736 ignition[1030]: INFO : files: op(18): [finished] setting preset to enabled for "waagent.service" Aug 13 00:03:08.918736 ignition[1030]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Aug 13 00:03:08.918736 ignition[1030]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Aug 13 00:03:08.918736 ignition[1030]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Aug 13 00:03:08.918736 ignition[1030]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Aug 13 00:03:08.918736 ignition[1030]: INFO : files: files passed Aug 13 00:03:08.918736 ignition[1030]: INFO : Ignition finished successfully Aug 13 00:03:08.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:08.825031 systemd[1]: Finished ignition-files.service. Aug 13 00:03:08.858239 systemd[1]: Starting initrd-setup-root-after-ignition.service... Aug 13 00:03:09.063543 initrd-setup-root-after-ignition[1055]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Aug 13 00:03:08.868062 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Aug 13 00:03:08.868886 systemd[1]: Starting ignition-quench.service... Aug 13 00:03:09.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:08.901413 systemd[1]: ignition-quench.service: Deactivated successfully. Aug 13 00:03:08.901538 systemd[1]: Finished ignition-quench.service. Aug 13 00:03:08.926459 systemd[1]: Finished initrd-setup-root-after-ignition.service. Aug 13 00:03:08.932532 systemd[1]: Reached target ignition-complete.target. Aug 13 00:03:08.947683 systemd[1]: Starting initrd-parse-etc.service... Aug 13 00:03:08.989693 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Aug 13 00:03:08.989790 systemd[1]: Finished initrd-parse-etc.service. Aug 13 00:03:09.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.001257 systemd[1]: Reached target initrd-fs.target. Aug 13 00:03:09.017490 systemd[1]: Reached target initrd.target. Aug 13 00:03:09.031961 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Aug 13 00:03:09.032904 systemd[1]: Starting dracut-pre-pivot.service... Aug 13 00:03:09.073127 systemd[1]: Finished dracut-pre-pivot.service. Aug 13 00:03:09.090014 systemd[1]: Starting initrd-cleanup.service... Aug 13 00:03:09.111150 systemd[1]: Stopped target nss-lookup.target. Aug 13 00:03:09.118807 systemd[1]: Stopped target remote-cryptsetup.target. Aug 13 00:03:09.128381 systemd[1]: Stopped target timers.target. Aug 13 00:03:09.136746 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Aug 13 00:03:09.136814 systemd[1]: Stopped dracut-pre-pivot.service. Aug 13 00:03:09.147483 systemd[1]: Stopped target initrd.target. Aug 13 00:03:09.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.156441 systemd[1]: Stopped target basic.target. Aug 13 00:03:09.164700 systemd[1]: Stopped target ignition-complete.target. Aug 13 00:03:09.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.173296 systemd[1]: Stopped target ignition-diskful.target. Aug 13 00:03:09.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.185155 systemd[1]: Stopped target initrd-root-device.target. Aug 13 00:03:09.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.195327 systemd[1]: Stopped target remote-fs.target. Aug 13 00:03:09.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.204239 systemd[1]: Stopped target remote-fs-pre.target. Aug 13 00:03:09.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.326468 iscsid[880]: iscsid shutting down. Aug 13 00:03:09.212862 systemd[1]: Stopped target sysinit.target. Aug 13 00:03:09.336908 ignition[1068]: INFO : Ignition 2.14.0 Aug 13 00:03:09.336908 ignition[1068]: INFO : Stage: umount Aug 13 00:03:09.336908 ignition[1068]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Aug 13 00:03:09.336908 ignition[1068]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Aug 13 00:03:09.336908 ignition[1068]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Aug 13 00:03:09.336908 ignition[1068]: INFO : umount: umount passed Aug 13 00:03:09.336908 ignition[1068]: INFO : Ignition finished successfully Aug 13 00:03:09.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.220567 systemd[1]: Stopped target local-fs.target. Aug 13 00:03:09.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.228865 systemd[1]: Stopped target local-fs-pre.target. Aug 13 00:03:09.236652 systemd[1]: Stopped target swap.target. Aug 13 00:03:09.247155 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Aug 13 00:03:09.247224 systemd[1]: Stopped dracut-pre-mount.service. Aug 13 00:03:09.256229 systemd[1]: Stopped target cryptsetup.target. Aug 13 00:03:09.263796 systemd[1]: dracut-initqueue.service: Deactivated successfully. Aug 13 00:03:09.263848 systemd[1]: Stopped dracut-initqueue.service. Aug 13 00:03:09.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.271549 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Aug 13 00:03:09.271593 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Aug 13 00:03:09.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.280828 systemd[1]: ignition-files.service: Deactivated successfully. Aug 13 00:03:09.280870 systemd[1]: Stopped ignition-files.service. Aug 13 00:03:09.289049 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Aug 13 00:03:09.289099 systemd[1]: Stopped flatcar-metadata-hostname.service. Aug 13 00:03:09.298661 systemd[1]: Stopping ignition-mount.service... Aug 13 00:03:09.308796 systemd[1]: Stopping iscsid.service... Aug 13 00:03:09.312629 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Aug 13 00:03:09.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.312696 systemd[1]: Stopped kmod-static-nodes.service. Aug 13 00:03:09.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.564000 audit: BPF prog-id=6 op=UNLOAD Aug 13 00:03:09.317893 systemd[1]: Stopping sysroot-boot.service... Aug 13 00:03:09.333344 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Aug 13 00:03:09.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.333424 systemd[1]: Stopped systemd-udev-trigger.service. Aug 13 00:03:09.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.341292 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Aug 13 00:03:09.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.341336 systemd[1]: Stopped dracut-pre-trigger.service. Aug 13 00:03:09.351494 systemd[1]: iscsid.service: Deactivated successfully. Aug 13 00:03:09.351626 systemd[1]: Stopped iscsid.service. Aug 13 00:03:09.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.359205 systemd[1]: initrd-cleanup.service: Deactivated successfully. Aug 13 00:03:09.359299 systemd[1]: Finished initrd-cleanup.service. Aug 13 00:03:09.377570 systemd[1]: sysroot-boot.mount: Deactivated successfully. Aug 13 00:03:09.378126 systemd[1]: ignition-mount.service: Deactivated successfully. Aug 13 00:03:09.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.379141 systemd[1]: Stopped ignition-mount.service. Aug 13 00:03:09.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.388470 systemd[1]: ignition-disks.service: Deactivated successfully. Aug 13 00:03:09.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.388517 systemd[1]: Stopped ignition-disks.service. Aug 13 00:03:09.392563 systemd[1]: ignition-kargs.service: Deactivated successfully. Aug 13 00:03:09.392599 systemd[1]: Stopped ignition-kargs.service. Aug 13 00:03:09.723184 kernel: hv_netvsc 000d3a6d-2095-000d-3a6d-2095000d3a6d eth0: Data path switched from VF: enP33972s1 Aug 13 00:03:09.404272 systemd[1]: ignition-fetch.service: Deactivated successfully. Aug 13 00:03:09.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.404307 systemd[1]: Stopped ignition-fetch.service. Aug 13 00:03:09.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.413542 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Aug 13 00:03:09.413580 systemd[1]: Stopped ignition-fetch-offline.service. Aug 13 00:03:09.422592 systemd[1]: Stopped target paths.target. Aug 13 00:03:09.430197 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Aug 13 00:03:09.437394 systemd[1]: Stopped systemd-ask-password-console.path. Aug 13 00:03:09.442168 systemd[1]: Stopped target slices.target. Aug 13 00:03:09.453136 systemd[1]: Stopped target sockets.target. Aug 13 00:03:09.461392 systemd[1]: iscsid.socket: Deactivated successfully. Aug 13 00:03:09.461437 systemd[1]: Closed iscsid.socket. Aug 13 00:03:09.468526 systemd[1]: ignition-setup.service: Deactivated successfully. Aug 13 00:03:09.468564 systemd[1]: Stopped ignition-setup.service. Aug 13 00:03:09.478012 systemd[1]: Stopping iscsiuio.service... Aug 13 00:03:09.486058 systemd[1]: iscsiuio.service: Deactivated successfully. Aug 13 00:03:09.486170 systemd[1]: Stopped iscsiuio.service. Aug 13 00:03:09.496152 systemd[1]: Stopped target network.target. Aug 13 00:03:09.511916 systemd[1]: iscsiuio.socket: Deactivated successfully. Aug 13 00:03:09.511964 systemd[1]: Closed iscsiuio.socket. Aug 13 00:03:09.519501 systemd[1]: Stopping systemd-networkd.service... Aug 13 00:03:09.529875 systemd[1]: Stopping systemd-resolved.service... Aug 13 00:03:09.540132 systemd-networkd[875]: eth0: DHCPv6 lease lost Aug 13 00:03:09.830000 audit: BPF prog-id=9 op=UNLOAD Aug 13 00:03:09.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:09.546960 systemd[1]: systemd-networkd.service: Deactivated successfully. Aug 13 00:03:09.547086 systemd[1]: Stopped systemd-networkd.service. Aug 13 00:03:09.554324 systemd[1]: systemd-resolved.service: Deactivated successfully. Aug 13 00:03:09.554428 systemd[1]: Stopped systemd-resolved.service. Aug 13 00:03:09.565638 systemd[1]: systemd-networkd.socket: Deactivated successfully. Aug 13 00:03:09.565673 systemd[1]: Closed systemd-networkd.socket. Aug 13 00:03:09.575143 systemd[1]: Stopping network-cleanup.service... Aug 13 00:03:09.582454 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Aug 13 00:03:09.582514 systemd[1]: Stopped parse-ip-for-networkd.service. Aug 13 00:03:09.587302 systemd[1]: systemd-sysctl.service: Deactivated successfully. Aug 13 00:03:09.587354 systemd[1]: Stopped systemd-sysctl.service. Aug 13 00:03:09.600122 systemd[1]: systemd-modules-load.service: Deactivated successfully. Aug 13 00:03:09.600164 systemd[1]: Stopped systemd-modules-load.service. Aug 13 00:03:09.607509 systemd[1]: Stopping systemd-udevd.service... Aug 13 00:03:09.619223 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Aug 13 00:03:09.623953 systemd[1]: systemd-udevd.service: Deactivated successfully. Aug 13 00:03:09.624118 systemd[1]: Stopped systemd-udevd.service. Aug 13 00:03:09.633533 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Aug 13 00:03:09.633577 systemd[1]: Closed systemd-udevd-control.socket. Aug 13 00:03:09.641653 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Aug 13 00:03:09.641691 systemd[1]: Closed systemd-udevd-kernel.socket. Aug 13 00:03:09.653324 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Aug 13 00:03:09.653378 systemd[1]: Stopped dracut-pre-udev.service. Aug 13 00:03:09.669230 systemd[1]: dracut-cmdline.service: Deactivated successfully. Aug 13 00:03:09.669278 systemd[1]: Stopped dracut-cmdline.service. Aug 13 00:03:09.678670 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Aug 13 00:03:09.678713 systemd[1]: Stopped dracut-cmdline-ask.service. Aug 13 00:03:09.692585 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Aug 13 00:03:09.718388 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Aug 13 00:03:09.718466 systemd[1]: Stopped systemd-vconsole-setup.service. Aug 13 00:03:09.727837 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Aug 13 00:03:09.727938 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Aug 13 00:03:09.825921 systemd[1]: network-cleanup.service: Deactivated successfully. Aug 13 00:03:09.826061 systemd[1]: Stopped network-cleanup.service. Aug 13 00:03:10.011254 systemd[1]: sysroot-boot.service: Deactivated successfully. Aug 13 00:03:10.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:10.011369 systemd[1]: Stopped sysroot-boot.service. Aug 13 00:03:10.018431 systemd[1]: Reached target initrd-switch-root.target. Aug 13 00:03:10.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:10.027673 systemd[1]: initrd-setup-root.service: Deactivated successfully. Aug 13 00:03:10.027730 systemd[1]: Stopped initrd-setup-root.service. Aug 13 00:03:10.036213 systemd[1]: Starting initrd-switch-root.service... Aug 13 00:03:10.056210 systemd[1]: Switching root. Aug 13 00:03:10.082708 systemd-journald[276]: Journal stopped Aug 13 00:03:20.732164 systemd-journald[276]: Received SIGTERM from PID 1 (systemd). Aug 13 00:03:20.732320 kernel: mlx5_core 84b4:00:02.0: poll_health:739:(pid 0): device's health compromised - reached miss count Aug 13 00:03:20.732338 kernel: SELinux: Class mctp_socket not defined in policy. Aug 13 00:03:20.732347 kernel: SELinux: Class anon_inode not defined in policy. Aug 13 00:03:20.732355 kernel: SELinux: the above unknown classes and permissions will be allowed Aug 13 00:03:20.732363 kernel: SELinux: policy capability network_peer_controls=1 Aug 13 00:03:20.732373 kernel: SELinux: policy capability open_perms=1 Aug 13 00:03:20.732382 kernel: SELinux: policy capability extended_socket_class=1 Aug 13 00:03:20.732390 kernel: SELinux: policy capability always_check_network=0 Aug 13 00:03:20.732399 kernel: SELinux: policy capability cgroup_seclabel=1 Aug 13 00:03:20.732408 kernel: SELinux: policy capability nnp_nosuid_transition=1 Aug 13 00:03:20.732416 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Aug 13 00:03:20.732425 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Aug 13 00:03:20.732434 kernel: kauditd_printk_skb: 42 callbacks suppressed Aug 13 00:03:20.732443 kernel: audit: type=1403 audit(1755043392.167:81): auid=4294967295 ses=4294967295 lsm=selinux res=1 Aug 13 00:03:20.732454 systemd[1]: Successfully loaded SELinux policy in 260.530ms. Aug 13 00:03:20.732465 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 23.478ms. Aug 13 00:03:20.732476 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Aug 13 00:03:20.732486 systemd[1]: Detected virtualization microsoft. Aug 13 00:03:20.732495 systemd[1]: Detected architecture arm64. Aug 13 00:03:20.732505 systemd[1]: Detected first boot. Aug 13 00:03:20.732516 systemd[1]: Hostname set to . Aug 13 00:03:20.732525 systemd[1]: Initializing machine ID from random generator. Aug 13 00:03:20.732534 kernel: audit: type=1400 audit(1755043392.808:82): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:03:20.732544 kernel: audit: type=1400 audit(1755043392.808:83): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:03:20.732552 kernel: audit: type=1334 audit(1755043392.824:84): prog-id=10 op=LOAD Aug 13 00:03:20.732561 kernel: audit: type=1334 audit(1755043392.824:85): prog-id=10 op=UNLOAD Aug 13 00:03:20.732571 kernel: audit: type=1334 audit(1755043392.839:86): prog-id=11 op=LOAD Aug 13 00:03:20.732580 kernel: audit: type=1334 audit(1755043392.839:87): prog-id=11 op=UNLOAD Aug 13 00:03:20.732589 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Aug 13 00:03:20.732598 kernel: audit: type=1400 audit(1755043394.018:88): avc: denied { associate } for pid=1101 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Aug 13 00:03:20.732609 kernel: audit: type=1300 audit(1755043394.018:88): arch=c00000b7 syscall=5 success=yes exit=0 a0=400014589c a1=40000c6df8 a2=40000cd0c0 a3=32 items=0 ppid=1084 pid=1101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:20.732619 kernel: audit: type=1327 audit(1755043394.018:88): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 00:03:20.732628 systemd[1]: Populated /etc with preset unit settings. Aug 13 00:03:20.732638 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:03:20.732648 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:03:20.732658 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:03:20.732667 kernel: kauditd_printk_skb: 6 callbacks suppressed Aug 13 00:03:20.732676 kernel: audit: type=1334 audit(1755043400.035:90): prog-id=12 op=LOAD Aug 13 00:03:20.732685 kernel: audit: type=1334 audit(1755043400.035:91): prog-id=3 op=UNLOAD Aug 13 00:03:20.732696 kernel: audit: type=1334 audit(1755043400.041:92): prog-id=13 op=LOAD Aug 13 00:03:20.732705 kernel: audit: type=1334 audit(1755043400.046:93): prog-id=14 op=LOAD Aug 13 00:03:20.732715 kernel: audit: type=1334 audit(1755043400.046:94): prog-id=4 op=UNLOAD Aug 13 00:03:20.732724 systemd[1]: initrd-switch-root.service: Deactivated successfully. Aug 13 00:03:20.732733 kernel: audit: type=1334 audit(1755043400.046:95): prog-id=5 op=UNLOAD Aug 13 00:03:20.732742 systemd[1]: Stopped initrd-switch-root.service. Aug 13 00:03:20.732752 kernel: audit: type=1334 audit(1755043400.052:96): prog-id=15 op=LOAD Aug 13 00:03:20.732761 kernel: audit: type=1334 audit(1755043400.052:97): prog-id=12 op=UNLOAD Aug 13 00:03:20.732771 kernel: audit: type=1334 audit(1755043400.057:98): prog-id=16 op=LOAD Aug 13 00:03:20.732782 kernel: audit: type=1334 audit(1755043400.062:99): prog-id=17 op=LOAD Aug 13 00:03:20.732791 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Aug 13 00:03:20.732801 systemd[1]: Created slice system-addon\x2dconfig.slice. Aug 13 00:03:20.732810 systemd[1]: Created slice system-addon\x2drun.slice. Aug 13 00:03:20.732819 systemd[1]: Created slice system-getty.slice. Aug 13 00:03:20.732829 systemd[1]: Created slice system-modprobe.slice. Aug 13 00:03:20.732838 systemd[1]: Created slice system-serial\x2dgetty.slice. Aug 13 00:03:20.732848 systemd[1]: Created slice system-system\x2dcloudinit.slice. Aug 13 00:03:20.732858 systemd[1]: Created slice system-systemd\x2dfsck.slice. Aug 13 00:03:20.732868 systemd[1]: Created slice user.slice. Aug 13 00:03:20.732878 systemd[1]: Started systemd-ask-password-console.path. Aug 13 00:03:20.732887 systemd[1]: Started systemd-ask-password-wall.path. Aug 13 00:03:20.732897 systemd[1]: Set up automount boot.automount. Aug 13 00:03:20.732906 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Aug 13 00:03:20.732915 systemd[1]: Stopped target initrd-switch-root.target. Aug 13 00:03:20.732925 systemd[1]: Stopped target initrd-fs.target. Aug 13 00:03:20.732935 systemd[1]: Stopped target initrd-root-fs.target. Aug 13 00:03:20.732945 systemd[1]: Reached target integritysetup.target. Aug 13 00:03:20.732956 systemd[1]: Reached target remote-cryptsetup.target. Aug 13 00:03:20.732966 systemd[1]: Reached target remote-fs.target. Aug 13 00:03:20.732975 systemd[1]: Reached target slices.target. Aug 13 00:03:20.732985 systemd[1]: Reached target swap.target. Aug 13 00:03:20.732994 systemd[1]: Reached target torcx.target. Aug 13 00:03:20.733004 systemd[1]: Reached target veritysetup.target. Aug 13 00:03:20.733013 systemd[1]: Listening on systemd-coredump.socket. Aug 13 00:03:20.733023 systemd[1]: Listening on systemd-initctl.socket. Aug 13 00:03:20.733033 systemd[1]: Listening on systemd-networkd.socket. Aug 13 00:03:20.733043 systemd[1]: Listening on systemd-udevd-control.socket. Aug 13 00:03:20.733053 systemd[1]: Listening on systemd-udevd-kernel.socket. Aug 13 00:03:20.733062 systemd[1]: Listening on systemd-userdbd.socket. Aug 13 00:03:20.733072 systemd[1]: Mounting dev-hugepages.mount... Aug 13 00:03:20.733093 systemd[1]: Mounting dev-mqueue.mount... Aug 13 00:03:20.733103 systemd[1]: Mounting media.mount... Aug 13 00:03:20.733112 systemd[1]: Mounting sys-kernel-debug.mount... Aug 13 00:03:20.733122 systemd[1]: Mounting sys-kernel-tracing.mount... Aug 13 00:03:20.733132 systemd[1]: Mounting tmp.mount... Aug 13 00:03:20.733142 systemd[1]: Starting flatcar-tmpfiles.service... Aug 13 00:03:20.733152 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:03:20.733161 systemd[1]: Starting kmod-static-nodes.service... Aug 13 00:03:20.733171 systemd[1]: Starting modprobe@configfs.service... Aug 13 00:03:20.733183 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:03:20.733194 systemd[1]: Starting modprobe@drm.service... Aug 13 00:03:20.733204 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:03:20.733213 systemd[1]: Starting modprobe@fuse.service... Aug 13 00:03:20.733223 systemd[1]: Starting modprobe@loop.service... Aug 13 00:03:20.733233 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Aug 13 00:03:20.733242 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Aug 13 00:03:20.733252 systemd[1]: Stopped systemd-fsck-root.service. Aug 13 00:03:20.733263 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Aug 13 00:03:20.733272 systemd[1]: Stopped systemd-fsck-usr.service. Aug 13 00:03:20.733282 systemd[1]: Stopped systemd-journald.service. Aug 13 00:03:20.733291 systemd[1]: systemd-journald.service: Consumed 3.060s CPU time. Aug 13 00:03:20.733301 kernel: loop: module loaded Aug 13 00:03:20.733310 systemd[1]: Starting systemd-journald.service... Aug 13 00:03:20.733320 systemd[1]: Starting systemd-modules-load.service... Aug 13 00:03:20.733329 kernel: fuse: init (API version 7.34) Aug 13 00:03:20.733338 systemd[1]: Starting systemd-network-generator.service... Aug 13 00:03:20.733349 systemd[1]: Starting systemd-remount-fs.service... Aug 13 00:03:20.733359 systemd[1]: Starting systemd-udev-trigger.service... Aug 13 00:03:20.733369 systemd[1]: verity-setup.service: Deactivated successfully. Aug 13 00:03:20.733378 systemd[1]: Stopped verity-setup.service. Aug 13 00:03:20.733388 systemd[1]: Mounted dev-hugepages.mount. Aug 13 00:03:20.733399 systemd[1]: Mounted dev-mqueue.mount. Aug 13 00:03:20.733408 systemd[1]: Mounted media.mount. Aug 13 00:03:20.733418 systemd[1]: Mounted sys-kernel-debug.mount. Aug 13 00:03:20.733427 systemd[1]: Mounted sys-kernel-tracing.mount. Aug 13 00:03:20.733442 systemd-journald[1191]: Journal started Aug 13 00:03:20.733484 systemd-journald[1191]: Runtime Journal (/run/log/journal/30df13b4c58345a3a2fbdbdad376178e) is 8.0M, max 78.5M, 70.5M free. Aug 13 00:03:12.167000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Aug 13 00:03:12.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:03:12.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Aug 13 00:03:12.824000 audit: BPF prog-id=10 op=LOAD Aug 13 00:03:12.824000 audit: BPF prog-id=10 op=UNLOAD Aug 13 00:03:12.839000 audit: BPF prog-id=11 op=LOAD Aug 13 00:03:12.839000 audit: BPF prog-id=11 op=UNLOAD Aug 13 00:03:14.018000 audit[1101]: AVC avc: denied { associate } for pid=1101 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Aug 13 00:03:14.018000 audit[1101]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400014589c a1=40000c6df8 a2=40000cd0c0 a3=32 items=0 ppid=1084 pid=1101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:14.018000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 00:03:14.049000 audit[1101]: AVC avc: denied { associate } for pid=1101 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Aug 13 00:03:14.049000 audit[1101]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145975 a2=1ed a3=0 items=2 ppid=1084 pid=1101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:14.049000 audit: CWD cwd="/" Aug 13 00:03:14.049000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:14.049000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:14.049000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Aug 13 00:03:20.035000 audit: BPF prog-id=12 op=LOAD Aug 13 00:03:20.035000 audit: BPF prog-id=3 op=UNLOAD Aug 13 00:03:20.041000 audit: BPF prog-id=13 op=LOAD Aug 13 00:03:20.046000 audit: BPF prog-id=14 op=LOAD Aug 13 00:03:20.046000 audit: BPF prog-id=4 op=UNLOAD Aug 13 00:03:20.046000 audit: BPF prog-id=5 op=UNLOAD Aug 13 00:03:20.052000 audit: BPF prog-id=15 op=LOAD Aug 13 00:03:20.052000 audit: BPF prog-id=12 op=UNLOAD Aug 13 00:03:20.057000 audit: BPF prog-id=16 op=LOAD Aug 13 00:03:20.062000 audit: BPF prog-id=17 op=LOAD Aug 13 00:03:20.062000 audit: BPF prog-id=13 op=UNLOAD Aug 13 00:03:20.062000 audit: BPF prog-id=14 op=UNLOAD Aug 13 00:03:20.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.095000 audit: BPF prog-id=15 op=UNLOAD Aug 13 00:03:20.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.608000 audit: BPF prog-id=18 op=LOAD Aug 13 00:03:20.608000 audit: BPF prog-id=19 op=LOAD Aug 13 00:03:20.608000 audit: BPF prog-id=20 op=LOAD Aug 13 00:03:20.608000 audit: BPF prog-id=16 op=UNLOAD Aug 13 00:03:20.608000 audit: BPF prog-id=17 op=UNLOAD Aug 13 00:03:20.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.729000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Aug 13 00:03:20.729000 audit[1191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffc07d6140 a2=4000 a3=1 items=0 ppid=1 pid=1191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:20.729000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Aug 13 00:03:20.033809 systemd[1]: Queued start job for default target multi-user.target. Aug 13 00:03:13.967497 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:03:20.033820 systemd[1]: Unnecessary job was removed for dev-sda6.device. Aug 13 00:03:13.967834 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 00:03:20.063520 systemd[1]: systemd-journald.service: Deactivated successfully. Aug 13 00:03:13.967853 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 00:03:20.063886 systemd[1]: systemd-journald.service: Consumed 3.060s CPU time. Aug 13 00:03:13.967891 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Aug 13 00:03:13.967901 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=debug msg="skipped missing lower profile" missing profile=oem Aug 13 00:03:13.967930 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Aug 13 00:03:13.967942 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Aug 13 00:03:13.968179 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Aug 13 00:03:13.968215 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Aug 13 00:03:13.968226 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:13Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Aug 13 00:03:14.003274 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:14Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Aug 13 00:03:14.003316 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:14Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Aug 13 00:03:14.003338 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:14Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Aug 13 00:03:14.003354 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:14Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Aug 13 00:03:14.003375 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:14Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Aug 13 00:03:14.003388 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:14Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Aug 13 00:03:19.117775 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:19Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:03:19.118036 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:19Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:03:19.118161 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:19Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:03:19.118328 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:19Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Aug 13 00:03:19.118376 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:19Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Aug 13 00:03:19.118435 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-08-13T00:03:19Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Aug 13 00:03:20.742838 systemd[1]: Started systemd-journald.service. Aug 13 00:03:20.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.743623 systemd[1]: Mounted tmp.mount. Aug 13 00:03:20.748216 systemd[1]: Finished flatcar-tmpfiles.service. Aug 13 00:03:20.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.753869 systemd[1]: Finished kmod-static-nodes.service. Aug 13 00:03:20.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.759484 systemd[1]: modprobe@configfs.service: Deactivated successfully. Aug 13 00:03:20.759642 systemd[1]: Finished modprobe@configfs.service. Aug 13 00:03:20.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.765412 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:03:20.765559 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:03:20.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.770990 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 00:03:20.771167 systemd[1]: Finished modprobe@drm.service. Aug 13 00:03:20.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.776373 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:03:20.776631 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:03:20.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.781860 systemd[1]: modprobe@fuse.service: Deactivated successfully. Aug 13 00:03:20.782034 systemd[1]: Finished modprobe@fuse.service. Aug 13 00:03:20.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.786562 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:03:20.786744 systemd[1]: Finished modprobe@loop.service. Aug 13 00:03:20.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.791509 systemd[1]: Finished systemd-network-generator.service. Aug 13 00:03:20.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.798279 systemd[1]: Finished systemd-remount-fs.service. Aug 13 00:03:20.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.804221 systemd[1]: Reached target network-pre.target. Aug 13 00:03:20.810459 systemd[1]: Mounting sys-fs-fuse-connections.mount... Aug 13 00:03:20.815898 systemd[1]: Mounting sys-kernel-config.mount... Aug 13 00:03:20.819783 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Aug 13 00:03:20.865118 systemd[1]: Starting systemd-hwdb-update.service... Aug 13 00:03:20.870619 systemd[1]: Starting systemd-journal-flush.service... Aug 13 00:03:20.876268 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:03:20.877703 systemd[1]: Starting systemd-random-seed.service... Aug 13 00:03:20.882329 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:03:20.883665 systemd[1]: Starting systemd-sysusers.service... Aug 13 00:03:20.890175 systemd[1]: Finished systemd-modules-load.service. Aug 13 00:03:20.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.896332 systemd[1]: Finished systemd-udev-trigger.service. Aug 13 00:03:20.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.902105 systemd[1]: Mounted sys-fs-fuse-connections.mount. Aug 13 00:03:20.907529 systemd[1]: Mounted sys-kernel-config.mount. Aug 13 00:03:20.913506 systemd[1]: Starting systemd-sysctl.service... Aug 13 00:03:20.916005 systemd-journald[1191]: Time spent on flushing to /var/log/journal/30df13b4c58345a3a2fbdbdad376178e is 14.365ms for 1085 entries. Aug 13 00:03:20.916005 systemd-journald[1191]: System Journal (/var/log/journal/30df13b4c58345a3a2fbdbdad376178e) is 8.0M, max 2.6G, 2.6G free. Aug 13 00:03:21.023062 systemd-journald[1191]: Received client request to flush runtime journal. Aug 13 00:03:20.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:20.924514 systemd[1]: Starting systemd-udev-settle.service... Aug 13 00:03:20.960528 systemd[1]: Finished systemd-random-seed.service. Aug 13 00:03:21.024355 udevadm[1222]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Aug 13 00:03:20.966119 systemd[1]: Reached target first-boot-complete.target. Aug 13 00:03:21.024153 systemd[1]: Finished systemd-journal-flush.service. Aug 13 00:03:21.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:21.037636 systemd[1]: Finished systemd-sysctl.service. Aug 13 00:03:21.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:21.476876 systemd[1]: Finished systemd-sysusers.service. Aug 13 00:03:21.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:22.180132 systemd[1]: Finished systemd-hwdb-update.service. Aug 13 00:03:22.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:22.185000 audit: BPF prog-id=21 op=LOAD Aug 13 00:03:22.185000 audit: BPF prog-id=22 op=LOAD Aug 13 00:03:22.185000 audit: BPF prog-id=7 op=UNLOAD Aug 13 00:03:22.185000 audit: BPF prog-id=8 op=UNLOAD Aug 13 00:03:22.186307 systemd[1]: Starting systemd-udevd.service... Aug 13 00:03:22.204903 systemd-udevd[1225]: Using default interface naming scheme 'v252'. Aug 13 00:03:22.433662 systemd[1]: Started systemd-udevd.service. Aug 13 00:03:22.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:22.443000 audit: BPF prog-id=23 op=LOAD Aug 13 00:03:22.444326 systemd[1]: Starting systemd-networkd.service... Aug 13 00:03:22.473998 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Aug 13 00:03:22.484000 audit: BPF prog-id=24 op=LOAD Aug 13 00:03:22.484000 audit: BPF prog-id=25 op=LOAD Aug 13 00:03:22.484000 audit: BPF prog-id=26 op=LOAD Aug 13 00:03:22.485648 systemd[1]: Starting systemd-userdbd.service... Aug 13 00:03:22.533766 systemd[1]: Started systemd-userdbd.service. Aug 13 00:03:22.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:22.548000 audit[1236]: AVC avc: denied { confidentiality } for pid=1236 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Aug 13 00:03:22.555148 kernel: mousedev: PS/2 mouse device common for all mice Aug 13 00:03:22.555239 kernel: hv_vmbus: registering driver hv_balloon Aug 13 00:03:22.566882 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Aug 13 00:03:22.568171 kernel: hv_balloon: Memory hot add disabled on ARM64 Aug 13 00:03:22.548000 audit[1236]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaab1146e450 a1=aa2c a2=ffff9cdd24b0 a3=aaab113cb010 items=12 ppid=1225 pid=1236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:22.548000 audit: CWD cwd="/" Aug 13 00:03:22.548000 audit: PATH item=0 name=(null) inode=6143 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=1 name=(null) inode=9739 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=2 name=(null) inode=9739 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=3 name=(null) inode=9740 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=4 name=(null) inode=9739 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=5 name=(null) inode=9741 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=6 name=(null) inode=9739 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=7 name=(null) inode=9742 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=8 name=(null) inode=9739 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=9 name=(null) inode=9743 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=10 name=(null) inode=9739 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PATH item=11 name=(null) inode=9744 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:03:22.548000 audit: PROCTITLE proctitle="(udev-worker)" Aug 13 00:03:22.593117 kernel: hv_vmbus: registering driver hyperv_fb Aug 13 00:03:22.607376 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Aug 13 00:03:22.607478 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Aug 13 00:03:22.612067 kernel: Console: switching to colour dummy device 80x25 Aug 13 00:03:22.620677 kernel: Console: switching to colour frame buffer device 128x48 Aug 13 00:03:22.628985 kernel: hv_utils: Registering HyperV Utility Driver Aug 13 00:03:22.629198 kernel: hv_vmbus: registering driver hv_utils Aug 13 00:03:22.630107 kernel: hv_utils: Heartbeat IC version 3.0 Aug 13 00:03:22.630164 kernel: hv_utils: Shutdown IC version 3.2 Aug 13 00:03:22.641116 kernel: hv_utils: TimeSync IC version 4.0 Aug 13 00:03:23.250402 systemd-networkd[1245]: lo: Link UP Aug 13 00:03:23.250411 systemd-networkd[1245]: lo: Gained carrier Aug 13 00:03:23.250848 systemd-networkd[1245]: Enumeration completed Aug 13 00:03:23.250951 systemd[1]: Started systemd-networkd.service. Aug 13 00:03:23.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:23.256859 systemd[1]: Starting systemd-networkd-wait-online.service... Aug 13 00:03:23.278719 systemd-networkd[1245]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 00:03:23.310523 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Aug 13 00:03:23.316698 systemd[1]: Finished systemd-udev-settle.service. Aug 13 00:03:23.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:23.322521 systemd[1]: Starting lvm2-activation-early.service... Aug 13 00:03:23.337271 kernel: mlx5_core 84b4:00:02.0 enP33972s1: Link up Aug 13 00:03:23.382275 kernel: hv_netvsc 000d3a6d-2095-000d-3a6d-2095000d3a6d eth0: Data path switched to VF: enP33972s1 Aug 13 00:03:23.383339 systemd-networkd[1245]: enP33972s1: Link UP Aug 13 00:03:23.383438 systemd-networkd[1245]: eth0: Link UP Aug 13 00:03:23.383442 systemd-networkd[1245]: eth0: Gained carrier Aug 13 00:03:23.389573 systemd-networkd[1245]: enP33972s1: Gained carrier Aug 13 00:03:23.397374 systemd-networkd[1245]: eth0: DHCPv4 address 10.200.20.20/24, gateway 10.200.20.1 acquired from 168.63.129.16 Aug 13 00:03:23.585023 lvm[1303]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 00:03:23.630075 systemd[1]: Finished lvm2-activation-early.service. Aug 13 00:03:23.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:23.634943 systemd[1]: Reached target cryptsetup.target. Aug 13 00:03:23.640518 systemd[1]: Starting lvm2-activation.service... Aug 13 00:03:23.644700 lvm[1304]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Aug 13 00:03:23.665217 systemd[1]: Finished lvm2-activation.service. Aug 13 00:03:23.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:23.670017 systemd[1]: Reached target local-fs-pre.target. Aug 13 00:03:23.674773 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Aug 13 00:03:23.674808 systemd[1]: Reached target local-fs.target. Aug 13 00:03:23.679526 systemd[1]: Reached target machines.target. Aug 13 00:03:23.685424 systemd[1]: Starting ldconfig.service... Aug 13 00:03:23.707950 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:03:23.708026 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:03:23.709403 systemd[1]: Starting systemd-boot-update.service... Aug 13 00:03:23.714923 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Aug 13 00:03:23.721927 systemd[1]: Starting systemd-machine-id-commit.service... Aug 13 00:03:23.728679 systemd[1]: Starting systemd-sysext.service... Aug 13 00:03:23.763067 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1306 (bootctl) Aug 13 00:03:23.764479 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Aug 13 00:03:23.796556 systemd[1]: Unmounting usr-share-oem.mount... Aug 13 00:03:23.824229 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Aug 13 00:03:23.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:23.872481 systemd[1]: usr-share-oem.mount: Deactivated successfully. Aug 13 00:03:23.872741 systemd[1]: Unmounted usr-share-oem.mount. Aug 13 00:03:23.925294 kernel: loop0: detected capacity change from 0 to 211168 Aug 13 00:03:23.996340 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Aug 13 00:03:24.012273 kernel: loop1: detected capacity change from 0 to 211168 Aug 13 00:03:24.023611 (sd-sysext)[1318]: Using extensions 'kubernetes'. Aug 13 00:03:24.024501 (sd-sysext)[1318]: Merged extensions into '/usr'. Aug 13 00:03:24.033174 systemd-fsck[1314]: fsck.fat 4.2 (2021-01-31) Aug 13 00:03:24.033174 systemd-fsck[1314]: /dev/sda1: 236 files, 117307/258078 clusters Aug 13 00:03:24.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.035312 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Aug 13 00:03:24.045071 systemd[1]: Mounting boot.mount... Aug 13 00:03:24.057456 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Aug 13 00:03:24.058268 systemd[1]: Finished systemd-machine-id-commit.service. Aug 13 00:03:24.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.066018 systemd[1]: Mounted boot.mount. Aug 13 00:03:24.076148 systemd[1]: Mounting usr-share-oem.mount... Aug 13 00:03:24.081156 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:03:24.082651 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:03:24.088021 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:03:24.093453 systemd[1]: Starting modprobe@loop.service... Aug 13 00:03:24.097432 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:03:24.097660 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:03:24.100924 systemd[1]: Finished systemd-boot-update.service. Aug 13 00:03:24.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.106585 systemd[1]: Mounted usr-share-oem.mount. Aug 13 00:03:24.110862 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:03:24.111016 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:03:24.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.116135 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:03:24.116303 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:03:24.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.121639 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:03:24.121770 systemd[1]: Finished modprobe@loop.service. Aug 13 00:03:24.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.125000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.126681 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:03:24.126795 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:03:24.128069 systemd[1]: Finished systemd-sysext.service. Aug 13 00:03:24.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.133939 systemd[1]: Starting ensure-sysext.service... Aug 13 00:03:24.139092 systemd[1]: Starting systemd-tmpfiles-setup.service... Aug 13 00:03:24.145398 systemd[1]: Reloading. Aug 13 00:03:24.196613 /usr/lib/systemd/system-generators/torcx-generator[1348]: time="2025-08-13T00:03:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:03:24.197067 /usr/lib/systemd/system-generators/torcx-generator[1348]: time="2025-08-13T00:03:24Z" level=info msg="torcx already run" Aug 13 00:03:24.283330 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:03:24.283354 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:03:24.299356 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:03:24.322402 systemd-tmpfiles[1329]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Aug 13 00:03:24.364000 audit: BPF prog-id=27 op=LOAD Aug 13 00:03:24.364000 audit: BPF prog-id=24 op=UNLOAD Aug 13 00:03:24.364000 audit: BPF prog-id=28 op=LOAD Aug 13 00:03:24.364000 audit: BPF prog-id=29 op=LOAD Aug 13 00:03:24.364000 audit: BPF prog-id=25 op=UNLOAD Aug 13 00:03:24.364000 audit: BPF prog-id=26 op=UNLOAD Aug 13 00:03:24.365000 audit: BPF prog-id=30 op=LOAD Aug 13 00:03:24.365000 audit: BPF prog-id=31 op=LOAD Aug 13 00:03:24.365000 audit: BPF prog-id=21 op=UNLOAD Aug 13 00:03:24.365000 audit: BPF prog-id=22 op=UNLOAD Aug 13 00:03:24.367000 audit: BPF prog-id=32 op=LOAD Aug 13 00:03:24.367000 audit: BPF prog-id=18 op=UNLOAD Aug 13 00:03:24.367000 audit: BPF prog-id=33 op=LOAD Aug 13 00:03:24.367000 audit: BPF prog-id=34 op=LOAD Aug 13 00:03:24.367000 audit: BPF prog-id=19 op=UNLOAD Aug 13 00:03:24.367000 audit: BPF prog-id=20 op=UNLOAD Aug 13 00:03:24.367000 audit: BPF prog-id=35 op=LOAD Aug 13 00:03:24.367000 audit: BPF prog-id=23 op=UNLOAD Aug 13 00:03:24.386559 systemd[1]: Finished ensure-sysext.service. Aug 13 00:03:24.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.392568 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Aug 13 00:03:24.393973 systemd[1]: Starting modprobe@dm_mod.service... Aug 13 00:03:24.399567 systemd[1]: Starting modprobe@drm.service... Aug 13 00:03:24.405140 systemd[1]: Starting modprobe@efi_pstore.service... Aug 13 00:03:24.410868 systemd[1]: Starting modprobe@loop.service... Aug 13 00:03:24.415056 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Aug 13 00:03:24.415124 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:03:24.415849 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Aug 13 00:03:24.416037 systemd[1]: Finished modprobe@dm_mod.service. Aug 13 00:03:24.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.421078 systemd[1]: modprobe@drm.service: Deactivated successfully. Aug 13 00:03:24.421225 systemd[1]: Finished modprobe@drm.service. Aug 13 00:03:24.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.426322 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Aug 13 00:03:24.426463 systemd[1]: Finished modprobe@efi_pstore.service. Aug 13 00:03:24.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.431973 systemd[1]: modprobe@loop.service: Deactivated successfully. Aug 13 00:03:24.432099 systemd[1]: Finished modprobe@loop.service. Aug 13 00:03:24.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:24.437582 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Aug 13 00:03:24.437629 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Aug 13 00:03:24.446106 systemd-tmpfiles[1329]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Aug 13 00:03:24.511112 systemd-tmpfiles[1329]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Aug 13 00:03:25.075185 systemd[1]: Finished systemd-tmpfiles-setup.service. Aug 13 00:03:25.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:25.081382 systemd[1]: Starting audit-rules.service... Aug 13 00:03:25.085980 systemd[1]: Starting clean-ca-certificates.service... Aug 13 00:03:25.091456 systemd[1]: Starting systemd-journal-catalog-update.service... Aug 13 00:03:25.096000 audit: BPF prog-id=36 op=LOAD Aug 13 00:03:25.098795 systemd[1]: Starting systemd-resolved.service... Aug 13 00:03:25.102000 audit: BPF prog-id=37 op=LOAD Aug 13 00:03:25.105145 systemd[1]: Starting systemd-timesyncd.service... Aug 13 00:03:25.110874 systemd[1]: Starting systemd-update-utmp.service... Aug 13 00:03:25.137635 systemd[1]: Finished clean-ca-certificates.service. Aug 13 00:03:25.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:25.142342 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Aug 13 00:03:25.147000 audit[1420]: SYSTEM_BOOT pid=1420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Aug 13 00:03:25.151129 systemd[1]: Finished systemd-update-utmp.service. Aug 13 00:03:25.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:25.222395 systemd-networkd[1245]: eth0: Gained IPv6LL Aug 13 00:03:25.229243 systemd[1]: Finished systemd-networkd-wait-online.service. Aug 13 00:03:25.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:25.270034 systemd[1]: Finished systemd-journal-catalog-update.service. Aug 13 00:03:25.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:25.287039 systemd[1]: Started systemd-timesyncd.service. Aug 13 00:03:25.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:25.291523 systemd[1]: Reached target time-set.target. Aug 13 00:03:25.318505 systemd-resolved[1417]: Positive Trust Anchors: Aug 13 00:03:25.318898 systemd-resolved[1417]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Aug 13 00:03:25.318992 systemd-resolved[1417]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Aug 13 00:03:25.381738 systemd-resolved[1417]: Using system hostname 'ci-3510.3.8-a-c7286a0eab'. Aug 13 00:03:25.383726 systemd[1]: Started systemd-resolved.service. Aug 13 00:03:25.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:03:25.388326 systemd[1]: Reached target network.target. Aug 13 00:03:25.392422 systemd[1]: Reached target network-online.target. Aug 13 00:03:25.397829 systemd[1]: Reached target nss-lookup.target. Aug 13 00:03:25.473000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Aug 13 00:03:25.478360 kernel: kauditd_printk_skb: 121 callbacks suppressed Aug 13 00:03:25.478414 kernel: audit: type=1305 audit(1755043405.473:204): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Aug 13 00:03:25.473000 audit[1435]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe08f4ec0 a2=420 a3=0 items=0 ppid=1414 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.488538 augenrules[1435]: No rules Aug 13 00:03:25.513284 kernel: audit: type=1300 audit(1755043405.473:204): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe08f4ec0 a2=420 a3=0 items=0 ppid=1414 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:03:25.473000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Aug 13 00:03:25.514044 systemd[1]: Finished audit-rules.service. Aug 13 00:03:25.522828 kernel: audit: type=1327 audit(1755043405.473:204): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Aug 13 00:03:25.762324 systemd-timesyncd[1418]: Contacted time server 198.71.50.75:123 (0.flatcar.pool.ntp.org). Aug 13 00:03:25.762704 systemd-timesyncd[1418]: Initial clock synchronization to Wed 2025-08-13 00:03:25.766391 UTC. Aug 13 00:03:31.122258 ldconfig[1305]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Aug 13 00:03:31.146939 systemd[1]: Finished ldconfig.service. Aug 13 00:03:31.154163 systemd[1]: Starting systemd-update-done.service... Aug 13 00:03:31.180200 systemd[1]: Finished systemd-update-done.service. Aug 13 00:03:31.185056 systemd[1]: Reached target sysinit.target. Aug 13 00:03:31.189617 systemd[1]: Started motdgen.path. Aug 13 00:03:31.193537 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Aug 13 00:03:31.200626 systemd[1]: Started logrotate.timer. Aug 13 00:03:31.204735 systemd[1]: Started mdadm.timer. Aug 13 00:03:31.208606 systemd[1]: Started systemd-tmpfiles-clean.timer. Aug 13 00:03:31.213740 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Aug 13 00:03:31.213776 systemd[1]: Reached target paths.target. Aug 13 00:03:31.218074 systemd[1]: Reached target timers.target. Aug 13 00:03:31.222516 systemd[1]: Listening on dbus.socket. Aug 13 00:03:31.227372 systemd[1]: Starting docker.socket... Aug 13 00:03:31.233635 systemd[1]: Listening on sshd.socket. Aug 13 00:03:31.237459 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:03:31.237994 systemd[1]: Listening on docker.socket. Aug 13 00:03:31.241903 systemd[1]: Reached target sockets.target. Aug 13 00:03:31.246961 systemd[1]: Reached target basic.target. Aug 13 00:03:31.251420 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 00:03:31.251448 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Aug 13 00:03:31.252667 systemd[1]: Starting containerd.service... Aug 13 00:03:31.257805 systemd[1]: Starting dbus.service... Aug 13 00:03:31.262019 systemd[1]: Starting enable-oem-cloudinit.service... Aug 13 00:03:31.267165 systemd[1]: Starting extend-filesystems.service... Aug 13 00:03:31.273988 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Aug 13 00:03:31.289539 systemd[1]: Starting kubelet.service... Aug 13 00:03:31.295097 systemd[1]: Starting motdgen.service... Aug 13 00:03:31.300285 systemd[1]: Started nvidia.service. Aug 13 00:03:31.306768 systemd[1]: Starting prepare-helm.service... Aug 13 00:03:31.312720 systemd[1]: Starting ssh-key-proc-cmdline.service... Aug 13 00:03:31.319521 systemd[1]: Starting sshd-keygen.service... Aug 13 00:03:31.326289 jq[1445]: false Aug 13 00:03:31.326560 systemd[1]: Starting systemd-logind.service... Aug 13 00:03:31.330887 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Aug 13 00:03:31.330951 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Aug 13 00:03:31.331625 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Aug 13 00:03:31.332497 systemd[1]: Starting update-engine.service... Aug 13 00:03:31.337725 systemd[1]: Starting update-ssh-keys-after-ignition.service... Aug 13 00:03:31.346420 jq[1463]: true Aug 13 00:03:31.347691 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Aug 13 00:03:31.347892 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Aug 13 00:03:31.350685 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Aug 13 00:03:31.350863 systemd[1]: Finished ssh-key-proc-cmdline.service. Aug 13 00:03:31.358405 extend-filesystems[1446]: Found loop1 Aug 13 00:03:31.358405 extend-filesystems[1446]: Found sda Aug 13 00:03:31.358405 extend-filesystems[1446]: Found sda1 Aug 13 00:03:31.358405 extend-filesystems[1446]: Found sda2 Aug 13 00:03:31.358405 extend-filesystems[1446]: Found sda3 Aug 13 00:03:31.358405 extend-filesystems[1446]: Found usr Aug 13 00:03:31.358405 extend-filesystems[1446]: Found sda4 Aug 13 00:03:31.358405 extend-filesystems[1446]: Found sda6 Aug 13 00:03:31.377308 systemd[1]: motdgen.service: Deactivated successfully. Aug 13 00:03:31.418362 extend-filesystems[1446]: Found sda7 Aug 13 00:03:31.418362 extend-filesystems[1446]: Found sda9 Aug 13 00:03:31.418362 extend-filesystems[1446]: Checking size of /dev/sda9 Aug 13 00:03:31.377493 systemd[1]: Finished motdgen.service. Aug 13 00:03:31.434022 jq[1469]: true Aug 13 00:03:31.469213 extend-filesystems[1446]: Old size kept for /dev/sda9 Aug 13 00:03:31.482476 extend-filesystems[1446]: Found sr0 Aug 13 00:03:31.474218 systemd-logind[1458]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 13 00:03:31.492124 env[1470]: time="2025-08-13T00:03:31.489532365Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Aug 13 00:03:31.474635 systemd-logind[1458]: New seat seat0. Aug 13 00:03:31.474662 systemd[1]: extend-filesystems.service: Deactivated successfully. Aug 13 00:03:31.474871 systemd[1]: Finished extend-filesystems.service. Aug 13 00:03:31.495657 tar[1467]: linux-arm64/LICENSE Aug 13 00:03:31.495657 tar[1467]: linux-arm64/helm Aug 13 00:03:31.557694 env[1470]: time="2025-08-13T00:03:31.557636251Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Aug 13 00:03:31.563215 env[1470]: time="2025-08-13T00:03:31.563164340Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:03:31.565288 env[1470]: time="2025-08-13T00:03:31.565155358Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.189-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Aug 13 00:03:31.565416 env[1470]: time="2025-08-13T00:03:31.565399845Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:03:31.565812 env[1470]: time="2025-08-13T00:03:31.565788919Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 00:03:31.565906 env[1470]: time="2025-08-13T00:03:31.565892538Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Aug 13 00:03:31.566027 env[1470]: time="2025-08-13T00:03:31.566010201Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Aug 13 00:03:31.566089 env[1470]: time="2025-08-13T00:03:31.566076853Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Aug 13 00:03:31.566226 env[1470]: time="2025-08-13T00:03:31.566201237Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:03:31.567410 env[1470]: time="2025-08-13T00:03:31.567385662Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Aug 13 00:03:31.567767 env[1470]: time="2025-08-13T00:03:31.567746170Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Aug 13 00:03:31.567838 env[1470]: time="2025-08-13T00:03:31.567824705Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Aug 13 00:03:31.567953 env[1470]: time="2025-08-13T00:03:31.567936526Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Aug 13 00:03:31.568025 env[1470]: time="2025-08-13T00:03:31.568012221Z" level=info msg="metadata content store policy set" policy=shared Aug 13 00:03:31.595453 dbus-daemon[1444]: [system] SELinux support is enabled Aug 13 00:03:31.601545 dbus-daemon[1444]: [system] Successfully activated service 'org.freedesktop.systemd1' Aug 13 00:03:31.595607 systemd[1]: Started dbus.service. Aug 13 00:03:31.601007 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Aug 13 00:03:31.601027 systemd[1]: Reached target system-config.target. Aug 13 00:03:31.608537 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Aug 13 00:03:31.608558 systemd[1]: Reached target user-config.target. Aug 13 00:03:31.617177 systemd[1]: Started systemd-logind.service. Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621284612Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621338262Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621353265Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621396033Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621410436Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621424158Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621437601Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621890807Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621911851Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621926574Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621939936Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.621953219Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.622086524Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Aug 13 00:03:31.623848 env[1470]: time="2025-08-13T00:03:31.622155817Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622429829Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622466596Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622480359Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622529368Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622543891Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622557293Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622568616Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622641349Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622964371Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622983694Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.622996577Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.623014060Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.623141484Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.623159528Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.624136 env[1470]: time="2025-08-13T00:03:31.623172810Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.626661 env[1470]: time="2025-08-13T00:03:31.623185133Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Aug 13 00:03:31.626661 env[1470]: time="2025-08-13T00:03:31.623198895Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Aug 13 00:03:31.626661 env[1470]: time="2025-08-13T00:03:31.623210017Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Aug 13 00:03:31.626661 env[1470]: time="2025-08-13T00:03:31.623226741Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Aug 13 00:03:31.626661 env[1470]: time="2025-08-13T00:03:31.623302675Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Aug 13 00:03:31.628215 systemd[1]: Started containerd.service. Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.627098875Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.627170169Z" level=info msg="Connect containerd service" Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.627209296Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.627838176Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.628075541Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.628111548Z" level=info msg=serving... address=/run/containerd/containerd.sock Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.632972390Z" level=info msg="Start subscribing containerd event" Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.633019839Z" level=info msg="Start recovering state" Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.633080731Z" level=info msg="Start event monitor" Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.633098614Z" level=info msg="Start snapshots syncer" Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.633110857Z" level=info msg="Start cni network conf syncer for default" Aug 13 00:03:31.636643 env[1470]: time="2025-08-13T00:03:31.633117738Z" level=info msg="Start streaming server" Aug 13 00:03:31.654849 bash[1497]: Updated "/home/core/.ssh/authorized_keys" Aug 13 00:03:31.648561 systemd[1]: Finished update-ssh-keys-after-ignition.service. Aug 13 00:03:31.655574 env[1470]: time="2025-08-13T00:03:31.655544795Z" level=info msg="containerd successfully booted in 0.200614s" Aug 13 00:03:31.712206 systemd[1]: nvidia.service: Deactivated successfully. Aug 13 00:03:31.988920 update_engine[1460]: I0813 00:03:31.974056 1460 main.cc:92] Flatcar Update Engine starting Aug 13 00:03:32.042738 systemd[1]: Started update-engine.service. Aug 13 00:03:32.048829 systemd[1]: Started locksmithd.service. Aug 13 00:03:32.053195 update_engine[1460]: I0813 00:03:32.053077 1460 update_check_scheduler.cc:74] Next update check in 3m12s Aug 13 00:03:32.404370 tar[1467]: linux-arm64/README.md Aug 13 00:03:32.410726 systemd[1]: Finished prepare-helm.service. Aug 13 00:03:32.504674 systemd[1]: Started kubelet.service. Aug 13 00:03:32.987420 kubelet[1551]: E0813 00:03:32.987376 1551 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:03:32.989670 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:03:32.989796 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:03:33.394982 locksmithd[1547]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Aug 13 00:03:34.170927 sshd_keygen[1464]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Aug 13 00:03:34.188150 systemd[1]: Finished sshd-keygen.service. Aug 13 00:03:34.194055 systemd[1]: Starting issuegen.service... Aug 13 00:03:34.199265 systemd[1]: Started waagent.service. Aug 13 00:03:34.204112 systemd[1]: issuegen.service: Deactivated successfully. Aug 13 00:03:34.204303 systemd[1]: Finished issuegen.service. Aug 13 00:03:34.210122 systemd[1]: Starting systemd-user-sessions.service... Aug 13 00:03:34.245774 systemd[1]: Finished systemd-user-sessions.service. Aug 13 00:03:34.252037 systemd[1]: Started getty@tty1.service. Aug 13 00:03:34.258480 systemd[1]: Started serial-getty@ttyAMA0.service. Aug 13 00:03:34.263221 systemd[1]: Reached target getty.target. Aug 13 00:03:34.267661 systemd[1]: Reached target multi-user.target. Aug 13 00:03:34.275397 systemd[1]: Starting systemd-update-utmp-runlevel.service... Aug 13 00:03:34.286422 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Aug 13 00:03:34.286597 systemd[1]: Finished systemd-update-utmp-runlevel.service. Aug 13 00:03:34.293653 systemd[1]: Startup finished in 728ms (kernel) + 13.116s (initrd) + 22.137s (userspace) = 35.982s. Aug 13 00:03:34.938791 login[1574]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Aug 13 00:03:34.940238 login[1575]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Aug 13 00:03:34.979689 systemd[1]: Created slice user-500.slice. Aug 13 00:03:34.980926 systemd[1]: Starting user-runtime-dir@500.service... Aug 13 00:03:34.983326 systemd-logind[1458]: New session 2 of user core. Aug 13 00:03:34.986245 systemd-logind[1458]: New session 1 of user core. Aug 13 00:03:35.020471 systemd[1]: Finished user-runtime-dir@500.service. Aug 13 00:03:35.022027 systemd[1]: Starting user@500.service... Aug 13 00:03:35.078692 (systemd)[1578]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:03:35.270477 systemd[1578]: Queued start job for default target default.target. Aug 13 00:03:35.271328 systemd[1578]: Reached target paths.target. Aug 13 00:03:35.271461 systemd[1578]: Reached target sockets.target. Aug 13 00:03:35.271536 systemd[1578]: Reached target timers.target. Aug 13 00:03:35.271604 systemd[1578]: Reached target basic.target. Aug 13 00:03:35.271757 systemd[1]: Started user@500.service. Aug 13 00:03:35.272393 systemd[1578]: Reached target default.target. Aug 13 00:03:35.272434 systemd[1578]: Startup finished in 187ms. Aug 13 00:03:35.272634 systemd[1]: Started session-1.scope. Aug 13 00:03:35.273170 systemd[1]: Started session-2.scope. Aug 13 00:03:39.915507 waagent[1571]: 2025-08-13T00:03:39.915390Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Aug 13 00:03:39.921967 waagent[1571]: 2025-08-13T00:03:39.921874Z INFO Daemon Daemon OS: flatcar 3510.3.8 Aug 13 00:03:39.926575 waagent[1571]: 2025-08-13T00:03:39.926499Z INFO Daemon Daemon Python: 3.9.16 Aug 13 00:03:39.931184 waagent[1571]: 2025-08-13T00:03:39.931102Z INFO Daemon Daemon Run daemon Aug 13 00:03:39.935293 waagent[1571]: 2025-08-13T00:03:39.935211Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Aug 13 00:03:39.952307 waagent[1571]: 2025-08-13T00:03:39.952134Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Aug 13 00:03:39.967408 waagent[1571]: 2025-08-13T00:03:39.967237Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Aug 13 00:03:39.977366 waagent[1571]: 2025-08-13T00:03:39.977282Z INFO Daemon Daemon cloud-init is enabled: False Aug 13 00:03:39.982419 waagent[1571]: 2025-08-13T00:03:39.982339Z INFO Daemon Daemon Using waagent for provisioning Aug 13 00:03:39.988300 waagent[1571]: 2025-08-13T00:03:39.988219Z INFO Daemon Daemon Activate resource disk Aug 13 00:03:39.993240 waagent[1571]: 2025-08-13T00:03:39.993171Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Aug 13 00:03:40.007881 waagent[1571]: 2025-08-13T00:03:40.007800Z INFO Daemon Daemon Found device: None Aug 13 00:03:40.012472 waagent[1571]: 2025-08-13T00:03:40.012400Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Aug 13 00:03:40.020805 waagent[1571]: 2025-08-13T00:03:40.020726Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Aug 13 00:03:40.033112 waagent[1571]: 2025-08-13T00:03:40.033041Z INFO Daemon Daemon Clean protocol and wireserver endpoint Aug 13 00:03:40.039109 waagent[1571]: 2025-08-13T00:03:40.039032Z INFO Daemon Daemon Running default provisioning handler Aug 13 00:03:40.052330 waagent[1571]: 2025-08-13T00:03:40.052153Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Aug 13 00:03:40.067738 waagent[1571]: 2025-08-13T00:03:40.067590Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Aug 13 00:03:40.077203 waagent[1571]: 2025-08-13T00:03:40.077121Z INFO Daemon Daemon cloud-init is enabled: False Aug 13 00:03:40.082126 waagent[1571]: 2025-08-13T00:03:40.082049Z INFO Daemon Daemon Copying ovf-env.xml Aug 13 00:03:40.141317 waagent[1571]: 2025-08-13T00:03:40.141150Z INFO Daemon Daemon Successfully mounted dvd Aug 13 00:03:40.208358 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Aug 13 00:03:40.243956 waagent[1571]: 2025-08-13T00:03:40.243803Z INFO Daemon Daemon Detect protocol endpoint Aug 13 00:03:40.248925 waagent[1571]: 2025-08-13T00:03:40.248833Z INFO Daemon Daemon Clean protocol and wireserver endpoint Aug 13 00:03:40.254950 waagent[1571]: 2025-08-13T00:03:40.254860Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Aug 13 00:03:40.262113 waagent[1571]: 2025-08-13T00:03:40.262022Z INFO Daemon Daemon Test for route to 168.63.129.16 Aug 13 00:03:40.267537 waagent[1571]: 2025-08-13T00:03:40.267454Z INFO Daemon Daemon Route to 168.63.129.16 exists Aug 13 00:03:40.272657 waagent[1571]: 2025-08-13T00:03:40.272573Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Aug 13 00:03:40.394284 waagent[1571]: 2025-08-13T00:03:40.394199Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Aug 13 00:03:40.401200 waagent[1571]: 2025-08-13T00:03:40.401147Z INFO Daemon Daemon Wire protocol version:2012-11-30 Aug 13 00:03:40.406821 waagent[1571]: 2025-08-13T00:03:40.406740Z INFO Daemon Daemon Server preferred version:2015-04-05 Aug 13 00:03:40.850119 waagent[1571]: 2025-08-13T00:03:40.849942Z INFO Daemon Daemon Initializing goal state during protocol detection Aug 13 00:03:40.867031 waagent[1571]: 2025-08-13T00:03:40.866931Z INFO Daemon Daemon Forcing an update of the goal state.. Aug 13 00:03:40.872731 waagent[1571]: 2025-08-13T00:03:40.872643Z INFO Daemon Daemon Fetching goal state [incarnation 1] Aug 13 00:03:41.082071 waagent[1571]: 2025-08-13T00:03:41.081909Z INFO Daemon Daemon Found private key matching thumbprint E65EDC1B68CF04BF48D41F05B75A148142F20EEE Aug 13 00:03:41.090244 waagent[1571]: 2025-08-13T00:03:41.090145Z INFO Daemon Daemon Certificate with thumbprint 563C2126EF4C425729CBFBC0D3E1148AF3BA46F5 has no matching private key. Aug 13 00:03:41.101095 waagent[1571]: 2025-08-13T00:03:41.100968Z INFO Daemon Daemon Fetch goal state completed Aug 13 00:03:41.130165 waagent[1571]: 2025-08-13T00:03:41.130096Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 41cdbfde-7529-46c9-baa8-e0dc5738f0eb New eTag: 232331511048635332] Aug 13 00:03:41.140426 waagent[1571]: 2025-08-13T00:03:41.140330Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Aug 13 00:03:41.194863 waagent[1571]: 2025-08-13T00:03:41.194716Z INFO Daemon Daemon Starting provisioning Aug 13 00:03:41.200664 waagent[1571]: 2025-08-13T00:03:41.200570Z INFO Daemon Daemon Handle ovf-env.xml. Aug 13 00:03:41.205868 waagent[1571]: 2025-08-13T00:03:41.205788Z INFO Daemon Daemon Set hostname [ci-3510.3.8-a-c7286a0eab] Aug 13 00:03:41.262810 waagent[1571]: 2025-08-13T00:03:41.262603Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-a-c7286a0eab] Aug 13 00:03:41.269978 waagent[1571]: 2025-08-13T00:03:41.269879Z INFO Daemon Daemon Examine /proc/net/route for primary interface Aug 13 00:03:41.276632 waagent[1571]: 2025-08-13T00:03:41.276548Z INFO Daemon Daemon Primary interface is [eth0] Aug 13 00:03:41.293912 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Aug 13 00:03:41.294087 systemd[1]: Stopped systemd-networkd-wait-online.service. Aug 13 00:03:41.294150 systemd[1]: Stopping systemd-networkd-wait-online.service... Aug 13 00:03:41.294433 systemd[1]: Stopping systemd-networkd.service... Aug 13 00:03:41.298307 systemd-networkd[1245]: eth0: DHCPv6 lease lost Aug 13 00:03:41.300010 systemd[1]: systemd-networkd.service: Deactivated successfully. Aug 13 00:03:41.300208 systemd[1]: Stopped systemd-networkd.service. Aug 13 00:03:41.302559 systemd[1]: Starting systemd-networkd.service... Aug 13 00:03:41.332911 systemd-networkd[1624]: enP33972s1: Link UP Aug 13 00:03:41.333205 systemd-networkd[1624]: enP33972s1: Gained carrier Aug 13 00:03:41.334330 systemd-networkd[1624]: eth0: Link UP Aug 13 00:03:41.334424 systemd-networkd[1624]: eth0: Gained carrier Aug 13 00:03:41.334840 systemd-networkd[1624]: lo: Link UP Aug 13 00:03:41.334917 systemd-networkd[1624]: lo: Gained carrier Aug 13 00:03:41.335236 systemd-networkd[1624]: eth0: Gained IPv6LL Aug 13 00:03:41.335781 systemd-networkd[1624]: Enumeration completed Aug 13 00:03:41.335977 systemd[1]: Started systemd-networkd.service. Aug 13 00:03:41.337896 systemd-networkd[1624]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Aug 13 00:03:41.337933 systemd[1]: Starting systemd-networkd-wait-online.service... Aug 13 00:03:41.346067 waagent[1571]: 2025-08-13T00:03:41.345895Z INFO Daemon Daemon Create user account if not exists Aug 13 00:03:41.347337 systemd-networkd[1624]: eth0: DHCPv4 address 10.200.20.20/24, gateway 10.200.20.1 acquired from 168.63.129.16 Aug 13 00:03:41.354452 systemd[1]: Finished systemd-networkd-wait-online.service. Aug 13 00:03:41.354914 waagent[1571]: 2025-08-13T00:03:41.354485Z INFO Daemon Daemon User core already exists, skip useradd Aug 13 00:03:41.361030 waagent[1571]: 2025-08-13T00:03:41.360927Z INFO Daemon Daemon Configure sudoer Aug 13 00:03:41.366583 waagent[1571]: 2025-08-13T00:03:41.366497Z INFO Daemon Daemon Configure sshd Aug 13 00:03:41.370808 waagent[1571]: 2025-08-13T00:03:41.370730Z INFO Daemon Daemon Deploy ssh public key. Aug 13 00:03:42.583363 waagent[1571]: 2025-08-13T00:03:42.583228Z INFO Daemon Daemon Provisioning complete Aug 13 00:03:42.604905 waagent[1571]: 2025-08-13T00:03:42.604834Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Aug 13 00:03:42.611757 waagent[1571]: 2025-08-13T00:03:42.611672Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Aug 13 00:03:42.621929 waagent[1571]: 2025-08-13T00:03:42.621845Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Aug 13 00:03:42.940028 waagent[1633]: 2025-08-13T00:03:42.939874Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Aug 13 00:03:42.941184 waagent[1633]: 2025-08-13T00:03:42.941119Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Aug 13 00:03:42.941482 waagent[1633]: 2025-08-13T00:03:42.941429Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Aug 13 00:03:42.954516 waagent[1633]: 2025-08-13T00:03:42.954416Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Aug 13 00:03:42.954878 waagent[1633]: 2025-08-13T00:03:42.954825Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Aug 13 00:03:43.028232 waagent[1633]: 2025-08-13T00:03:43.028080Z INFO ExtHandler ExtHandler Found private key matching thumbprint E65EDC1B68CF04BF48D41F05B75A148142F20EEE Aug 13 00:03:43.028696 waagent[1633]: 2025-08-13T00:03:43.028634Z INFO ExtHandler ExtHandler Certificate with thumbprint 563C2126EF4C425729CBFBC0D3E1148AF3BA46F5 has no matching private key. Aug 13 00:03:43.029046 waagent[1633]: 2025-08-13T00:03:43.028991Z INFO ExtHandler ExtHandler Fetch goal state completed Aug 13 00:03:43.045099 waagent[1633]: 2025-08-13T00:03:43.045035Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: c05e1030-e218-4a39-8ffe-5f9dff53fada New eTag: 232331511048635332] Aug 13 00:03:43.045953 waagent[1633]: 2025-08-13T00:03:43.045884Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Aug 13 00:03:43.111952 waagent[1633]: 2025-08-13T00:03:43.111798Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Aug 13 00:03:43.122557 waagent[1633]: 2025-08-13T00:03:43.122464Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1633 Aug 13 00:03:43.126650 waagent[1633]: 2025-08-13T00:03:43.126570Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Aug 13 00:03:43.128202 waagent[1633]: 2025-08-13T00:03:43.128135Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Aug 13 00:03:43.220749 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Aug 13 00:03:43.220890 systemd[1]: Stopped kubelet.service. Aug 13 00:03:43.222523 systemd[1]: Starting kubelet.service... Aug 13 00:03:43.264115 waagent[1633]: 2025-08-13T00:03:43.264034Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Aug 13 00:03:43.264610 waagent[1633]: 2025-08-13T00:03:43.264542Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Aug 13 00:03:43.274304 waagent[1633]: 2025-08-13T00:03:43.274214Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Aug 13 00:03:43.274908 waagent[1633]: 2025-08-13T00:03:43.274833Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Aug 13 00:03:43.276193 waagent[1633]: 2025-08-13T00:03:43.276110Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Aug 13 00:03:43.277650 waagent[1633]: 2025-08-13T00:03:43.277575Z INFO ExtHandler ExtHandler Starting env monitor service. Aug 13 00:03:43.278359 waagent[1633]: 2025-08-13T00:03:43.278214Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Aug 13 00:03:43.278535 waagent[1633]: 2025-08-13T00:03:43.278478Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Aug 13 00:03:43.279126 waagent[1633]: 2025-08-13T00:03:43.279056Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Aug 13 00:03:43.279486 waagent[1633]: 2025-08-13T00:03:43.279419Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Aug 13 00:03:43.279486 waagent[1633]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Aug 13 00:03:43.279486 waagent[1633]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Aug 13 00:03:43.279486 waagent[1633]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Aug 13 00:03:43.279486 waagent[1633]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Aug 13 00:03:43.279486 waagent[1633]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Aug 13 00:03:43.279486 waagent[1633]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Aug 13 00:03:43.281828 waagent[1633]: 2025-08-13T00:03:43.281659Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Aug 13 00:03:43.282537 waagent[1633]: 2025-08-13T00:03:43.282452Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Aug 13 00:03:43.283311 waagent[1633]: 2025-08-13T00:03:43.282628Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Aug 13 00:03:43.283311 waagent[1633]: 2025-08-13T00:03:43.283126Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Aug 13 00:03:43.283406 waagent[1633]: 2025-08-13T00:03:43.283328Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Aug 13 00:03:43.283902 waagent[1633]: 2025-08-13T00:03:43.283836Z INFO EnvHandler ExtHandler Configure routes Aug 13 00:03:43.284047 waagent[1633]: 2025-08-13T00:03:43.283996Z INFO EnvHandler ExtHandler Gateway:None Aug 13 00:03:43.284239 waagent[1633]: 2025-08-13T00:03:43.284187Z INFO EnvHandler ExtHandler Routes:None Aug 13 00:03:43.285325 waagent[1633]: 2025-08-13T00:03:43.285130Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Aug 13 00:03:43.285535 waagent[1633]: 2025-08-13T00:03:43.285473Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Aug 13 00:03:43.286841 waagent[1633]: 2025-08-13T00:03:43.286757Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Aug 13 00:03:43.297180 waagent[1633]: 2025-08-13T00:03:43.297099Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Aug 13 00:03:43.297829 waagent[1633]: 2025-08-13T00:03:43.297768Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Aug 13 00:03:43.298830 waagent[1633]: 2025-08-13T00:03:43.298758Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Aug 13 00:03:43.353823 systemd[1]: Started kubelet.service. Aug 13 00:03:43.370487 waagent[1633]: 2025-08-13T00:03:43.370404Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Aug 13 00:03:43.436475 kubelet[1661]: E0813 00:03:43.436420 1661 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:03:43.439039 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:03:43.439170 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:03:43.524403 waagent[1633]: 2025-08-13T00:03:43.524195Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1624' Aug 13 00:03:43.852076 waagent[1633]: 2025-08-13T00:03:43.851863Z INFO MonitorHandler ExtHandler Network interfaces: Aug 13 00:03:43.852076 waagent[1633]: Executing ['ip', '-a', '-o', 'link']: Aug 13 00:03:43.852076 waagent[1633]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Aug 13 00:03:43.852076 waagent[1633]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6d:20:95 brd ff:ff:ff:ff:ff:ff Aug 13 00:03:43.852076 waagent[1633]: 3: enP33972s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6d:20:95 brd ff:ff:ff:ff:ff:ff\ altname enP33972p0s2 Aug 13 00:03:43.852076 waagent[1633]: Executing ['ip', '-4', '-a', '-o', 'address']: Aug 13 00:03:43.852076 waagent[1633]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Aug 13 00:03:43.852076 waagent[1633]: 2: eth0 inet 10.200.20.20/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Aug 13 00:03:43.852076 waagent[1633]: Executing ['ip', '-6', '-a', '-o', 'address']: Aug 13 00:03:43.852076 waagent[1633]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Aug 13 00:03:43.852076 waagent[1633]: 2: eth0 inet6 fe80::20d:3aff:fe6d:2095/64 scope link \ valid_lft forever preferred_lft forever Aug 13 00:03:43.993599 waagent[1633]: 2025-08-13T00:03:43.993529Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.14.0.1 -- exiting Aug 13 00:03:44.626877 waagent[1571]: 2025-08-13T00:03:44.626750Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Aug 13 00:03:44.632908 waagent[1571]: 2025-08-13T00:03:44.632839Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.14.0.1 to be the latest agent Aug 13 00:03:45.951614 waagent[1673]: 2025-08-13T00:03:45.951506Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.14.0.1) Aug 13 00:03:45.952397 waagent[1673]: 2025-08-13T00:03:45.952335Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Aug 13 00:03:45.952553 waagent[1673]: 2025-08-13T00:03:45.952505Z INFO ExtHandler ExtHandler Python: 3.9.16 Aug 13 00:03:45.952692 waagent[1673]: 2025-08-13T00:03:45.952647Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Aug 13 00:03:45.968128 waagent[1673]: 2025-08-13T00:03:45.967980Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: aarch64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Aug 13 00:03:45.968676 waagent[1673]: 2025-08-13T00:03:45.968614Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Aug 13 00:03:45.968856 waagent[1673]: 2025-08-13T00:03:45.968807Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Aug 13 00:03:45.969091 waagent[1673]: 2025-08-13T00:03:45.969041Z INFO ExtHandler ExtHandler Initializing the goal state... Aug 13 00:03:45.983282 waagent[1673]: 2025-08-13T00:03:45.983171Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Aug 13 00:03:45.993123 waagent[1673]: 2025-08-13T00:03:45.993054Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.175 Aug 13 00:03:45.994322 waagent[1673]: 2025-08-13T00:03:45.994233Z INFO ExtHandler Aug 13 00:03:45.994508 waagent[1673]: 2025-08-13T00:03:45.994456Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 285a28df-09fb-4f92-9a0b-21b98e66a270 eTag: 232331511048635332 source: Fabric] Aug 13 00:03:45.995331 waagent[1673]: 2025-08-13T00:03:45.995240Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Aug 13 00:03:45.996674 waagent[1673]: 2025-08-13T00:03:45.996606Z INFO ExtHandler Aug 13 00:03:45.996835 waagent[1673]: 2025-08-13T00:03:45.996786Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Aug 13 00:03:46.004680 waagent[1673]: 2025-08-13T00:03:46.004621Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Aug 13 00:03:46.005322 waagent[1673]: 2025-08-13T00:03:46.005242Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Aug 13 00:03:46.028343 waagent[1673]: 2025-08-13T00:03:46.028275Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Aug 13 00:03:46.111623 waagent[1673]: 2025-08-13T00:03:46.111384Z INFO ExtHandler Downloaded certificate {'thumbprint': 'E65EDC1B68CF04BF48D41F05B75A148142F20EEE', 'hasPrivateKey': True} Aug 13 00:03:46.112875 waagent[1673]: 2025-08-13T00:03:46.112806Z INFO ExtHandler Downloaded certificate {'thumbprint': '563C2126EF4C425729CBFBC0D3E1148AF3BA46F5', 'hasPrivateKey': False} Aug 13 00:03:46.114034 waagent[1673]: 2025-08-13T00:03:46.113967Z INFO ExtHandler Fetch goal state from WireServer completed Aug 13 00:03:46.115099 waagent[1673]: 2025-08-13T00:03:46.115032Z INFO ExtHandler ExtHandler Goal state initialization completed. Aug 13 00:03:46.137460 waagent[1673]: 2025-08-13T00:03:46.137324Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Aug 13 00:03:46.147153 waagent[1673]: 2025-08-13T00:03:46.147019Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Aug 13 00:03:46.151577 waagent[1673]: 2025-08-13T00:03:46.151447Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Aug 13 00:03:46.151841 waagent[1673]: 2025-08-13T00:03:46.151787Z INFO ExtHandler ExtHandler Checking state of the firewall Aug 13 00:03:46.332681 waagent[1673]: 2025-08-13T00:03:46.332531Z INFO ExtHandler ExtHandler Created firewall rules for Azure Fabric: Aug 13 00:03:46.332681 waagent[1673]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Aug 13 00:03:46.332681 waagent[1673]: pkts bytes target prot opt in out source destination Aug 13 00:03:46.332681 waagent[1673]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Aug 13 00:03:46.332681 waagent[1673]: pkts bytes target prot opt in out source destination Aug 13 00:03:46.332681 waagent[1673]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Aug 13 00:03:46.332681 waagent[1673]: pkts bytes target prot opt in out source destination Aug 13 00:03:46.332681 waagent[1673]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Aug 13 00:03:46.332681 waagent[1673]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Aug 13 00:03:46.332681 waagent[1673]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Aug 13 00:03:46.334003 waagent[1673]: 2025-08-13T00:03:46.333930Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Aug 13 00:03:46.337605 waagent[1673]: 2025-08-13T00:03:46.337467Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Aug 13 00:03:46.337917 waagent[1673]: 2025-08-13T00:03:46.337861Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Aug 13 00:03:46.338359 waagent[1673]: 2025-08-13T00:03:46.338298Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Aug 13 00:03:46.347280 waagent[1673]: 2025-08-13T00:03:46.347195Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Aug 13 00:03:46.347891 waagent[1673]: 2025-08-13T00:03:46.347831Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Aug 13 00:03:46.356542 waagent[1673]: 2025-08-13T00:03:46.356463Z INFO ExtHandler ExtHandler WALinuxAgent-2.14.0.1 running as process 1673 Aug 13 00:03:46.360064 waagent[1673]: 2025-08-13T00:03:46.359986Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Aug 13 00:03:46.361007 waagent[1673]: 2025-08-13T00:03:46.360945Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Aug 13 00:03:46.362018 waagent[1673]: 2025-08-13T00:03:46.361955Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Aug 13 00:03:46.365008 waagent[1673]: 2025-08-13T00:03:46.364945Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Aug 13 00:03:46.365394 waagent[1673]: 2025-08-13T00:03:46.365338Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Aug 13 00:03:46.366891 waagent[1673]: 2025-08-13T00:03:46.366817Z INFO ExtHandler ExtHandler Starting env monitor service. Aug 13 00:03:46.367418 waagent[1673]: 2025-08-13T00:03:46.367353Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Aug 13 00:03:46.367714 waagent[1673]: 2025-08-13T00:03:46.367662Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Aug 13 00:03:46.368466 waagent[1673]: 2025-08-13T00:03:46.368406Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Aug 13 00:03:46.368965 waagent[1673]: 2025-08-13T00:03:46.368906Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Aug 13 00:03:46.368965 waagent[1673]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Aug 13 00:03:46.368965 waagent[1673]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Aug 13 00:03:46.368965 waagent[1673]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Aug 13 00:03:46.368965 waagent[1673]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Aug 13 00:03:46.368965 waagent[1673]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Aug 13 00:03:46.368965 waagent[1673]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Aug 13 00:03:46.371976 waagent[1673]: 2025-08-13T00:03:46.371789Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Aug 13 00:03:46.372221 waagent[1673]: 2025-08-13T00:03:46.372141Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Aug 13 00:03:46.372703 waagent[1673]: 2025-08-13T00:03:46.372635Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Aug 13 00:03:46.373750 waagent[1673]: 2025-08-13T00:03:46.373673Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Aug 13 00:03:46.374331 waagent[1673]: 2025-08-13T00:03:46.374237Z INFO EnvHandler ExtHandler Configure routes Aug 13 00:03:46.374529 waagent[1673]: 2025-08-13T00:03:46.374453Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Aug 13 00:03:46.375579 waagent[1673]: 2025-08-13T00:03:46.375496Z INFO EnvHandler ExtHandler Gateway:None Aug 13 00:03:46.379130 waagent[1673]: 2025-08-13T00:03:46.379019Z INFO EnvHandler ExtHandler Routes:None Aug 13 00:03:46.380415 waagent[1673]: 2025-08-13T00:03:46.380221Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Aug 13 00:03:46.380654 waagent[1673]: 2025-08-13T00:03:46.380593Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Aug 13 00:03:46.383400 waagent[1673]: 2025-08-13T00:03:46.383211Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Aug 13 00:03:46.398066 waagent[1673]: 2025-08-13T00:03:46.397975Z INFO MonitorHandler ExtHandler Network interfaces: Aug 13 00:03:46.398066 waagent[1673]: Executing ['ip', '-a', '-o', 'link']: Aug 13 00:03:46.398066 waagent[1673]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Aug 13 00:03:46.398066 waagent[1673]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6d:20:95 brd ff:ff:ff:ff:ff:ff Aug 13 00:03:46.398066 waagent[1673]: 3: enP33972s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:6d:20:95 brd ff:ff:ff:ff:ff:ff\ altname enP33972p0s2 Aug 13 00:03:46.398066 waagent[1673]: Executing ['ip', '-4', '-a', '-o', 'address']: Aug 13 00:03:46.398066 waagent[1673]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Aug 13 00:03:46.398066 waagent[1673]: 2: eth0 inet 10.200.20.20/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Aug 13 00:03:46.398066 waagent[1673]: Executing ['ip', '-6', '-a', '-o', 'address']: Aug 13 00:03:46.398066 waagent[1673]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Aug 13 00:03:46.398066 waagent[1673]: 2: eth0 inet6 fe80::20d:3aff:fe6d:2095/64 scope link \ valid_lft forever preferred_lft forever Aug 13 00:03:46.405506 waagent[1673]: 2025-08-13T00:03:46.405422Z INFO ExtHandler ExtHandler Downloading agent manifest Aug 13 00:03:46.429773 waagent[1673]: 2025-08-13T00:03:46.429685Z INFO ExtHandler ExtHandler Aug 13 00:03:46.430373 waagent[1673]: 2025-08-13T00:03:46.430306Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: cfa1b8b2-e803-441d-b568-b409ff31ba0c correlation 4b80572c-2e6b-42b9-8a53-8f6903c9268b created: 2025-08-13T00:02:14.825806Z] Aug 13 00:03:46.433889 waagent[1673]: 2025-08-13T00:03:46.433804Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Aug 13 00:03:46.439665 waagent[1673]: 2025-08-13T00:03:46.439581Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 9 ms] Aug 13 00:03:46.466430 waagent[1673]: 2025-08-13T00:03:46.466342Z INFO ExtHandler ExtHandler Looking for existing remote access users. Aug 13 00:03:46.468933 waagent[1673]: 2025-08-13T00:03:46.468868Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.14.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 6A4B9B78-3B1F-479E-8299-FC5116FCF420;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Aug 13 00:03:46.491201 waagent[1673]: 2025-08-13T00:03:46.491110Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Aug 13 00:03:46.504325 waagent[1673]: 2025-08-13T00:03:46.504230Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Aug 13 00:03:53.518510 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Aug 13 00:03:53.518792 systemd[1]: Stopped kubelet.service. Aug 13 00:03:53.520316 systemd[1]: Starting kubelet.service... Aug 13 00:03:53.647165 systemd[1]: Started kubelet.service. Aug 13 00:03:53.682265 kubelet[1720]: E0813 00:03:53.682201 1720 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:03:53.684593 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:03:53.684712 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:04:01.620855 systemd[1]: Created slice system-sshd.slice. Aug 13 00:04:01.622363 systemd[1]: Started sshd@0-10.200.20.20:22-10.200.16.10:40354.service. Aug 13 00:04:02.279019 sshd[1726]: Accepted publickey for core from 10.200.16.10 port 40354 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:04:02.296328 sshd[1726]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:02.300542 systemd-logind[1458]: New session 3 of user core. Aug 13 00:04:02.301065 systemd[1]: Started session-3.scope. Aug 13 00:04:02.710450 systemd[1]: Started sshd@1-10.200.20.20:22-10.200.16.10:40362.service. Aug 13 00:04:03.200428 sshd[1731]: Accepted publickey for core from 10.200.16.10 port 40362 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:04:03.202077 sshd[1731]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:03.206114 systemd[1]: Started session-4.scope. Aug 13 00:04:03.206563 systemd-logind[1458]: New session 4 of user core. Aug 13 00:04:03.552468 sshd[1731]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:03.554753 systemd[1]: sshd@1-10.200.20.20:22-10.200.16.10:40362.service: Deactivated successfully. Aug 13 00:04:03.555463 systemd[1]: session-4.scope: Deactivated successfully. Aug 13 00:04:03.555988 systemd-logind[1458]: Session 4 logged out. Waiting for processes to exit. Aug 13 00:04:03.556943 systemd-logind[1458]: Removed session 4. Aug 13 00:04:03.636522 systemd[1]: Started sshd@2-10.200.20.20:22-10.200.16.10:40366.service. Aug 13 00:04:03.768211 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Aug 13 00:04:03.768402 systemd[1]: Stopped kubelet.service. Aug 13 00:04:03.769807 systemd[1]: Starting kubelet.service... Aug 13 00:04:03.924980 systemd[1]: Started kubelet.service. Aug 13 00:04:03.970318 kubelet[1743]: E0813 00:04:03.970277 1743 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:04:03.972545 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:04:03.972675 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:04:04.128312 sshd[1737]: Accepted publickey for core from 10.200.16.10 port 40366 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:04:04.129683 sshd[1737]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:04.133942 systemd[1]: Started session-5.scope. Aug 13 00:04:04.134298 systemd-logind[1458]: New session 5 of user core. Aug 13 00:04:04.491985 sshd[1737]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:04.494476 systemd[1]: sshd@2-10.200.20.20:22-10.200.16.10:40366.service: Deactivated successfully. Aug 13 00:04:04.495137 systemd[1]: session-5.scope: Deactivated successfully. Aug 13 00:04:04.495678 systemd-logind[1458]: Session 5 logged out. Waiting for processes to exit. Aug 13 00:04:04.496524 systemd-logind[1458]: Removed session 5. Aug 13 00:04:04.573523 systemd[1]: Started sshd@3-10.200.20.20:22-10.200.16.10:40368.service. Aug 13 00:04:05.063303 sshd[1753]: Accepted publickey for core from 10.200.16.10 port 40368 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:04:05.064905 sshd[1753]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:05.069025 systemd[1]: Started session-6.scope. Aug 13 00:04:05.070300 systemd-logind[1458]: New session 6 of user core. Aug 13 00:04:05.427759 sshd[1753]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:05.430565 systemd[1]: sshd@3-10.200.20.20:22-10.200.16.10:40368.service: Deactivated successfully. Aug 13 00:04:05.431283 systemd[1]: session-6.scope: Deactivated successfully. Aug 13 00:04:05.431865 systemd-logind[1458]: Session 6 logged out. Waiting for processes to exit. Aug 13 00:04:05.432520 systemd-logind[1458]: Removed session 6. Aug 13 00:04:05.508859 systemd[1]: Started sshd@4-10.200.20.20:22-10.200.16.10:40376.service. Aug 13 00:04:05.998794 sshd[1759]: Accepted publickey for core from 10.200.16.10 port 40376 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:04:06.000413 sshd[1759]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:06.004649 systemd[1]: Started session-7.scope. Aug 13 00:04:06.004962 systemd-logind[1458]: New session 7 of user core. Aug 13 00:04:06.739854 sudo[1762]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Aug 13 00:04:06.740082 sudo[1762]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:04:06.797398 dbus-daemon[1444]: avc: received setenforce notice (enforcing=1) Aug 13 00:04:06.798436 sudo[1762]: pam_unix(sudo:session): session closed for user root Aug 13 00:04:06.892539 sshd[1759]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:06.896206 systemd[1]: sshd@4-10.200.20.20:22-10.200.16.10:40376.service: Deactivated successfully. Aug 13 00:04:06.897048 systemd[1]: session-7.scope: Deactivated successfully. Aug 13 00:04:06.897640 systemd-logind[1458]: Session 7 logged out. Waiting for processes to exit. Aug 13 00:04:06.898709 systemd-logind[1458]: Removed session 7. Aug 13 00:04:06.968326 systemd[1]: Started sshd@5-10.200.20.20:22-10.200.16.10:40390.service. Aug 13 00:04:07.421626 sshd[1766]: Accepted publickey for core from 10.200.16.10 port 40390 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:04:07.422998 sshd[1766]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:07.426854 systemd-logind[1458]: New session 8 of user core. Aug 13 00:04:07.427312 systemd[1]: Started session-8.scope. Aug 13 00:04:07.676737 sudo[1770]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Aug 13 00:04:07.676950 sudo[1770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:04:07.679577 sudo[1770]: pam_unix(sudo:session): session closed for user root Aug 13 00:04:07.684006 sudo[1769]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Aug 13 00:04:07.684499 sudo[1769]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:04:07.693097 systemd[1]: Stopping audit-rules.service... Aug 13 00:04:07.692000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 00:04:07.705738 auditctl[1773]: No rules Aug 13 00:04:07.692000 audit[1773]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc6bcc830 a2=420 a3=0 items=0 ppid=1 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:07.706581 systemd[1]: audit-rules.service: Deactivated successfully. Aug 13 00:04:07.706771 systemd[1]: Stopped audit-rules.service. Aug 13 00:04:07.708474 systemd[1]: Starting audit-rules.service... Aug 13 00:04:07.728240 kernel: audit: type=1305 audit(1755043447.692:205): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Aug 13 00:04:07.728388 kernel: audit: type=1300 audit(1755043447.692:205): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc6bcc830 a2=420 a3=0 items=0 ppid=1 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:07.728413 kernel: audit: type=1327 audit(1755043447.692:205): proctitle=2F7362696E2F617564697463746C002D44 Aug 13 00:04:07.692000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Aug 13 00:04:07.731886 augenrules[1790]: No rules Aug 13 00:04:07.736597 kernel: audit: type=1131 audit(1755043447.705:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.733033 systemd[1]: Finished audit-rules.service. Aug 13 00:04:07.734211 sudo[1769]: pam_unix(sudo:session): session closed for user root Aug 13 00:04:07.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.767781 kernel: audit: type=1130 audit(1755043447.731:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.767884 kernel: audit: type=1106 audit(1755043447.733:208): pid=1769 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.733000 audit[1769]: USER_END pid=1769 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.733000 audit[1769]: CRED_DISP pid=1769 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.802209 kernel: audit: type=1104 audit(1755043447.733:209): pid=1769 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.827383 sshd[1766]: pam_unix(sshd:session): session closed for user core Aug 13 00:04:07.827000 audit[1766]: USER_END pid=1766 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:04:07.830944 systemd[1]: sshd@5-10.200.20.20:22-10.200.16.10:40390.service: Deactivated successfully. Aug 13 00:04:07.831718 systemd[1]: session-8.scope: Deactivated successfully. Aug 13 00:04:07.832519 systemd-logind[1458]: Session 8 logged out. Waiting for processes to exit. Aug 13 00:04:07.833535 systemd-logind[1458]: Removed session 8. Aug 13 00:04:07.827000 audit[1766]: CRED_DISP pid=1766 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:04:07.869809 kernel: audit: type=1106 audit(1755043447.827:210): pid=1766 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:04:07.869868 kernel: audit: type=1104 audit(1755043447.827:211): pid=1766 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:04:07.869914 kernel: audit: type=1131 audit(1755043447.827:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.20:22-10.200.16.10:40390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.20:22-10.200.16.10:40390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.20:22-10.200.16.10:40392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:07.907605 systemd[1]: Started sshd@6-10.200.20.20:22-10.200.16.10:40392.service. Aug 13 00:04:08.382000 audit[1796]: USER_ACCT pid=1796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:04:08.384066 sshd[1796]: Accepted publickey for core from 10.200.16.10 port 40392 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:04:08.384000 audit[1796]: CRED_ACQ pid=1796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:04:08.384000 audit[1796]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb94c200 a2=3 a3=1 items=0 ppid=1 pid=1796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:08.384000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:04:08.385674 sshd[1796]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:04:08.389739 systemd[1]: Started session-9.scope. Aug 13 00:04:08.390998 systemd-logind[1458]: New session 9 of user core. Aug 13 00:04:08.393000 audit[1796]: USER_START pid=1796 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:04:08.395000 audit[1798]: CRED_ACQ pid=1798 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:04:08.649000 audit[1799]: USER_ACCT pid=1799 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:04:08.651376 sudo[1799]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Aug 13 00:04:08.650000 audit[1799]: CRED_REFR pid=1799 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:04:08.651605 sudo[1799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Aug 13 00:04:08.652000 audit[1799]: USER_START pid=1799 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:04:08.673353 systemd[1]: Starting docker.service... Aug 13 00:04:08.724306 env[1809]: time="2025-08-13T00:04:08.724238111Z" level=info msg="Starting up" Aug 13 00:04:08.725552 env[1809]: time="2025-08-13T00:04:08.725525373Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 00:04:08.725666 env[1809]: time="2025-08-13T00:04:08.725652176Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 00:04:08.725805 env[1809]: time="2025-08-13T00:04:08.725789458Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 00:04:08.725867 env[1809]: time="2025-08-13T00:04:08.725855099Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 00:04:08.727328 env[1809]: time="2025-08-13T00:04:08.727303724Z" level=info msg="parsed scheme: \"unix\"" module=grpc Aug 13 00:04:08.727692 env[1809]: time="2025-08-13T00:04:08.727672971Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Aug 13 00:04:08.727796 env[1809]: time="2025-08-13T00:04:08.727776573Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Aug 13 00:04:08.727850 env[1809]: time="2025-08-13T00:04:08.727837614Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Aug 13 00:04:08.734361 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3969149151-merged.mount: Deactivated successfully. Aug 13 00:04:08.926972 env[1809]: time="2025-08-13T00:04:08.926578078Z" level=info msg="Loading containers: start." Aug 13 00:04:09.015000 audit[1837]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1837 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.015000 audit[1837]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc9aef4d0 a2=0 a3=1 items=0 ppid=1809 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.015000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Aug 13 00:04:09.017000 audit[1839]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1839 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.017000 audit[1839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffcc8ade70 a2=0 a3=1 items=0 ppid=1809 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.017000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Aug 13 00:04:09.019000 audit[1841]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1841 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.019000 audit[1841]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdf8c09c0 a2=0 a3=1 items=0 ppid=1809 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.019000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 00:04:09.020000 audit[1843]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.020000 audit[1843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe9b85460 a2=0 a3=1 items=0 ppid=1809 pid=1843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.020000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 00:04:09.022000 audit[1845]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1845 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.022000 audit[1845]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcff01590 a2=0 a3=1 items=0 ppid=1809 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.022000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Aug 13 00:04:09.024000 audit[1847]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1847 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.024000 audit[1847]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdfca40c0 a2=0 a3=1 items=0 ppid=1809 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.024000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Aug 13 00:04:09.071000 audit[1849]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1849 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.071000 audit[1849]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd9d56a30 a2=0 a3=1 items=0 ppid=1809 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.071000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Aug 13 00:04:09.073000 audit[1851]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1851 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.073000 audit[1851]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe840a020 a2=0 a3=1 items=0 ppid=1809 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.073000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Aug 13 00:04:09.074000 audit[1853]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1853 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.074000 audit[1853]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffee6a14d0 a2=0 a3=1 items=0 ppid=1809 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.074000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:04:09.121000 audit[1857]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1857 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.121000 audit[1857]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffdd5f2e0 a2=0 a3=1 items=0 ppid=1809 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.121000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:04:09.131000 audit[1858]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1858 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.131000 audit[1858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff17e60f0 a2=0 a3=1 items=0 ppid=1809 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.131000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:04:09.176273 kernel: Initializing XFRM netlink socket Aug 13 00:04:09.215822 env[1809]: time="2025-08-13T00:04:09.214959952Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Aug 13 00:04:09.335000 audit[1866]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1866 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.335000 audit[1866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff5f3a0a0 a2=0 a3=1 items=0 ppid=1809 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.335000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Aug 13 00:04:09.344000 audit[1869]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1869 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.344000 audit[1869]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe3d8a8e0 a2=0 a3=1 items=0 ppid=1809 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.344000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Aug 13 00:04:09.346000 audit[1872]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1872 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.346000 audit[1872]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc46d65f0 a2=0 a3=1 items=0 ppid=1809 pid=1872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.346000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Aug 13 00:04:09.348000 audit[1874]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1874 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.348000 audit[1874]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc6beaf70 a2=0 a3=1 items=0 ppid=1809 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.348000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Aug 13 00:04:09.350000 audit[1876]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1876 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.350000 audit[1876]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc5e3c8d0 a2=0 a3=1 items=0 ppid=1809 pid=1876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.350000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Aug 13 00:04:09.352000 audit[1878]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1878 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.352000 audit[1878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffca824e40 a2=0 a3=1 items=0 ppid=1809 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.352000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Aug 13 00:04:09.353000 audit[1880]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1880 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.353000 audit[1880]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd5fab5a0 a2=0 a3=1 items=0 ppid=1809 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.353000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Aug 13 00:04:09.355000 audit[1882]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1882 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.355000 audit[1882]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe2f0ea10 a2=0 a3=1 items=0 ppid=1809 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.355000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Aug 13 00:04:09.357000 audit[1884]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1884 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.357000 audit[1884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffec492b70 a2=0 a3=1 items=0 ppid=1809 pid=1884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.357000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Aug 13 00:04:09.359000 audit[1886]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1886 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.359000 audit[1886]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffeca5c450 a2=0 a3=1 items=0 ppid=1809 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.359000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Aug 13 00:04:09.360000 audit[1888]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1888 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.360000 audit[1888]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeb41ba90 a2=0 a3=1 items=0 ppid=1809 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.360000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Aug 13 00:04:09.362664 systemd-networkd[1624]: docker0: Link UP Aug 13 00:04:09.405000 audit[1892]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1892 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.405000 audit[1892]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd97907b0 a2=0 a3=1 items=0 ppid=1809 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.405000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:04:09.416000 audit[1893]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:09.416000 audit[1893]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffac1e640 a2=0 a3=1 items=0 ppid=1809 pid=1893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:09.416000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Aug 13 00:04:09.417734 env[1809]: time="2025-08-13T00:04:09.417702745Z" level=info msg="Loading containers: done." Aug 13 00:04:09.428174 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3680203309-merged.mount: Deactivated successfully. Aug 13 00:04:09.476479 env[1809]: time="2025-08-13T00:04:09.475608971Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Aug 13 00:04:09.476479 env[1809]: time="2025-08-13T00:04:09.475802694Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Aug 13 00:04:09.476479 env[1809]: time="2025-08-13T00:04:09.476291102Z" level=info msg="Daemon has completed initialization" Aug 13 00:04:09.552888 systemd[1]: Started docker.service. Aug 13 00:04:09.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:09.560425 env[1809]: time="2025-08-13T00:04:09.560227954Z" level=info msg="API listen on /run/docker.sock" Aug 13 00:04:11.096504 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Aug 13 00:04:11.952291 env[1470]: time="2025-08-13T00:04:11.952037817Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.3\"" Aug 13 00:04:13.086222 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3296849274.mount: Deactivated successfully. Aug 13 00:04:14.018198 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Aug 13 00:04:14.018386 systemd[1]: Stopped kubelet.service. Aug 13 00:04:14.039456 kernel: kauditd_printk_skb: 84 callbacks suppressed Aug 13 00:04:14.039499 kernel: audit: type=1130 audit(1755043454.017:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:14.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:14.019881 systemd[1]: Starting kubelet.service... Aug 13 00:04:14.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:14.059281 kernel: audit: type=1131 audit(1755043454.017:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:14.118141 systemd[1]: Started kubelet.service. Aug 13 00:04:14.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:14.135309 kernel: audit: type=1130 audit(1755043454.117:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:14.168223 kubelet[1931]: E0813 00:04:14.168182 1931 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:04:14.170866 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:04:14.170989 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:04:14.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:04:14.189271 kernel: audit: type=1131 audit(1755043454.169:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:04:16.388913 env[1470]: time="2025-08-13T00:04:16.388866256Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:16.412383 env[1470]: time="2025-08-13T00:04:16.412318620Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c0425f3fe3fbf33c17a14d49c43d4fd0b60b2254511902d5b2c29e53ca684fc9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:16.420978 env[1470]: time="2025-08-13T00:04:16.420937790Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:16.429195 env[1470]: time="2025-08-13T00:04:16.429154035Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:125a8b488def5ea24e2de5682ab1abf063163aae4d89ce21811a45f3ecf23816,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:16.430018 env[1470]: time="2025-08-13T00:04:16.429982164Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.3\" returns image reference \"sha256:c0425f3fe3fbf33c17a14d49c43d4fd0b60b2254511902d5b2c29e53ca684fc9\"" Aug 13 00:04:16.434919 env[1470]: time="2025-08-13T00:04:16.432828153Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.3\"" Aug 13 00:04:17.319110 update_engine[1460]: I0813 00:04:17.318781 1460 update_attempter.cc:509] Updating boot flags... Aug 13 00:04:18.298895 env[1470]: time="2025-08-13T00:04:18.298813097Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:18.319967 env[1470]: time="2025-08-13T00:04:18.319925650Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef439b94d49d41d1b377c316fb053adb88bf6b26ec7e63aaf3deba953b7c766f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:18.335091 env[1470]: time="2025-08-13T00:04:18.335050189Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:18.347586 env[1470]: time="2025-08-13T00:04:18.347551543Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:96091626e37c5d5920ee6c3203b783cc01a08f287ec0713aeb7809bb62ccea90,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:18.348438 env[1470]: time="2025-08-13T00:04:18.348410671Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.3\" returns image reference \"sha256:ef439b94d49d41d1b377c316fb053adb88bf6b26ec7e63aaf3deba953b7c766f\"" Aug 13 00:04:18.349679 env[1470]: time="2025-08-13T00:04:18.349653162Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.3\"" Aug 13 00:04:20.104887 env[1470]: time="2025-08-13T00:04:20.104839731Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:20.124200 env[1470]: time="2025-08-13T00:04:20.124162646Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c03972dff86ba78247043f2b6171ce436ab9323da7833b18924c3d8e29ea37a5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:20.135280 env[1470]: time="2025-08-13T00:04:20.135226335Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:20.147414 env[1470]: time="2025-08-13T00:04:20.147372673Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:f3a2ffdd7483168205236f7762e9a1933f17dd733bc0188b52bddab9c0762868,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:20.148246 env[1470]: time="2025-08-13T00:04:20.148219000Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.3\" returns image reference \"sha256:c03972dff86ba78247043f2b6171ce436ab9323da7833b18924c3d8e29ea37a5\"" Aug 13 00:04:20.148863 env[1470]: time="2025-08-13T00:04:20.148838805Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.3\"" Aug 13 00:04:21.556361 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3475134610.mount: Deactivated successfully. Aug 13 00:04:22.195857 env[1470]: time="2025-08-13T00:04:22.195803761Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:22.212588 env[1470]: time="2025-08-13T00:04:22.212550199Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:738e99dbd7325e2cdd650d83d59a79c7ecb005ab0d5bf029fc15c54ee9359306,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:22.223983 env[1470]: time="2025-08-13T00:04:22.223931640Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:22.232181 env[1470]: time="2025-08-13T00:04:22.232152978Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:c69929cfba9e38305eb1e20ca859aeb90e0d2a7326eab9bb1e8298882fe626cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:22.232616 env[1470]: time="2025-08-13T00:04:22.232588021Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.3\" returns image reference \"sha256:738e99dbd7325e2cdd650d83d59a79c7ecb005ab0d5bf029fc15c54ee9359306\"" Aug 13 00:04:22.233321 env[1470]: time="2025-08-13T00:04:22.233292066Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Aug 13 00:04:23.588978 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3434717467.mount: Deactivated successfully. Aug 13 00:04:24.268163 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Aug 13 00:04:24.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:24.268356 systemd[1]: Stopped kubelet.service. Aug 13 00:04:24.269745 systemd[1]: Starting kubelet.service... Aug 13 00:04:24.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:24.304293 kernel: audit: type=1130 audit(1755043464.267:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:24.304386 kernel: audit: type=1131 audit(1755043464.267:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:24.359269 systemd[1]: Started kubelet.service. Aug 13 00:04:24.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:24.377287 kernel: audit: type=1130 audit(1755043464.358:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:24.406731 kubelet[1983]: E0813 00:04:24.406681 1983 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:04:24.408610 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:04:24.408735 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:04:24.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:04:24.426281 kernel: audit: type=1131 audit(1755043464.407:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:04:26.544123 env[1470]: time="2025-08-13T00:04:26.544072418Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:26.566192 env[1470]: time="2025-08-13T00:04:26.566148059Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:26.580943 env[1470]: time="2025-08-13T00:04:26.580900739Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:26.597923 env[1470]: time="2025-08-13T00:04:26.597853191Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:26.598991 env[1470]: time="2025-08-13T00:04:26.598962918Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Aug 13 00:04:26.599625 env[1470]: time="2025-08-13T00:04:26.599601321Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Aug 13 00:04:27.511145 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4137783625.mount: Deactivated successfully. Aug 13 00:04:28.620766 env[1470]: time="2025-08-13T00:04:28.620718879Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:28.643001 env[1470]: time="2025-08-13T00:04:28.642959146Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:28.654434 env[1470]: time="2025-08-13T00:04:28.654317000Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:28.666327 env[1470]: time="2025-08-13T00:04:28.666247178Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:28.666910 env[1470]: time="2025-08-13T00:04:28.666880741Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Aug 13 00:04:28.667349 env[1470]: time="2025-08-13T00:04:28.667322943Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Aug 13 00:04:29.617777 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1159071879.mount: Deactivated successfully. Aug 13 00:04:32.647337 env[1470]: time="2025-08-13T00:04:32.647285071Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:32.668873 env[1470]: time="2025-08-13T00:04:32.668835873Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:32.681117 env[1470]: time="2025-08-13T00:04:32.681089064Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:32.688782 env[1470]: time="2025-08-13T00:04:32.688757695Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:32.689654 env[1470]: time="2025-08-13T00:04:32.689625908Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Aug 13 00:04:34.518163 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Aug 13 00:04:34.518349 systemd[1]: Stopped kubelet.service. Aug 13 00:04:34.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:34.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:34.553329 kernel: audit: type=1130 audit(1755043474.518:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:34.553402 kernel: audit: type=1131 audit(1755043474.518:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:34.547716 systemd[1]: Starting kubelet.service... Aug 13 00:04:34.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:34.761584 systemd[1]: Started kubelet.service. Aug 13 00:04:34.782292 kernel: audit: type=1130 audit(1755043474.761:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:34.815430 kubelet[2012]: E0813 00:04:34.815397 2012 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Aug 13 00:04:34.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:04:34.818025 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Aug 13 00:04:34.818144 systemd[1]: kubelet.service: Failed with result 'exit-code'. Aug 13 00:04:34.836277 kernel: audit: type=1131 audit(1755043474.818:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Aug 13 00:04:38.816427 systemd[1]: Stopped kubelet.service. Aug 13 00:04:38.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:38.835298 systemd[1]: Starting kubelet.service... Aug 13 00:04:38.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:38.854814 kernel: audit: type=1130 audit(1755043478.816:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:38.854910 kernel: audit: type=1131 audit(1755043478.816:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:38.874871 systemd[1]: Reloading. Aug 13 00:04:38.952320 /usr/lib/systemd/system-generators/torcx-generator[2047]: time="2025-08-13T00:04:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:04:38.952985 /usr/lib/systemd/system-generators/torcx-generator[2047]: time="2025-08-13T00:04:38Z" level=info msg="torcx already run" Aug 13 00:04:39.030342 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:04:39.030519 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:04:39.046305 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:04:39.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154803 kernel: audit: type=1400 audit(1755043479.120:261): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154871 kernel: audit: type=1400 audit(1755043479.120:262): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.173631 kernel: audit: type=1400 audit(1755043479.121:263): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.173716 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Aug 13 00:04:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit: BPF prog-id=44 op=LOAD Aug 13 00:04:39.137000 audit: BPF prog-id=36 op=UNLOAD Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit: BPF prog-id=45 op=LOAD Aug 13 00:04:39.153000 audit: BPF prog-id=38 op=UNLOAD Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit: BPF prog-id=46 op=LOAD Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.153000 audit: BPF prog-id=47 op=LOAD Aug 13 00:04:39.153000 audit: BPF prog-id=39 op=UNLOAD Aug 13 00:04:39.153000 audit: BPF prog-id=40 op=UNLOAD Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit: BPF prog-id=48 op=LOAD Aug 13 00:04:39.154000 audit: BPF prog-id=37 op=UNLOAD Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit: BPF prog-id=41 op=UNLOAD Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit: BPF prog-id=50 op=LOAD Aug 13 00:04:39.177000 audit: BPF prog-id=27 op=UNLOAD Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit: BPF prog-id=51 op=LOAD Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.178000 audit: BPF prog-id=52 op=LOAD Aug 13 00:04:39.178000 audit: BPF prog-id=28 op=UNLOAD Aug 13 00:04:39.178000 audit: BPF prog-id=29 op=UNLOAD Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit: BPF prog-id=53 op=LOAD Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.179000 audit: BPF prog-id=54 op=LOAD Aug 13 00:04:39.179000 audit: BPF prog-id=30 op=UNLOAD Aug 13 00:04:39.179000 audit: BPF prog-id=31 op=UNLOAD Aug 13 00:04:39.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit: BPF prog-id=55 op=LOAD Aug 13 00:04:39.182000 audit: BPF prog-id=32 op=UNLOAD Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit: BPF prog-id=56 op=LOAD Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit: BPF prog-id=57 op=LOAD Aug 13 00:04:39.182000 audit: BPF prog-id=33 op=UNLOAD Aug 13 00:04:39.182000 audit: BPF prog-id=34 op=UNLOAD Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:39.182000 audit: BPF prog-id=58 op=LOAD Aug 13 00:04:39.182000 audit: BPF prog-id=43 op=UNLOAD Aug 13 00:04:39.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:39.204037 systemd[1]: Started kubelet.service. Aug 13 00:04:39.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:39.206534 systemd[1]: Stopping kubelet.service... Aug 13 00:04:39.206862 systemd[1]: kubelet.service: Deactivated successfully. Aug 13 00:04:39.207019 systemd[1]: Stopped kubelet.service. Aug 13 00:04:39.208486 systemd[1]: Starting kubelet.service... Aug 13 00:04:39.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:39.467463 systemd[1]: Started kubelet.service. Aug 13 00:04:39.536614 kubelet[2111]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:04:39.537017 kubelet[2111]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Aug 13 00:04:39.537171 kubelet[2111]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:04:39.537274 kubelet[2111]: I0813 00:04:39.537224 2111 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 00:04:40.981852 kubelet[2111]: I0813 00:04:40.981820 2111 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Aug 13 00:04:40.982178 kubelet[2111]: I0813 00:04:40.982164 2111 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 00:04:40.982475 kubelet[2111]: I0813 00:04:40.982458 2111 server.go:956] "Client rotation is on, will bootstrap in background" Aug 13 00:04:41.001073 kubelet[2111]: E0813 00:04:41.001027 2111 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.200.20.20:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Aug 13 00:04:41.002294 kubelet[2111]: I0813 00:04:41.002268 2111 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 00:04:41.010387 kubelet[2111]: E0813 00:04:41.010356 2111 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 00:04:41.010513 kubelet[2111]: I0813 00:04:41.010500 2111 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 00:04:41.014706 kubelet[2111]: I0813 00:04:41.014674 2111 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 00:04:41.015873 kubelet[2111]: I0813 00:04:41.015831 2111 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 00:04:41.016015 kubelet[2111]: I0813 00:04:41.015875 2111 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-a-c7286a0eab","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 00:04:41.016104 kubelet[2111]: I0813 00:04:41.016025 2111 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 00:04:41.016104 kubelet[2111]: I0813 00:04:41.016034 2111 container_manager_linux.go:303] "Creating device plugin manager" Aug 13 00:04:41.016171 kubelet[2111]: I0813 00:04:41.016151 2111 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:04:41.018935 kubelet[2111]: I0813 00:04:41.018917 2111 kubelet.go:480] "Attempting to sync node with API server" Aug 13 00:04:41.018985 kubelet[2111]: I0813 00:04:41.018939 2111 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 00:04:41.018985 kubelet[2111]: I0813 00:04:41.018960 2111 kubelet.go:386] "Adding apiserver pod source" Aug 13 00:04:41.018985 kubelet[2111]: I0813 00:04:41.018972 2111 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 00:04:41.024952 kubelet[2111]: I0813 00:04:41.024924 2111 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 00:04:41.025526 kubelet[2111]: I0813 00:04:41.025503 2111 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Aug 13 00:04:41.025595 kubelet[2111]: W0813 00:04:41.025562 2111 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Aug 13 00:04:41.027374 kubelet[2111]: I0813 00:04:41.027353 2111 watchdog_linux.go:99] "Systemd watchdog is not enabled" Aug 13 00:04:41.027435 kubelet[2111]: I0813 00:04:41.027395 2111 server.go:1289] "Started kubelet" Aug 13 00:04:41.027582 kubelet[2111]: E0813 00:04:41.027553 2111 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.200.20.20:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Aug 13 00:04:41.027657 kubelet[2111]: E0813 00:04:41.027637 2111 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.200.20.20:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-a-c7286a0eab&limit=500&resourceVersion=0\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Aug 13 00:04:41.032989 kubelet[2111]: I0813 00:04:41.032938 2111 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 00:04:41.033377 kubelet[2111]: I0813 00:04:41.033362 2111 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 00:04:41.040282 kernel: kauditd_printk_skb: 173 callbacks suppressed Aug 13 00:04:41.040367 kernel: audit: type=1400 audit(1755043481.033:435): avc: denied { mac_admin } for pid=2111 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:41.033000 audit[2111]: AVC avc: denied { mac_admin } for pid=2111 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:41.040457 kubelet[2111]: E0813 00:04:41.036208 2111 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.20:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.20:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-a-c7286a0eab.185b2abf54005699 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-a-c7286a0eab,UID:ci-3510.3.8-a-c7286a0eab,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-a-c7286a0eab,},FirstTimestamp:2025-08-13 00:04:41.027368601 +0000 UTC m=+1.555612099,LastTimestamp:2025-08-13 00:04:41.027368601 +0000 UTC m=+1.555612099,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-a-c7286a0eab,}" Aug 13 00:04:41.040457 kubelet[2111]: E0813 00:04:41.038363 2111 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Aug 13 00:04:41.040457 kubelet[2111]: I0813 00:04:41.038451 2111 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 00:04:41.040457 kubelet[2111]: I0813 00:04:41.039180 2111 server.go:317] "Adding debug handlers to kubelet server" Aug 13 00:04:41.040685 kubelet[2111]: I0813 00:04:41.040660 2111 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 00:04:41.040786 kubelet[2111]: I0813 00:04:41.040772 2111 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Aug 13 00:04:41.040926 kubelet[2111]: I0813 00:04:41.040913 2111 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 00:04:41.050854 kubelet[2111]: I0813 00:04:41.050833 2111 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 00:04:41.052033 kubelet[2111]: I0813 00:04:41.052016 2111 volume_manager.go:297] "Starting Kubelet Volume Manager" Aug 13 00:04:41.052946 kubelet[2111]: E0813 00:04:41.052928 2111 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" Aug 13 00:04:41.053666 kubelet[2111]: I0813 00:04:41.053647 2111 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Aug 13 00:04:41.053809 kubelet[2111]: I0813 00:04:41.053798 2111 reconciler.go:26] "Reconciler: start to sync state" Aug 13 00:04:41.054487 kubelet[2111]: I0813 00:04:41.054470 2111 factory.go:223] Registration of the systemd container factory successfully Aug 13 00:04:41.054695 kubelet[2111]: I0813 00:04:41.054679 2111 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 00:04:41.055201 kubelet[2111]: E0813 00:04:41.055179 2111 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.200.20.20:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Aug 13 00:04:41.055377 kubelet[2111]: E0813 00:04:41.055344 2111 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.20:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-a-c7286a0eab?timeout=10s\": dial tcp 10.200.20.20:6443: connect: connection refused" interval="200ms" Aug 13 00:04:41.033000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:04:41.058015 kubelet[2111]: I0813 00:04:41.057997 2111 factory.go:223] Registration of the containerd container factory successfully Aug 13 00:04:41.065364 kernel: audit: type=1401 audit(1755043481.033:435): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:04:41.065454 kernel: audit: type=1300 audit(1755043481.033:435): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ad80c0 a1=4000992a38 a2=4000ad8090 a3=25 items=0 ppid=1 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.033000 audit[2111]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ad80c0 a1=4000992a38 a2=4000ad8090 a3=25 items=0 ppid=1 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.033000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:04:41.113948 kernel: audit: type=1327 audit(1755043481.033:435): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:04:41.039000 audit[2111]: AVC avc: denied { mac_admin } for pid=2111 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:41.131769 kernel: audit: type=1400 audit(1755043481.039:436): avc: denied { mac_admin } for pid=2111 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:41.039000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:04:41.136688 kubelet[2111]: I0813 00:04:41.136648 2111 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Aug 13 00:04:41.138216 kubelet[2111]: I0813 00:04:41.138198 2111 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Aug 13 00:04:41.138359 kubelet[2111]: I0813 00:04:41.138348 2111 status_manager.go:230] "Starting to sync pod status with apiserver" Aug 13 00:04:41.138582 kubelet[2111]: I0813 00:04:41.138571 2111 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Aug 13 00:04:41.138678 kubelet[2111]: I0813 00:04:41.138668 2111 kubelet.go:2436] "Starting kubelet main sync loop" Aug 13 00:04:41.138793 kubelet[2111]: E0813 00:04:41.138776 2111 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 00:04:41.139814 kubelet[2111]: E0813 00:04:41.139791 2111 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.200.20.20:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Aug 13 00:04:41.141469 kernel: audit: type=1401 audit(1755043481.039:436): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:04:41.039000 audit[2111]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000990620 a1=4000992a50 a2=4000ad8150 a3=25 items=0 ppid=1 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.153109 kubelet[2111]: E0813 00:04:41.153091 2111 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" Aug 13 00:04:41.167945 kernel: audit: type=1300 audit(1755043481.039:436): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000990620 a1=4000992a50 a2=4000ad8150 a3=25 items=0 ppid=1 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.039000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:04:41.176417 kubelet[2111]: I0813 00:04:41.176393 2111 cpu_manager.go:221] "Starting CPU manager" policy="none" Aug 13 00:04:41.176552 kubelet[2111]: I0813 00:04:41.176540 2111 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Aug 13 00:04:41.176629 kubelet[2111]: I0813 00:04:41.176620 2111 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:04:41.192009 kernel: audit: type=1327 audit(1755043481.039:436): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:04:41.055000 audit[2127]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:41.205428 kernel: audit: type=1325 audit(1755043481.055:437): table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:41.055000 audit[2127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc346cb30 a2=0 a3=1 items=0 ppid=2111 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.231439 kernel: audit: type=1300 audit(1755043481.055:437): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc346cb30 a2=0 a3=1 items=0 ppid=2111 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 00:04:41.062000 audit[2128]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2128 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:41.062000 audit[2128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd97b63f0 a2=0 a3=1 items=0 ppid=2111 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.062000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 00:04:41.063000 audit[2130]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2130 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:41.063000 audit[2130]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeaa40850 a2=0 a3=1 items=0 ppid=2111 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:04:41.066000 audit[2132]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:41.066000 audit[2132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd068f810 a2=0 a3=1 items=0 ppid=2111 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:04:41.135000 audit[2139]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:41.135000 audit[2139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffec86cbe0 a2=0 a3=1 items=0 ppid=2111 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.135000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Aug 13 00:04:41.136000 audit[2140]: NETFILTER_CFG table=mangle:34 family=10 entries=2 op=nft_register_chain pid=2140 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:41.136000 audit[2140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc3c701e0 a2=0 a3=1 items=0 ppid=2111 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.136000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Aug 13 00:04:41.139000 audit[2141]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:41.139000 audit[2141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb267a50 a2=0 a3=1 items=0 ppid=2111 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.139000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 00:04:41.141000 audit[2142]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=2142 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:41.141000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0222d50 a2=0 a3=1 items=0 ppid=2111 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.141000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Aug 13 00:04:41.142000 audit[2143]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:41.142000 audit[2143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffbf28810 a2=0 a3=1 items=0 ppid=2111 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.142000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 00:04:41.143000 audit[2145]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:41.143000 audit[2145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc84744f0 a2=0 a3=1 items=0 ppid=2111 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 00:04:41.144000 audit[2144]: NETFILTER_CFG table=nat:39 family=10 entries=2 op=nft_register_chain pid=2144 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:41.144000 audit[2144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffffd00a680 a2=0 a3=1 items=0 ppid=2111 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.144000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Aug 13 00:04:41.145000 audit[2146]: NETFILTER_CFG table=filter:40 family=10 entries=2 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:41.145000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcd14d640 a2=0 a3=1 items=0 ppid=2111 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.145000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Aug 13 00:04:41.234572 kubelet[2111]: I0813 00:04:41.234549 2111 policy_none.go:49] "None policy: Start" Aug 13 00:04:41.234685 kubelet[2111]: I0813 00:04:41.234673 2111 memory_manager.go:186] "Starting memorymanager" policy="None" Aug 13 00:04:41.234756 kubelet[2111]: I0813 00:04:41.234747 2111 state_mem.go:35] "Initializing new in-memory state store" Aug 13 00:04:41.239685 kubelet[2111]: E0813 00:04:41.239663 2111 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Aug 13 00:04:41.248970 systemd[1]: Created slice kubepods.slice. Aug 13 00:04:41.253324 systemd[1]: Created slice kubepods-burstable.slice. Aug 13 00:04:41.253818 kubelet[2111]: E0813 00:04:41.253802 2111 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" Aug 13 00:04:41.256225 systemd[1]: Created slice kubepods-besteffort.slice. Aug 13 00:04:41.256680 kubelet[2111]: E0813 00:04:41.256652 2111 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.20:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-a-c7286a0eab?timeout=10s\": dial tcp 10.200.20.20:6443: connect: connection refused" interval="400ms" Aug 13 00:04:41.263904 kubelet[2111]: E0813 00:04:41.263887 2111 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Aug 13 00:04:41.262000 audit[2111]: AVC avc: denied { mac_admin } for pid=2111 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:41.262000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:04:41.262000 audit[2111]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e36300 a1=4000dc3c38 a2=4000e362d0 a3=25 items=0 ppid=1 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:41.262000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:04:41.264486 kubelet[2111]: E0813 00:04:41.264462 2111 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Aug 13 00:04:41.265147 kubelet[2111]: I0813 00:04:41.265123 2111 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 00:04:41.265639 kubelet[2111]: I0813 00:04:41.265603 2111 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 00:04:41.266480 kubelet[2111]: I0813 00:04:41.266458 2111 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 00:04:41.266840 kubelet[2111]: E0813 00:04:41.266809 2111 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Aug 13 00:04:41.266983 kubelet[2111]: E0813 00:04:41.266969 2111 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-a-c7286a0eab\" not found" Aug 13 00:04:41.367897 kubelet[2111]: I0813 00:04:41.367859 2111 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.368220 kubelet[2111]: E0813 00:04:41.368192 2111 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.20:6443/api/v1/nodes\": dial tcp 10.200.20.20:6443: connect: connection refused" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.454840 kubelet[2111]: I0813 00:04:41.454751 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.454840 kubelet[2111]: I0813 00:04:41.454777 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.454840 kubelet[2111]: I0813 00:04:41.454798 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.454840 kubelet[2111]: I0813 00:04:41.454816 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.454840 kubelet[2111]: I0813 00:04:41.454843 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.455057 kubelet[2111]: I0813 00:04:41.454860 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/06a5214570a2a206cb2e8af0d936ef88-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-a-c7286a0eab\" (UID: \"06a5214570a2a206cb2e8af0d936ef88\") " pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.455057 kubelet[2111]: I0813 00:04:41.454873 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/06a5214570a2a206cb2e8af0d936ef88-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-a-c7286a0eab\" (UID: \"06a5214570a2a206cb2e8af0d936ef88\") " pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.455057 kubelet[2111]: I0813 00:04:41.454897 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/06a5214570a2a206cb2e8af0d936ef88-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-a-c7286a0eab\" (UID: \"06a5214570a2a206cb2e8af0d936ef88\") " pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.458936 systemd[1]: Created slice kubepods-burstable-pod06a5214570a2a206cb2e8af0d936ef88.slice. Aug 13 00:04:41.465793 kubelet[2111]: E0813 00:04:41.465766 2111 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.473818 systemd[1]: Created slice kubepods-burstable-pod45d91c9a24cf74b81d49fac302db86d7.slice. Aug 13 00:04:41.477084 kubelet[2111]: E0813 00:04:41.475346 2111 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.490964 systemd[1]: Created slice kubepods-burstable-pod64a2bdb3e738a68473e48c8c59f9403c.slice. Aug 13 00:04:41.494331 kubelet[2111]: E0813 00:04:41.494302 2111 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.555763 kubelet[2111]: I0813 00:04:41.555723 2111 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/64a2bdb3e738a68473e48c8c59f9403c-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-a-c7286a0eab\" (UID: \"64a2bdb3e738a68473e48c8c59f9403c\") " pod="kube-system/kube-scheduler-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.570563 kubelet[2111]: I0813 00:04:41.570539 2111 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.570869 kubelet[2111]: E0813 00:04:41.570843 2111 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.20:6443/api/v1/nodes\": dial tcp 10.200.20.20:6443: connect: connection refused" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.657781 kubelet[2111]: E0813 00:04:41.657737 2111 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.20:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-a-c7286a0eab?timeout=10s\": dial tcp 10.200.20.20:6443: connect: connection refused" interval="800ms" Aug 13 00:04:41.768335 env[1470]: time="2025-08-13T00:04:41.767212430Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-a-c7286a0eab,Uid:06a5214570a2a206cb2e8af0d936ef88,Namespace:kube-system,Attempt:0,}" Aug 13 00:04:41.778731 env[1470]: time="2025-08-13T00:04:41.778688900Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-a-c7286a0eab,Uid:45d91c9a24cf74b81d49fac302db86d7,Namespace:kube-system,Attempt:0,}" Aug 13 00:04:41.795649 env[1470]: time="2025-08-13T00:04:41.795605670Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-a-c7286a0eab,Uid:64a2bdb3e738a68473e48c8c59f9403c,Namespace:kube-system,Attempt:0,}" Aug 13 00:04:41.972545 kubelet[2111]: I0813 00:04:41.972515 2111 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:41.972860 kubelet[2111]: E0813 00:04:41.972830 2111 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.20:6443/api/v1/nodes\": dial tcp 10.200.20.20:6443: connect: connection refused" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:42.004611 kubelet[2111]: E0813 00:04:42.004575 2111 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.200.20.20:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Aug 13 00:04:42.106879 kubelet[2111]: E0813 00:04:42.106424 2111 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.200.20.20:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Aug 13 00:04:42.459084 kubelet[2111]: E0813 00:04:42.458781 2111 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.20:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-a-c7286a0eab?timeout=10s\": dial tcp 10.200.20.20:6443: connect: connection refused" interval="1.6s" Aug 13 00:04:42.495410 kubelet[2111]: E0813 00:04:42.495361 2111 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.200.20.20:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-a-c7286a0eab&limit=500&resourceVersion=0\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Aug 13 00:04:42.592777 kubelet[2111]: E0813 00:04:42.592731 2111 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.200.20.20:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Aug 13 00:04:42.775269 kubelet[2111]: I0813 00:04:42.775107 2111 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:42.775779 kubelet[2111]: E0813 00:04:42.775495 2111 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.20:6443/api/v1/nodes\": dial tcp 10.200.20.20:6443: connect: connection refused" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:42.775779 kubelet[2111]: E0813 00:04:42.775685 2111 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.20:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.20:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-a-c7286a0eab.185b2abf54005699 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-a-c7286a0eab,UID:ci-3510.3.8-a-c7286a0eab,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-a-c7286a0eab,},FirstTimestamp:2025-08-13 00:04:41.027368601 +0000 UTC m=+1.555612099,LastTimestamp:2025-08-13 00:04:41.027368601 +0000 UTC m=+1.555612099,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-a-c7286a0eab,}" Aug 13 00:04:42.801239 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount846829310.mount: Deactivated successfully. Aug 13 00:04:42.888959 env[1470]: time="2025-08-13T00:04:42.888916457Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:42.896517 env[1470]: time="2025-08-13T00:04:42.896489810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:42.926801 env[1470]: time="2025-08-13T00:04:42.926753861Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:42.945499 env[1470]: time="2025-08-13T00:04:42.945459733Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:42.956344 env[1470]: time="2025-08-13T00:04:42.956311478Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:42.966471 env[1470]: time="2025-08-13T00:04:42.966415790Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:42.977839 env[1470]: time="2025-08-13T00:04:42.977809281Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:42.989540 env[1470]: time="2025-08-13T00:04:42.989491865Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:43.000917 env[1470]: time="2025-08-13T00:04:43.000885636Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:43.011320 env[1470]: time="2025-08-13T00:04:43.011284509Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:43.018048 env[1470]: time="2025-08-13T00:04:43.018014854Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:43.028995 env[1470]: time="2025-08-13T00:04:43.028881987Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:43.142546 kubelet[2111]: E0813 00:04:43.142504 2111 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.200.20.20:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.20:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Aug 13 00:04:43.218284 env[1470]: time="2025-08-13T00:04:43.218210900Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:04:43.218440 env[1470]: time="2025-08-13T00:04:43.218246542Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:04:43.218440 env[1470]: time="2025-08-13T00:04:43.218275823Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:04:43.218839 env[1470]: time="2025-08-13T00:04:43.218616838Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7ea2377b4639b66a1aacb169a2c135164d8ee3dedd5795f524e3db167eb98519 pid=2155 runtime=io.containerd.runc.v2 Aug 13 00:04:43.232074 env[1470]: time="2025-08-13T00:04:43.232001446Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:04:43.233985 env[1470]: time="2025-08-13T00:04:43.232053648Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:04:43.233985 env[1470]: time="2025-08-13T00:04:43.232064169Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:04:43.233985 env[1470]: time="2025-08-13T00:04:43.232158893Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8c98ca2a7f8e81dca5a4289c16675eef0b5038740100806f467d40ee023cd632 pid=2179 runtime=io.containerd.runc.v2 Aug 13 00:04:43.238339 systemd[1]: Started cri-containerd-7ea2377b4639b66a1aacb169a2c135164d8ee3dedd5795f524e3db167eb98519.scope. Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.255000 audit: BPF prog-id=59 op=LOAD Aug 13 00:04:43.255000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.255000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765613233373762343633396236366131616163623136396132633133 Aug 13 00:04:43.259322 systemd[1]: Started cri-containerd-8c98ca2a7f8e81dca5a4289c16675eef0b5038740100806f467d40ee023cd632.scope. Aug 13 00:04:43.258000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.258000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765613233373762343633396236366131616163623136396132633133 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit: BPF prog-id=60 op=LOAD Aug 13 00:04:43.259000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765613233373762343633396236366131616163623136396132633133 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.259000 audit: BPF prog-id=61 op=LOAD Aug 13 00:04:43.259000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765613233373762343633396236366131616163623136396132633133 Aug 13 00:04:43.260000 audit: BPF prog-id=61 op=UNLOAD Aug 13 00:04:43.260000 audit: BPF prog-id=60 op=UNLOAD Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { perfmon } for pid=2166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit[2166]: AVC avc: denied { bpf } for pid=2166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.260000 audit: BPF prog-id=62 op=LOAD Aug 13 00:04:43.260000 audit[2166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2155 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765613233373762343633396236366131616163623136396132633133 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.273000 audit: BPF prog-id=63 op=LOAD Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2179 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863393863613261376638653831646361356134323839633136363735 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2179 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863393863613261376638653831646361356134323839633136363735 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.274000 audit: BPF prog-id=64 op=LOAD Aug 13 00:04:43.274000 audit[2194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2179 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863393863613261376638653831646361356134323839633136363735 Aug 13 00:04:43.279000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.279000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.279000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.279000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.279000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.279000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.279000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.279000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.279000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.279000 audit: BPF prog-id=65 op=LOAD Aug 13 00:04:43.279000 audit[2194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2179 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863393863613261376638653831646361356134323839633136363735 Aug 13 00:04:43.279000 audit: BPF prog-id=65 op=UNLOAD Aug 13 00:04:43.280000 audit: BPF prog-id=64 op=UNLOAD Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.280000 audit: BPF prog-id=66 op=LOAD Aug 13 00:04:43.280000 audit[2194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2179 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863393863613261376638653831646361356134323839633136363735 Aug 13 00:04:43.288722 env[1470]: time="2025-08-13T00:04:43.288643897Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:04:43.289518 env[1470]: time="2025-08-13T00:04:43.289484415Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:04:43.289649 env[1470]: time="2025-08-13T00:04:43.289619181Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:04:43.289935 env[1470]: time="2025-08-13T00:04:43.289897794Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5cd7ff2792877049397cadbe8cac8cadbe8b30b589286bb13bb281531ea27768 pid=2224 runtime=io.containerd.runc.v2 Aug 13 00:04:43.300448 env[1470]: time="2025-08-13T00:04:43.300409671Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-a-c7286a0eab,Uid:45d91c9a24cf74b81d49fac302db86d7,Namespace:kube-system,Attempt:0,} returns sandbox id \"7ea2377b4639b66a1aacb169a2c135164d8ee3dedd5795f524e3db167eb98519\"" Aug 13 00:04:43.309227 systemd[1]: Started cri-containerd-5cd7ff2792877049397cadbe8cac8cadbe8b30b589286bb13bb281531ea27768.scope. Aug 13 00:04:43.318987 env[1470]: time="2025-08-13T00:04:43.318950232Z" level=info msg="CreateContainer within sandbox \"7ea2377b4639b66a1aacb169a2c135164d8ee3dedd5795f524e3db167eb98519\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Aug 13 00:04:43.321187 env[1470]: time="2025-08-13T00:04:43.321142572Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-a-c7286a0eab,Uid:06a5214570a2a206cb2e8af0d936ef88,Namespace:kube-system,Attempt:0,} returns sandbox id \"8c98ca2a7f8e81dca5a4289c16675eef0b5038740100806f467d40ee023cd632\"" Aug 13 00:04:43.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit: BPF prog-id=67 op=LOAD Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2224 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643766663237393238373730343933393763616462653863616338 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2224 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643766663237393238373730343933393763616462653863616338 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit: BPF prog-id=68 op=LOAD Aug 13 00:04:43.332000 audit[2245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2224 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643766663237393238373730343933393763616462653863616338 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.332000 audit: BPF prog-id=69 op=LOAD Aug 13 00:04:43.332000 audit[2245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2224 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643766663237393238373730343933393763616462653863616338 Aug 13 00:04:43.332000 audit: BPF prog-id=69 op=UNLOAD Aug 13 00:04:43.332000 audit: BPF prog-id=68 op=UNLOAD Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.333000 audit: BPF prog-id=70 op=LOAD Aug 13 00:04:43.333000 audit[2245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2224 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643766663237393238373730343933393763616462653863616338 Aug 13 00:04:43.336043 env[1470]: time="2025-08-13T00:04:43.336002526Z" level=info msg="CreateContainer within sandbox \"8c98ca2a7f8e81dca5a4289c16675eef0b5038740100806f467d40ee023cd632\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Aug 13 00:04:43.356281 env[1470]: time="2025-08-13T00:04:43.356214523Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-a-c7286a0eab,Uid:64a2bdb3e738a68473e48c8c59f9403c,Namespace:kube-system,Attempt:0,} returns sandbox id \"5cd7ff2792877049397cadbe8cac8cadbe8b30b589286bb13bb281531ea27768\"" Aug 13 00:04:43.374221 env[1470]: time="2025-08-13T00:04:43.374183179Z" level=info msg="CreateContainer within sandbox \"5cd7ff2792877049397cadbe8cac8cadbe8b30b589286bb13bb281531ea27768\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Aug 13 00:04:43.509947 env[1470]: time="2025-08-13T00:04:43.509900898Z" level=info msg="CreateContainer within sandbox \"7ea2377b4639b66a1aacb169a2c135164d8ee3dedd5795f524e3db167eb98519\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"b9b2492bf18d529ce1614eccba0c356ffc7bede021f5c562207896c4029c3f18\"" Aug 13 00:04:43.510735 env[1470]: time="2025-08-13T00:04:43.510710295Z" level=info msg="StartContainer for \"b9b2492bf18d529ce1614eccba0c356ffc7bede021f5c562207896c4029c3f18\"" Aug 13 00:04:43.528028 systemd[1]: Started cri-containerd-b9b2492bf18d529ce1614eccba0c356ffc7bede021f5c562207896c4029c3f18.scope. Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.540000 audit: BPF prog-id=71 op=LOAD Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2155 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623234393262663138643532396365313631346563636261306333 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2155 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623234393262663138643532396365313631346563636261306333 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit: BPF prog-id=72 op=LOAD Aug 13 00:04:43.541000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2155 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623234393262663138643532396365313631346563636261306333 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.541000 audit: BPF prog-id=73 op=LOAD Aug 13 00:04:43.541000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2155 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623234393262663138643532396365313631346563636261306333 Aug 13 00:04:43.541000 audit: BPF prog-id=73 op=UNLOAD Aug 13 00:04:43.541000 audit: BPF prog-id=72 op=UNLOAD Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.542000 audit: BPF prog-id=74 op=LOAD Aug 13 00:04:43.542000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2155 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239623234393262663138643532396365313631346563636261306333 Aug 13 00:04:43.569148 env[1470]: time="2025-08-13T00:04:43.569100505Z" level=info msg="CreateContainer within sandbox \"8c98ca2a7f8e81dca5a4289c16675eef0b5038740100806f467d40ee023cd632\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"9e23c04b96ab3068dd238c223d00079e92f73ba74f1865b1c238178c699f9317\"" Aug 13 00:04:43.569826 env[1470]: time="2025-08-13T00:04:43.569792776Z" level=info msg="StartContainer for \"9e23c04b96ab3068dd238c223d00079e92f73ba74f1865b1c238178c699f9317\"" Aug 13 00:04:43.583545 env[1470]: time="2025-08-13T00:04:43.583507119Z" level=info msg="StartContainer for \"b9b2492bf18d529ce1614eccba0c356ffc7bede021f5c562207896c4029c3f18\" returns successfully" Aug 13 00:04:43.587546 systemd[1]: Started cri-containerd-9e23c04b96ab3068dd238c223d00079e92f73ba74f1865b1c238178c699f9317.scope. Aug 13 00:04:43.588777 env[1470]: time="2025-08-13T00:04:43.588747997Z" level=info msg="CreateContainer within sandbox \"5cd7ff2792877049397cadbe8cac8cadbe8b30b589286bb13bb281531ea27768\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"314b8e0156b138d5f13a32ebb1a6962268ec527030ab02a3328f8bd22814874f\"" Aug 13 00:04:43.592281 env[1470]: time="2025-08-13T00:04:43.590478915Z" level=info msg="StartContainer for \"314b8e0156b138d5f13a32ebb1a6962268ec527030ab02a3328f8bd22814874f\"" Aug 13 00:04:43.607606 systemd[1]: Started cri-containerd-314b8e0156b138d5f13a32ebb1a6962268ec527030ab02a3328f8bd22814874f.scope. Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.610000 audit: BPF prog-id=75 op=LOAD Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2179 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323363303462393661623330363864643233386332323364303030 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2179 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323363303462393661623330363864643233386332323364303030 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit: BPF prog-id=76 op=LOAD Aug 13 00:04:43.611000 audit[2322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2179 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323363303462393661623330363864643233386332323364303030 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit: BPF prog-id=77 op=LOAD Aug 13 00:04:43.611000 audit[2322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2179 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323363303462393661623330363864643233386332323364303030 Aug 13 00:04:43.611000 audit: BPF prog-id=77 op=UNLOAD Aug 13 00:04:43.611000 audit: BPF prog-id=76 op=UNLOAD Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.611000 audit: BPF prog-id=78 op=LOAD Aug 13 00:04:43.611000 audit[2322]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2179 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323363303462393661623330363864643233386332323364303030 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.634000 audit: BPF prog-id=79 op=LOAD Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2224 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331346238653031353662313338643566313361333265626231613639 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2224 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331346238653031353662313338643566313361333265626231613639 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit: BPF prog-id=80 op=LOAD Aug 13 00:04:43.635000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2224 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331346238653031353662313338643566313361333265626231613639 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit: BPF prog-id=81 op=LOAD Aug 13 00:04:43.635000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2224 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331346238653031353662313338643566313361333265626231613639 Aug 13 00:04:43.635000 audit: BPF prog-id=81 op=UNLOAD Aug 13 00:04:43.635000 audit: BPF prog-id=80 op=UNLOAD Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:43.635000 audit: BPF prog-id=82 op=LOAD Aug 13 00:04:43.635000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2224 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:43.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331346238653031353662313338643566313361333265626231613639 Aug 13 00:04:43.656001 env[1470]: time="2025-08-13T00:04:43.655951207Z" level=info msg="StartContainer for \"9e23c04b96ab3068dd238c223d00079e92f73ba74f1865b1c238178c699f9317\" returns successfully" Aug 13 00:04:43.679566 env[1470]: time="2025-08-13T00:04:43.679520196Z" level=info msg="StartContainer for \"314b8e0156b138d5f13a32ebb1a6962268ec527030ab02a3328f8bd22814874f\" returns successfully" Aug 13 00:04:44.147394 kubelet[2111]: E0813 00:04:44.147360 2111 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:44.149593 kubelet[2111]: E0813 00:04:44.149572 2111 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:44.153420 kubelet[2111]: E0813 00:04:44.153396 2111 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:44.377688 kubelet[2111]: I0813 00:04:44.377655 2111 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:45.155070 kubelet[2111]: E0813 00:04:45.155031 2111 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:45.155758 kubelet[2111]: E0813 00:04:45.155737 2111 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:45.813426 kubelet[2111]: E0813 00:04:45.813393 2111 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:46.325230 kernel: kauditd_printk_skb: 380 callbacks suppressed Aug 13 00:04:46.325667 kernel: audit: type=1400 audit(1755043486.297:558): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.297000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.297000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000d68090 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:04:46.361926 kernel: audit: type=1300 audit(1755043486.297:558): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000d68090 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:04:46.297000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:46.297000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.386306 kernel: audit: type=1327 audit(1755043486.297:558): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:46.297000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400037c0e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:04:46.433988 kernel: audit: type=1400 audit(1755043486.297:559): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.434077 kernel: audit: type=1300 audit(1755043486.297:559): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400037c0e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:04:46.297000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:46.456549 kernel: audit: type=1327 audit(1755043486.297:559): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:46.449000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.479677 kernel: audit: type=1400 audit(1755043486.449:560): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.449000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004e91ec0 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:04:46.513270 kernel: audit: type=1300 audit(1755043486.449:560): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004e91ec0 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:04:46.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:46.543284 kernel: audit: type=1327 audit(1755043486.449:560): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:46.449000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522483 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.568183 kernel: audit: type=1400 audit(1755043486.449:561): avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522483 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.449000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004e91f50 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:04:46.449000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:46.456000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522489 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.456000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4d a1=400234f6e0 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:04:46.456000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:46.457000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.457000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400179b0c0 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:04:46.457000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:46.457000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.457000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40028a1650 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:04:46.457000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:46.457000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:46.457000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003533c80 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:04:46.457000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:04:46.617596 kubelet[2111]: E0813 00:04:46.617493 2111 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-a-c7286a0eab\" not found" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:46.670125 kubelet[2111]: I0813 00:04:46.670089 2111 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:46.754117 kubelet[2111]: I0813 00:04:46.754060 2111 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:46.770176 kubelet[2111]: E0813 00:04:46.770138 2111 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-a-c7286a0eab\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:46.770176 kubelet[2111]: I0813 00:04:46.770169 2111 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:46.771775 kubelet[2111]: E0813 00:04:46.771734 2111 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-a-c7286a0eab\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:46.771836 kubelet[2111]: I0813 00:04:46.771776 2111 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:46.773663 kubelet[2111]: E0813 00:04:46.773641 2111 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:47.034421 kubelet[2111]: I0813 00:04:47.034182 2111 apiserver.go:52] "Watching apiserver" Aug 13 00:04:47.054483 kubelet[2111]: I0813 00:04:47.054456 2111 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Aug 13 00:04:47.910735 kubelet[2111]: I0813 00:04:47.910705 2111 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:47.920503 kubelet[2111]: I0813 00:04:47.920471 2111 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Aug 13 00:04:48.965069 systemd[1]: Reloading. Aug 13 00:04:49.049721 /usr/lib/systemd/system-generators/torcx-generator[2417]: time="2025-08-13T00:04:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Aug 13 00:04:49.050270 /usr/lib/systemd/system-generators/torcx-generator[2417]: time="2025-08-13T00:04:49Z" level=info msg="torcx already run" Aug 13 00:04:49.120183 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Aug 13 00:04:49.120437 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Aug 13 00:04:49.136403 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.218000 audit: BPF prog-id=83 op=LOAD Aug 13 00:04:49.218000 audit: BPF prog-id=44 op=UNLOAD Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.219000 audit: BPF prog-id=84 op=LOAD Aug 13 00:04:49.219000 audit: BPF prog-id=45 op=UNLOAD Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit: BPF prog-id=85 op=LOAD Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit: BPF prog-id=86 op=LOAD Aug 13 00:04:49.220000 audit: BPF prog-id=46 op=UNLOAD Aug 13 00:04:49.220000 audit: BPF prog-id=47 op=UNLOAD Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.220000 audit: BPF prog-id=87 op=LOAD Aug 13 00:04:49.220000 audit: BPF prog-id=48 op=UNLOAD Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit: BPF prog-id=88 op=LOAD Aug 13 00:04:49.221000 audit: BPF prog-id=49 op=UNLOAD Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit: BPF prog-id=89 op=LOAD Aug 13 00:04:49.221000 audit: BPF prog-id=50 op=UNLOAD Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit: BPF prog-id=90 op=LOAD Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit: BPF prog-id=91 op=LOAD Aug 13 00:04:49.222000 audit: BPF prog-id=51 op=UNLOAD Aug 13 00:04:49.222000 audit: BPF prog-id=52 op=UNLOAD Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.222000 audit: BPF prog-id=92 op=LOAD Aug 13 00:04:49.222000 audit: BPF prog-id=75 op=UNLOAD Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit: BPF prog-id=93 op=LOAD Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit: BPF prog-id=94 op=LOAD Aug 13 00:04:49.224000 audit: BPF prog-id=53 op=UNLOAD Aug 13 00:04:49.224000 audit: BPF prog-id=54 op=UNLOAD Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.224000 audit: BPF prog-id=95 op=LOAD Aug 13 00:04:49.224000 audit: BPF prog-id=79 op=UNLOAD Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.225000 audit: BPF prog-id=96 op=LOAD Aug 13 00:04:49.225000 audit: BPF prog-id=71 op=UNLOAD Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.226000 audit: BPF prog-id=97 op=LOAD Aug 13 00:04:49.226000 audit: BPF prog-id=67 op=UNLOAD Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.227000 audit: BPF prog-id=98 op=LOAD Aug 13 00:04:49.227000 audit: BPF prog-id=63 op=UNLOAD Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit: BPF prog-id=99 op=LOAD Aug 13 00:04:49.228000 audit: BPF prog-id=55 op=UNLOAD Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit: BPF prog-id=100 op=LOAD Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.228000 audit: BPF prog-id=101 op=LOAD Aug 13 00:04:49.228000 audit: BPF prog-id=56 op=UNLOAD Aug 13 00:04:49.228000 audit: BPF prog-id=57 op=UNLOAD Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit: BPF prog-id=102 op=LOAD Aug 13 00:04:49.229000 audit: BPF prog-id=58 op=UNLOAD Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.229000 audit: BPF prog-id=103 op=LOAD Aug 13 00:04:49.229000 audit: BPF prog-id=59 op=UNLOAD Aug 13 00:04:49.249178 systemd[1]: Stopping kubelet.service... Aug 13 00:04:49.275574 systemd[1]: kubelet.service: Deactivated successfully. Aug 13 00:04:49.275894 systemd[1]: Stopped kubelet.service. Aug 13 00:04:49.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:49.276136 systemd[1]: kubelet.service: Consumed 1.858s CPU time. Aug 13 00:04:49.278484 systemd[1]: Starting kubelet.service... Aug 13 00:04:49.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:04:49.486978 systemd[1]: Started kubelet.service. Aug 13 00:04:49.524051 kubelet[2482]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:04:49.524051 kubelet[2482]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Aug 13 00:04:49.524051 kubelet[2482]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Aug 13 00:04:49.524413 kubelet[2482]: I0813 00:04:49.524091 2482 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Aug 13 00:04:49.530441 kubelet[2482]: I0813 00:04:49.530408 2482 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Aug 13 00:04:49.530597 kubelet[2482]: I0813 00:04:49.530587 2482 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Aug 13 00:04:49.530882 kubelet[2482]: I0813 00:04:49.530868 2482 server.go:956] "Client rotation is on, will bootstrap in background" Aug 13 00:04:49.532201 kubelet[2482]: I0813 00:04:49.532179 2482 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Aug 13 00:04:49.534760 kubelet[2482]: I0813 00:04:49.534737 2482 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Aug 13 00:04:49.548045 kubelet[2482]: E0813 00:04:49.547989 2482 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Aug 13 00:04:49.548045 kubelet[2482]: I0813 00:04:49.548027 2482 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Aug 13 00:04:49.551619 kubelet[2482]: I0813 00:04:49.551597 2482 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Aug 13 00:04:49.551825 kubelet[2482]: I0813 00:04:49.551799 2482 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Aug 13 00:04:49.551965 kubelet[2482]: I0813 00:04:49.551825 2482 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-a-c7286a0eab","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Aug 13 00:04:49.552055 kubelet[2482]: I0813 00:04:49.551972 2482 topology_manager.go:138] "Creating topology manager with none policy" Aug 13 00:04:49.552055 kubelet[2482]: I0813 00:04:49.551980 2482 container_manager_linux.go:303] "Creating device plugin manager" Aug 13 00:04:49.552055 kubelet[2482]: I0813 00:04:49.552019 2482 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:04:49.552160 kubelet[2482]: I0813 00:04:49.552145 2482 kubelet.go:480] "Attempting to sync node with API server" Aug 13 00:04:49.552192 kubelet[2482]: I0813 00:04:49.552165 2482 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Aug 13 00:04:49.555287 kubelet[2482]: I0813 00:04:49.552185 2482 kubelet.go:386] "Adding apiserver pod source" Aug 13 00:04:49.555392 kubelet[2482]: I0813 00:04:49.555380 2482 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Aug 13 00:04:49.561276 kubelet[2482]: I0813 00:04:49.558671 2482 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Aug 13 00:04:49.561276 kubelet[2482]: I0813 00:04:49.560119 2482 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Aug 13 00:04:49.570192 kubelet[2482]: I0813 00:04:49.570178 2482 watchdog_linux.go:99] "Systemd watchdog is not enabled" Aug 13 00:04:49.570341 kubelet[2482]: I0813 00:04:49.570329 2482 server.go:1289] "Started kubelet" Aug 13 00:04:49.570000 audit[2482]: AVC avc: denied { mac_admin } for pid=2482 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.570000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:04:49.570000 audit[2482]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bac360 a1=40008c4ea0 a2=4000bac330 a3=25 items=0 ppid=1 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:49.570000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:04:49.572030 kubelet[2482]: I0813 00:04:49.572010 2482 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Aug 13 00:04:49.570000 audit[2482]: AVC avc: denied { mac_admin } for pid=2482 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.570000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:04:49.570000 audit[2482]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008abec0 a1=40008c4eb8 a2=4000bac3f0 a3=25 items=0 ppid=1 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:49.570000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:04:49.572395 kubelet[2482]: I0813 00:04:49.572378 2482 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Aug 13 00:04:49.572491 kubelet[2482]: I0813 00:04:49.572481 2482 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Aug 13 00:04:49.578352 kubelet[2482]: I0813 00:04:49.577591 2482 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Aug 13 00:04:49.578446 kubelet[2482]: I0813 00:04:49.578414 2482 server.go:317] "Adding debug handlers to kubelet server" Aug 13 00:04:49.581493 kubelet[2482]: I0813 00:04:49.581439 2482 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Aug 13 00:04:49.581637 kubelet[2482]: I0813 00:04:49.581620 2482 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Aug 13 00:04:49.581810 kubelet[2482]: I0813 00:04:49.581785 2482 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Aug 13 00:04:49.581858 kubelet[2482]: I0813 00:04:49.581786 2482 volume_manager.go:297] "Starting Kubelet Volume Manager" Aug 13 00:04:49.581913 kubelet[2482]: I0813 00:04:49.581901 2482 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Aug 13 00:04:49.582831 kubelet[2482]: I0813 00:04:49.582271 2482 reconciler.go:26] "Reconciler: start to sync state" Aug 13 00:04:49.589700 kubelet[2482]: I0813 00:04:49.588664 2482 factory.go:223] Registration of the systemd container factory successfully Aug 13 00:04:49.589926 kubelet[2482]: I0813 00:04:49.589902 2482 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Aug 13 00:04:49.593063 kubelet[2482]: E0813 00:04:49.593044 2482 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Aug 13 00:04:49.594552 kubelet[2482]: I0813 00:04:49.594534 2482 factory.go:223] Registration of the containerd container factory successfully Aug 13 00:04:49.594742 kubelet[2482]: I0813 00:04:49.594617 2482 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Aug 13 00:04:49.595530 kubelet[2482]: I0813 00:04:49.595504 2482 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Aug 13 00:04:49.595530 kubelet[2482]: I0813 00:04:49.595528 2482 status_manager.go:230] "Starting to sync pod status with apiserver" Aug 13 00:04:49.595619 kubelet[2482]: I0813 00:04:49.595544 2482 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Aug 13 00:04:49.595619 kubelet[2482]: I0813 00:04:49.595550 2482 kubelet.go:2436] "Starting kubelet main sync loop" Aug 13 00:04:49.595619 kubelet[2482]: E0813 00:04:49.595586 2482 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Aug 13 00:04:49.639012 kubelet[2482]: I0813 00:04:49.638993 2482 cpu_manager.go:221] "Starting CPU manager" policy="none" Aug 13 00:04:49.639162 kubelet[2482]: I0813 00:04:49.639148 2482 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Aug 13 00:04:49.639269 kubelet[2482]: I0813 00:04:49.639259 2482 state_mem.go:36] "Initialized new in-memory state store" Aug 13 00:04:49.639461 kubelet[2482]: I0813 00:04:49.639448 2482 state_mem.go:88] "Updated default CPUSet" cpuSet="" Aug 13 00:04:49.639569 kubelet[2482]: I0813 00:04:49.639533 2482 state_mem.go:96] "Updated CPUSet assignments" assignments={} Aug 13 00:04:49.639650 kubelet[2482]: I0813 00:04:49.639627 2482 policy_none.go:49] "None policy: Start" Aug 13 00:04:49.639733 kubelet[2482]: I0813 00:04:49.639710 2482 memory_manager.go:186] "Starting memorymanager" policy="None" Aug 13 00:04:49.639793 kubelet[2482]: I0813 00:04:49.639785 2482 state_mem.go:35] "Initializing new in-memory state store" Aug 13 00:04:49.639989 kubelet[2482]: I0813 00:04:49.639979 2482 state_mem.go:75] "Updated machine memory state" Aug 13 00:04:49.643417 kubelet[2482]: E0813 00:04:49.643396 2482 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Aug 13 00:04:49.642000 audit[2482]: AVC avc: denied { mac_admin } for pid=2482 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:49.642000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Aug 13 00:04:49.642000 audit[2482]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000cd2480 a1=4000fd5248 a2=4000cd2450 a3=25 items=0 ppid=1 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:49.642000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Aug 13 00:04:49.643656 kubelet[2482]: E0813 00:04:49.643475 2482 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Aug 13 00:04:49.643656 kubelet[2482]: I0813 00:04:49.643613 2482 eviction_manager.go:189] "Eviction manager: starting control loop" Aug 13 00:04:49.643656 kubelet[2482]: I0813 00:04:49.643629 2482 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Aug 13 00:04:49.644414 kubelet[2482]: I0813 00:04:49.644388 2482 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Aug 13 00:04:49.645816 kubelet[2482]: E0813 00:04:49.645796 2482 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Aug 13 00:04:49.696713 kubelet[2482]: I0813 00:04:49.696685 2482 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.696906 kubelet[2482]: I0813 00:04:49.696702 2482 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.697004 kubelet[2482]: I0813 00:04:49.696798 2482 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.704086 kubelet[2482]: I0813 00:04:49.704055 2482 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Aug 13 00:04:49.707415 kubelet[2482]: I0813 00:04:49.707396 2482 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Aug 13 00:04:49.708670 kubelet[2482]: I0813 00:04:49.708650 2482 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Aug 13 00:04:49.708816 kubelet[2482]: E0813 00:04:49.708793 2482 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-a-c7286a0eab\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.749223 kubelet[2482]: I0813 00:04:49.749135 2482 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.762681 kubelet[2482]: I0813 00:04:49.762656 2482 kubelet_node_status.go:124] "Node was previously registered" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.762840 kubelet[2482]: I0813 00:04:49.762830 2482 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.783808 kubelet[2482]: I0813 00:04:49.783781 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/64a2bdb3e738a68473e48c8c59f9403c-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-a-c7286a0eab\" (UID: \"64a2bdb3e738a68473e48c8c59f9403c\") " pod="kube-system/kube-scheduler-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.784032 kubelet[2482]: I0813 00:04:49.784018 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/06a5214570a2a206cb2e8af0d936ef88-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-a-c7286a0eab\" (UID: \"06a5214570a2a206cb2e8af0d936ef88\") " pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.784116 kubelet[2482]: I0813 00:04:49.784103 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/06a5214570a2a206cb2e8af0d936ef88-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-a-c7286a0eab\" (UID: \"06a5214570a2a206cb2e8af0d936ef88\") " pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.784197 kubelet[2482]: I0813 00:04:49.784184 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.784314 kubelet[2482]: I0813 00:04:49.784297 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.784414 kubelet[2482]: I0813 00:04:49.784402 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.784501 kubelet[2482]: I0813 00:04:49.784489 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/06a5214570a2a206cb2e8af0d936ef88-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-a-c7286a0eab\" (UID: \"06a5214570a2a206cb2e8af0d936ef88\") " pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.784585 kubelet[2482]: I0813 00:04:49.784573 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:49.784674 kubelet[2482]: I0813 00:04:49.784659 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/45d91c9a24cf74b81d49fac302db86d7-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-a-c7286a0eab\" (UID: \"45d91c9a24cf74b81d49fac302db86d7\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:50.132000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:50.132000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000bc8520 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:04:50.132000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:50.134000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:50.134000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000bc86e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:04:50.134000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:50.135000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:50.135000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bc88a0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:04:50.135000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:50.137000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:04:50.137000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000bc8a60 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:04:50.137000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:50.556182 kubelet[2482]: I0813 00:04:50.556151 2482 apiserver.go:52] "Watching apiserver" Aug 13 00:04:50.582280 kubelet[2482]: I0813 00:04:50.582238 2482 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Aug 13 00:04:50.625483 kubelet[2482]: I0813 00:04:50.625448 2482 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:50.625792 kubelet[2482]: I0813 00:04:50.625774 2482 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:50.642068 kubelet[2482]: I0813 00:04:50.642045 2482 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Aug 13 00:04:50.642271 kubelet[2482]: E0813 00:04:50.642230 2482 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-a-c7286a0eab\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:50.642491 kubelet[2482]: I0813 00:04:50.642056 2482 warnings.go:110] "Warning: metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots]" Aug 13 00:04:50.642582 kubelet[2482]: E0813 00:04:50.642568 2482 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-a-c7286a0eab\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-a-c7286a0eab" Aug 13 00:04:50.666917 kubelet[2482]: I0813 00:04:50.666760 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-a-c7286a0eab" podStartSLOduration=1.6667459409999998 podStartE2EDuration="1.666745941s" podCreationTimestamp="2025-08-13 00:04:49 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:04:50.657541273 +0000 UTC m=+1.166688339" watchObservedRunningTime="2025-08-13 00:04:50.666745941 +0000 UTC m=+1.175893007" Aug 13 00:04:50.677010 kubelet[2482]: I0813 00:04:50.676968 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-a-c7286a0eab" podStartSLOduration=1.6769578059999999 podStartE2EDuration="1.676957806s" podCreationTimestamp="2025-08-13 00:04:49 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:04:50.666954668 +0000 UTC m=+1.176101694" watchObservedRunningTime="2025-08-13 00:04:50.676957806 +0000 UTC m=+1.186104872" Aug 13 00:04:50.687142 kubelet[2482]: I0813 00:04:50.687096 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-a-c7286a0eab" podStartSLOduration=3.687086429 podStartE2EDuration="3.687086429s" podCreationTimestamp="2025-08-13 00:04:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:04:50.6773273 +0000 UTC m=+1.186474366" watchObservedRunningTime="2025-08-13 00:04:50.687086429 +0000 UTC m=+1.196233495" Aug 13 00:04:50.930000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=522514 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Aug 13 00:04:50.930000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c12a00 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:04:50.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:04:54.580540 kubelet[2482]: I0813 00:04:54.580465 2482 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Aug 13 00:04:54.581177 env[1470]: time="2025-08-13T00:04:54.581144773Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Aug 13 00:04:54.581721 kubelet[2482]: I0813 00:04:54.581676 2482 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Aug 13 00:04:55.167772 systemd[1]: Created slice kubepods-besteffort-podf86008de_ca84_482d_8747_bce0d0108233.slice. Aug 13 00:04:55.213787 kubelet[2482]: I0813 00:04:55.213747 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w6ffq\" (UniqueName: \"kubernetes.io/projected/f86008de-ca84-482d-8747-bce0d0108233-kube-api-access-w6ffq\") pod \"kube-proxy-xhqx4\" (UID: \"f86008de-ca84-482d-8747-bce0d0108233\") " pod="kube-system/kube-proxy-xhqx4" Aug 13 00:04:55.213915 kubelet[2482]: I0813 00:04:55.213803 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/f86008de-ca84-482d-8747-bce0d0108233-kube-proxy\") pod \"kube-proxy-xhqx4\" (UID: \"f86008de-ca84-482d-8747-bce0d0108233\") " pod="kube-system/kube-proxy-xhqx4" Aug 13 00:04:55.213915 kubelet[2482]: I0813 00:04:55.213823 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f86008de-ca84-482d-8747-bce0d0108233-xtables-lock\") pod \"kube-proxy-xhqx4\" (UID: \"f86008de-ca84-482d-8747-bce0d0108233\") " pod="kube-system/kube-proxy-xhqx4" Aug 13 00:04:55.213915 kubelet[2482]: I0813 00:04:55.213838 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f86008de-ca84-482d-8747-bce0d0108233-lib-modules\") pod \"kube-proxy-xhqx4\" (UID: \"f86008de-ca84-482d-8747-bce0d0108233\") " pod="kube-system/kube-proxy-xhqx4" Aug 13 00:04:55.327079 kubelet[2482]: I0813 00:04:55.327045 2482 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Aug 13 00:04:55.473741 env[1470]: time="2025-08-13T00:04:55.473641919Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xhqx4,Uid:f86008de-ca84-482d-8747-bce0d0108233,Namespace:kube-system,Attempt:0,}" Aug 13 00:04:55.563780 env[1470]: time="2025-08-13T00:04:55.563714117Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:04:55.563780 env[1470]: time="2025-08-13T00:04:55.563751758Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:04:55.563987 env[1470]: time="2025-08-13T00:04:55.563761719Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:04:55.563987 env[1470]: time="2025-08-13T00:04:55.563903764Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9bf6625f3c819ffe788fb9bf624a68f0cb9e5120bffb53f3364e4177c16b6167 pid=2535 runtime=io.containerd.runc.v2 Aug 13 00:04:55.576772 systemd[1]: Started cri-containerd-9bf6625f3c819ffe788fb9bf624a68f0cb9e5120bffb53f3364e4177c16b6167.scope. Aug 13 00:04:55.580580 systemd[1]: run-containerd-runc-k8s.io-9bf6625f3c819ffe788fb9bf624a68f0cb9e5120bffb53f3364e4177c16b6167-runc.k2UyRb.mount: Deactivated successfully. Aug 13 00:04:55.609521 kernel: kauditd_printk_skb: 287 callbacks suppressed Aug 13 00:04:55.609641 kernel: audit: type=1400 audit(1755043495.601:820): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.641306 kernel: audit: type=1400 audit(1755043495.601:821): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.641412 kernel: audit: type=1400 audit(1755043495.601:822): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.673457 kernel: audit: type=1400 audit(1755043495.601:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.689553 kernel: audit: type=1400 audit(1755043495.601:824): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.706888 kernel: audit: type=1400 audit(1755043495.601:825): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.724963 kernel: audit: type=1400 audit(1755043495.601:826): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.741323 kernel: audit: type=1400 audit(1755043495.601:827): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.760211 kernel: audit: type=1400 audit(1755043495.601:828): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.776114 kernel: audit: type=1400 audit(1755043495.601:829): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.601000 audit: BPF prog-id=104 op=LOAD Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2535 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:55.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962663636323566336338313966666537383866623962663632346136 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2535 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:55.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962663636323566336338313966666537383866623962663632346136 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit: BPF prog-id=105 op=LOAD Aug 13 00:04:55.623000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2535 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:55.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962663636323566336338313966666537383866623962663632346136 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit: BPF prog-id=106 op=LOAD Aug 13 00:04:55.623000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2535 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:55.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962663636323566336338313966666537383866623962663632346136 Aug 13 00:04:55.623000 audit: BPF prog-id=106 op=UNLOAD Aug 13 00:04:55.623000 audit: BPF prog-id=105 op=UNLOAD Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.623000 audit: BPF prog-id=107 op=LOAD Aug 13 00:04:55.623000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2535 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:55.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962663636323566336338313966666537383866623962663632346136 Aug 13 00:04:55.779401 env[1470]: time="2025-08-13T00:04:55.779363736Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xhqx4,Uid:f86008de-ca84-482d-8747-bce0d0108233,Namespace:kube-system,Attempt:0,} returns sandbox id \"9bf6625f3c819ffe788fb9bf624a68f0cb9e5120bffb53f3364e4177c16b6167\"" Aug 13 00:04:55.798384 env[1470]: time="2025-08-13T00:04:55.798347888Z" level=info msg="CreateContainer within sandbox \"9bf6625f3c819ffe788fb9bf624a68f0cb9e5120bffb53f3364e4177c16b6167\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Aug 13 00:04:55.839867 systemd[1]: Created slice kubepods-besteffort-pod3d3ce296_fbcd_47c0_b673_d001c00c0d31.slice. Aug 13 00:04:55.920365 env[1470]: time="2025-08-13T00:04:55.920308869Z" level=info msg="CreateContainer within sandbox \"9bf6625f3c819ffe788fb9bf624a68f0cb9e5120bffb53f3364e4177c16b6167\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"33d96f05b7741f0ca3e333a199dc0195397ac48cf72b08d0305ea5cbd25c07e7\"" Aug 13 00:04:55.921339 env[1470]: time="2025-08-13T00:04:55.921305262Z" level=info msg="StartContainer for \"33d96f05b7741f0ca3e333a199dc0195397ac48cf72b08d0305ea5cbd25c07e7\"" Aug 13 00:04:55.926230 kubelet[2482]: I0813 00:04:55.926150 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3d3ce296-fbcd-47c0-b673-d001c00c0d31-var-lib-calico\") pod \"tigera-operator-747864d56d-4dggk\" (UID: \"3d3ce296-fbcd-47c0-b673-d001c00c0d31\") " pod="tigera-operator/tigera-operator-747864d56d-4dggk" Aug 13 00:04:55.926230 kubelet[2482]: I0813 00:04:55.926184 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fczs2\" (UniqueName: \"kubernetes.io/projected/3d3ce296-fbcd-47c0-b673-d001c00c0d31-kube-api-access-fczs2\") pod \"tigera-operator-747864d56d-4dggk\" (UID: \"3d3ce296-fbcd-47c0-b673-d001c00c0d31\") " pod="tigera-operator/tigera-operator-747864d56d-4dggk" Aug 13 00:04:55.935968 systemd[1]: Started cri-containerd-33d96f05b7741f0ca3e333a199dc0195397ac48cf72b08d0305ea5cbd25c07e7.scope. Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2535 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:55.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333643936663035623737343166306361336533333361313939646330 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit: BPF prog-id=108 op=LOAD Aug 13 00:04:55.949000 audit[2578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2535 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:55.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333643936663035623737343166306361336533333361313939646330 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit: BPF prog-id=109 op=LOAD Aug 13 00:04:55.949000 audit[2578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2535 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:55.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333643936663035623737343166306361336533333361313939646330 Aug 13 00:04:55.949000 audit: BPF prog-id=109 op=UNLOAD Aug 13 00:04:55.949000 audit: BPF prog-id=108 op=UNLOAD Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:55.949000 audit: BPF prog-id=110 op=LOAD Aug 13 00:04:55.949000 audit[2578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2535 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:55.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333643936663035623737343166306361336533333361313939646330 Aug 13 00:04:55.973754 env[1470]: time="2025-08-13T00:04:55.973706966Z" level=info msg="StartContainer for \"33d96f05b7741f0ca3e333a199dc0195397ac48cf72b08d0305ea5cbd25c07e7\" returns successfully" Aug 13 00:04:56.114000 audit[2639]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.114000 audit[2640]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.114000 audit[2640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe3e5a0d0 a2=0 a3=1 items=0 ppid=2589 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.114000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 00:04:56.114000 audit[2639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffee733850 a2=0 a3=1 items=0 ppid=2589 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.114000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Aug 13 00:04:56.119000 audit[2644]: NETFILTER_CFG table=nat:43 family=10 entries=1 op=nft_register_chain pid=2644 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.119000 audit[2644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc9c0fc60 a2=0 a3=1 items=0 ppid=2589 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.119000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 00:04:56.121000 audit[2645]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.121000 audit[2645]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd66b5f50 a2=0 a3=1 items=0 ppid=2589 pid=2645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.121000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Aug 13 00:04:56.123000 audit[2646]: NETFILTER_CFG table=filter:45 family=10 entries=1 op=nft_register_chain pid=2646 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.123000 audit[2646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdcc024b0 a2=0 a3=1 items=0 ppid=2589 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.123000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 00:04:56.123000 audit[2647]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=2647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.123000 audit[2647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc865bb30 a2=0 a3=1 items=0 ppid=2589 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.123000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Aug 13 00:04:56.143417 env[1470]: time="2025-08-13T00:04:56.143380739Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-4dggk,Uid:3d3ce296-fbcd-47c0-b673-d001c00c0d31,Namespace:tigera-operator,Attempt:0,}" Aug 13 00:04:56.216000 audit[2648]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.216000 audit[2648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffd10a1e0 a2=0 a3=1 items=0 ppid=2589 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.216000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 00:04:56.219000 audit[2650]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2650 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.219000 audit[2650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc22daf30 a2=0 a3=1 items=0 ppid=2589 pid=2650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.219000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Aug 13 00:04:56.222000 audit[2653]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2653 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.222000 audit[2653]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc60ed8c0 a2=0 a3=1 items=0 ppid=2589 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.222000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Aug 13 00:04:56.223000 audit[2654]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2654 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.223000 audit[2654]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcdcfa7c0 a2=0 a3=1 items=0 ppid=2589 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.223000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 00:04:56.226000 audit[2656]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2656 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.226000 audit[2656]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff5ec1cd0 a2=0 a3=1 items=0 ppid=2589 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.226000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 00:04:56.227000 audit[2657]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2657 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.227000 audit[2657]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd5a7b6f0 a2=0 a3=1 items=0 ppid=2589 pid=2657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.227000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 00:04:56.229000 audit[2659]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2659 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.229000 audit[2659]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe63ef8c0 a2=0 a3=1 items=0 ppid=2589 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.229000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 00:04:56.235000 audit[2675]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.235000 audit[2675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd9c56c50 a2=0 a3=1 items=0 ppid=2589 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.235000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Aug 13 00:04:56.237641 env[1470]: time="2025-08-13T00:04:56.237574878Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:04:56.237641 env[1470]: time="2025-08-13T00:04:56.237614079Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:04:56.237752 env[1470]: time="2025-08-13T00:04:56.237624200Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:04:56.237972 env[1470]: time="2025-08-13T00:04:56.237842407Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a5269f4961ea66de8f744968e1a7b2dc593a69065c675664c4768a300d859dd0 pid=2670 runtime=io.containerd.runc.v2 Aug 13 00:04:56.237000 audit[2681]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.237000 audit[2681]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb548910 a2=0 a3=1 items=0 ppid=2589 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.237000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 00:04:56.240000 audit[2684]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.240000 audit[2684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffbcf35c0 a2=0 a3=1 items=0 ppid=2589 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.240000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 00:04:56.241000 audit[2685]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.241000 audit[2685]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe3aad630 a2=0 a3=1 items=0 ppid=2589 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.241000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 00:04:56.243000 audit[2687]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.243000 audit[2687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdc036e60 a2=0 a3=1 items=0 ppid=2589 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.243000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 00:04:56.247000 audit[2690]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.247000 audit[2690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff4d30bf0 a2=0 a3=1 items=0 ppid=2589 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.247000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 00:04:56.257421 systemd[1]: Started cri-containerd-a5269f4961ea66de8f744968e1a7b2dc593a69065c675664c4768a300d859dd0.scope. Aug 13 00:04:56.257000 audit[2703]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.257000 audit[2703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffc197f40 a2=0 a3=1 items=0 ppid=2589 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.257000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 00:04:56.259000 audit[2705]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.259000 audit[2705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd0bf2a60 a2=0 a3=1 items=0 ppid=2589 pid=2705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.259000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 00:04:56.262000 audit[2707]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.262000 audit[2707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff22a3770 a2=0 a3=1 items=0 ppid=2589 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.262000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:04:56.267000 audit[2712]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.267000 audit[2712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcd4bc660 a2=0 a3=1 items=0 ppid=2589 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.267000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:04:56.269000 audit[2718]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.269000 audit[2718]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdb9ab260 a2=0 a3=1 items=0 ppid=2589 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.269000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 00:04:56.271000 audit[2720]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Aug 13 00:04:56.271000 audit[2720]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffedb30850 a2=0 a3=1 items=0 ppid=2589 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.271000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 00:04:56.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit: BPF prog-id=111 op=LOAD Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2670 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135323639663439363165613636646538663734343936386531613762 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2670 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135323639663439363165613636646538663734343936386531613762 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit: BPF prog-id=112 op=LOAD Aug 13 00:04:56.274000 audit[2682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2670 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135323639663439363165613636646538663734343936386531613762 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit: BPF prog-id=113 op=LOAD Aug 13 00:04:56.274000 audit[2682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2670 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135323639663439363165613636646538663734343936386531613762 Aug 13 00:04:56.274000 audit: BPF prog-id=113 op=UNLOAD Aug 13 00:04:56.274000 audit: BPF prog-id=112 op=UNLOAD Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:56.274000 audit: BPF prog-id=114 op=LOAD Aug 13 00:04:56.274000 audit[2682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2670 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135323639663439363165613636646538663734343936386531613762 Aug 13 00:04:56.291709 env[1470]: time="2025-08-13T00:04:56.290895650Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-4dggk,Uid:3d3ce296-fbcd-47c0-b673-d001c00c0d31,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"a5269f4961ea66de8f744968e1a7b2dc593a69065c675664c4768a300d859dd0\"" Aug 13 00:04:56.293294 env[1470]: time="2025-08-13T00:04:56.292948196Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Aug 13 00:04:56.374000 audit[2726]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:56.374000 audit[2726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd32a7780 a2=0 a3=1 items=0 ppid=2589 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.374000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:56.399000 audit[2726]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:04:56.399000 audit[2726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffd32a7780 a2=0 a3=1 items=0 ppid=2589 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.399000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:56.401000 audit[2737]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.401000 audit[2737]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd04ca830 a2=0 a3=1 items=0 ppid=2589 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.401000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Aug 13 00:04:56.403000 audit[2739]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2739 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.403000 audit[2739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe2266490 a2=0 a3=1 items=0 ppid=2589 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.403000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Aug 13 00:04:56.407000 audit[2742]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.407000 audit[2742]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc49db870 a2=0 a3=1 items=0 ppid=2589 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.407000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Aug 13 00:04:56.409000 audit[2743]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2743 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.409000 audit[2743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3d33180 a2=0 a3=1 items=0 ppid=2589 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Aug 13 00:04:56.412000 audit[2745]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=2745 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.412000 audit[2745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef11a670 a2=0 a3=1 items=0 ppid=2589 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.412000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Aug 13 00:04:56.414000 audit[2746]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.414000 audit[2746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeaea2630 a2=0 a3=1 items=0 ppid=2589 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.414000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Aug 13 00:04:56.416000 audit[2748]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2748 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.416000 audit[2748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe3eb5ef0 a2=0 a3=1 items=0 ppid=2589 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.416000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Aug 13 00:04:56.419000 audit[2751]: NETFILTER_CFG table=filter:75 family=10 entries=2 op=nft_register_chain pid=2751 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.419000 audit[2751]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff08a9ab0 a2=0 a3=1 items=0 ppid=2589 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.419000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Aug 13 00:04:56.420000 audit[2752]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.420000 audit[2752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdfc6ffe0 a2=0 a3=1 items=0 ppid=2589 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Aug 13 00:04:56.422000 audit[2754]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2754 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.422000 audit[2754]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff34a70f0 a2=0 a3=1 items=0 ppid=2589 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.422000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Aug 13 00:04:56.423000 audit[2755]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2755 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.423000 audit[2755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdcc7c070 a2=0 a3=1 items=0 ppid=2589 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.423000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Aug 13 00:04:56.425000 audit[2757]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2757 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.425000 audit[2757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffca1c100 a2=0 a3=1 items=0 ppid=2589 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Aug 13 00:04:56.429000 audit[2760]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2760 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.429000 audit[2760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff8443050 a2=0 a3=1 items=0 ppid=2589 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.429000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Aug 13 00:04:56.432000 audit[2763]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2763 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.432000 audit[2763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1e86f70 a2=0 a3=1 items=0 ppid=2589 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Aug 13 00:04:56.433000 audit[2764]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2764 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.433000 audit[2764]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc8762780 a2=0 a3=1 items=0 ppid=2589 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Aug 13 00:04:56.435000 audit[2766]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2766 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.435000 audit[2766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffffcb79a20 a2=0 a3=1 items=0 ppid=2589 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.435000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:04:56.438000 audit[2769]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2769 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.438000 audit[2769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe4e5f5b0 a2=0 a3=1 items=0 ppid=2589 pid=2769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.438000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Aug 13 00:04:56.439000 audit[2770]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.439000 audit[2770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe4146470 a2=0 a3=1 items=0 ppid=2589 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.439000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Aug 13 00:04:56.441000 audit[2772]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2772 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.441000 audit[2772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc8fe0fb0 a2=0 a3=1 items=0 ppid=2589 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Aug 13 00:04:56.442000 audit[2773]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2773 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.442000 audit[2773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdccbfae0 a2=0 a3=1 items=0 ppid=2589 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.442000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Aug 13 00:04:56.444000 audit[2775]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2775 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.444000 audit[2775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe1838e40 a2=0 a3=1 items=0 ppid=2589 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.444000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:04:56.447000 audit[2778]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Aug 13 00:04:56.447000 audit[2778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd65ea9c0 a2=0 a3=1 items=0 ppid=2589 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.447000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Aug 13 00:04:56.450000 audit[2780]: NETFILTER_CFG table=filter:90 family=10 entries=3 op=nft_register_rule pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 00:04:56.450000 audit[2780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffc15b3870 a2=0 a3=1 items=0 ppid=2589 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.450000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:56.450000 audit[2780]: NETFILTER_CFG table=nat:91 family=10 entries=7 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Aug 13 00:04:56.450000 audit[2780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffc15b3870 a2=0 a3=1 items=0 ppid=2589 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:56.450000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:04:57.107740 kubelet[2482]: I0813 00:04:57.107692 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-xhqx4" podStartSLOduration=2.107677893 podStartE2EDuration="2.107677893s" podCreationTimestamp="2025-08-13 00:04:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:04:56.64839482 +0000 UTC m=+7.157541886" watchObservedRunningTime="2025-08-13 00:04:57.107677893 +0000 UTC m=+7.616824959" Aug 13 00:04:58.297441 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3252215587.mount: Deactivated successfully. Aug 13 00:04:59.642098 env[1470]: time="2025-08-13T00:04:59.642043307Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:59.672438 env[1470]: time="2025-08-13T00:04:59.672398503Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:59.687826 env[1470]: time="2025-08-13T00:04:59.687792208Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:59.703841 env[1470]: time="2025-08-13T00:04:59.703815291Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Aug 13 00:04:59.704232 env[1470]: time="2025-08-13T00:04:59.703097030Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:04:59.718473 env[1470]: time="2025-08-13T00:04:59.718449413Z" level=info msg="CreateContainer within sandbox \"a5269f4961ea66de8f744968e1a7b2dc593a69065c675664c4768a300d859dd0\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Aug 13 00:04:59.792582 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3082068262.mount: Deactivated successfully. Aug 13 00:04:59.797471 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3606090937.mount: Deactivated successfully. Aug 13 00:04:59.837522 env[1470]: time="2025-08-13T00:04:59.837493966Z" level=info msg="CreateContainer within sandbox \"a5269f4961ea66de8f744968e1a7b2dc593a69065c675664c4768a300d859dd0\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"744846d7c61e96e2ded4ba9f20875cbf02cdfa303dec589e65073f82034f5668\"" Aug 13 00:04:59.838118 env[1470]: time="2025-08-13T00:04:59.838016022Z" level=info msg="StartContainer for \"744846d7c61e96e2ded4ba9f20875cbf02cdfa303dec589e65073f82034f5668\"" Aug 13 00:04:59.858848 systemd[1]: Started cri-containerd-744846d7c61e96e2ded4ba9f20875cbf02cdfa303dec589e65073f82034f5668.scope. Aug 13 00:04:59.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.869000 audit: BPF prog-id=115 op=LOAD Aug 13 00:04:59.869000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.869000 audit[2789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2670 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:59.869000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734343834366437633631653936653264656434626139663230383735 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2670 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:59.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734343834366437633631653936653264656434626139663230383735 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit: BPF prog-id=116 op=LOAD Aug 13 00:04:59.870000 audit[2789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2670 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:59.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734343834366437633631653936653264656434626139663230383735 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.870000 audit: BPF prog-id=117 op=LOAD Aug 13 00:04:59.870000 audit[2789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2670 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:59.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734343834366437633631653936653264656434626139663230383735 Aug 13 00:04:59.871000 audit: BPF prog-id=117 op=UNLOAD Aug 13 00:04:59.871000 audit: BPF prog-id=116 op=UNLOAD Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { perfmon } for pid=2789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit[2789]: AVC avc: denied { bpf } for pid=2789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:04:59.871000 audit: BPF prog-id=118 op=LOAD Aug 13 00:04:59.871000 audit[2789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2670 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:04:59.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734343834366437633631653936653264656434626139663230383735 Aug 13 00:04:59.898612 env[1470]: time="2025-08-13T00:04:59.898526208Z" level=info msg="StartContainer for \"744846d7c61e96e2ded4ba9f20875cbf02cdfa303dec589e65073f82034f5668\" returns successfully" Aug 13 00:05:05.619000 audit[1799]: USER_END pid=1799 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:05:05.619775 sudo[1799]: pam_unix(sudo:session): session closed for user root Aug 13 00:05:05.624641 kernel: kauditd_printk_skb: 357 callbacks suppressed Aug 13 00:05:05.624730 kernel: audit: type=1106 audit(1755043505.619:931): pid=1799 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:05:05.619000 audit[1799]: CRED_DISP pid=1799 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:05:05.681845 kernel: audit: type=1104 audit(1755043505.619:932): pid=1799 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Aug 13 00:05:05.708706 sshd[1796]: pam_unix(sshd:session): session closed for user core Aug 13 00:05:05.710000 audit[1796]: USER_END pid=1796 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:05:05.711873 systemd-logind[1458]: Session 9 logged out. Waiting for processes to exit. Aug 13 00:05:05.735763 systemd[1]: sshd@6-10.200.20.20:22-10.200.16.10:40392.service: Deactivated successfully. Aug 13 00:05:05.736436 systemd[1]: session-9.scope: Deactivated successfully. Aug 13 00:05:05.736583 systemd[1]: session-9.scope: Consumed 7.508s CPU time. Aug 13 00:05:05.737684 systemd-logind[1458]: Removed session 9. Aug 13 00:05:05.710000 audit[1796]: CRED_DISP pid=1796 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:05:05.761154 kernel: audit: type=1106 audit(1755043505.710:933): pid=1796 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:05:05.761229 kernel: audit: type=1104 audit(1755043505.710:934): pid=1796 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:05:05.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.20:22-10.200.16.10:40392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:05:05.782446 kernel: audit: type=1131 audit(1755043505.735:935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.20:22-10.200.16.10:40392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:05:11.137000 audit[2861]: NETFILTER_CFG table=filter:92 family=2 entries=14 op=nft_register_rule pid=2861 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:11.137000 audit[2861]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc58ea190 a2=0 a3=1 items=0 ppid=2589 pid=2861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:11.179869 kernel: audit: type=1325 audit(1755043511.137:936): table=filter:92 family=2 entries=14 op=nft_register_rule pid=2861 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:11.179974 kernel: audit: type=1300 audit(1755043511.137:936): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc58ea190 a2=0 a3=1 items=0 ppid=2589 pid=2861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:11.137000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:11.193624 kernel: audit: type=1327 audit(1755043511.137:936): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:11.179000 audit[2861]: NETFILTER_CFG table=nat:93 family=2 entries=12 op=nft_register_rule pid=2861 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:11.207922 kernel: audit: type=1325 audit(1755043511.179:937): table=nat:93 family=2 entries=12 op=nft_register_rule pid=2861 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:11.179000 audit[2861]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc58ea190 a2=0 a3=1 items=0 ppid=2589 pid=2861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:11.236917 kernel: audit: type=1300 audit(1755043511.179:937): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc58ea190 a2=0 a3=1 items=0 ppid=2589 pid=2861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:11.179000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:11.251570 kernel: audit: type=1327 audit(1755043511.179:937): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:11.269000 audit[2863]: NETFILTER_CFG table=filter:94 family=2 entries=15 op=nft_register_rule pid=2863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:11.269000 audit[2863]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd4e78470 a2=0 a3=1 items=0 ppid=2589 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:11.313031 kernel: audit: type=1325 audit(1755043511.269:938): table=filter:94 family=2 entries=15 op=nft_register_rule pid=2863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:11.313123 kernel: audit: type=1300 audit(1755043511.269:938): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd4e78470 a2=0 a3=1 items=0 ppid=2589 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:11.269000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:11.328962 kernel: audit: type=1327 audit(1755043511.269:938): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:11.285000 audit[2863]: NETFILTER_CFG table=nat:95 family=2 entries=12 op=nft_register_rule pid=2863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:11.343414 kernel: audit: type=1325 audit(1755043511.285:939): table=nat:95 family=2 entries=12 op=nft_register_rule pid=2863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:11.285000 audit[2863]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd4e78470 a2=0 a3=1 items=0 ppid=2589 pid=2863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:11.285000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:15.350000 audit[2866]: NETFILTER_CFG table=filter:96 family=2 entries=17 op=nft_register_rule pid=2866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:15.350000 audit[2866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff5dc2070 a2=0 a3=1 items=0 ppid=2589 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:15.350000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:15.357000 audit[2866]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2866 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:15.357000 audit[2866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff5dc2070 a2=0 a3=1 items=0 ppid=2589 pid=2866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:15.357000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:15.373000 audit[2868]: NETFILTER_CFG table=filter:98 family=2 entries=18 op=nft_register_rule pid=2868 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:15.373000 audit[2868]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc54ffcd0 a2=0 a3=1 items=0 ppid=2589 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:15.373000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:15.379000 audit[2868]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2868 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:15.379000 audit[2868]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc54ffcd0 a2=0 a3=1 items=0 ppid=2589 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:15.379000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:15.426902 kubelet[2482]: I0813 00:05:15.426852 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-4dggk" podStartSLOduration=17.014856672 podStartE2EDuration="20.426825441s" podCreationTimestamp="2025-08-13 00:04:55 +0000 UTC" firstStartedPulling="2025-08-13 00:04:56.292501222 +0000 UTC m=+6.801648248" lastFinishedPulling="2025-08-13 00:04:59.704469991 +0000 UTC m=+10.213617017" observedRunningTime="2025-08-13 00:05:00.660241723 +0000 UTC m=+11.169388789" watchObservedRunningTime="2025-08-13 00:05:15.426825441 +0000 UTC m=+25.935972507" Aug 13 00:05:15.444447 systemd[1]: Created slice kubepods-besteffort-podfdebb4ec_d02d_4f35_8e0c_7ab758b0dcf9.slice. Aug 13 00:05:15.569700 kubelet[2482]: I0813 00:05:15.569652 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/fdebb4ec-d02d-4f35-8e0c-7ab758b0dcf9-typha-certs\") pod \"calico-typha-54b8fc64d5-96cxj\" (UID: \"fdebb4ec-d02d-4f35-8e0c-7ab758b0dcf9\") " pod="calico-system/calico-typha-54b8fc64d5-96cxj" Aug 13 00:05:15.569700 kubelet[2482]: I0813 00:05:15.569694 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9wbqz\" (UniqueName: \"kubernetes.io/projected/fdebb4ec-d02d-4f35-8e0c-7ab758b0dcf9-kube-api-access-9wbqz\") pod \"calico-typha-54b8fc64d5-96cxj\" (UID: \"fdebb4ec-d02d-4f35-8e0c-7ab758b0dcf9\") " pod="calico-system/calico-typha-54b8fc64d5-96cxj" Aug 13 00:05:15.569920 kubelet[2482]: I0813 00:05:15.569715 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fdebb4ec-d02d-4f35-8e0c-7ab758b0dcf9-tigera-ca-bundle\") pod \"calico-typha-54b8fc64d5-96cxj\" (UID: \"fdebb4ec-d02d-4f35-8e0c-7ab758b0dcf9\") " pod="calico-system/calico-typha-54b8fc64d5-96cxj" Aug 13 00:05:15.574636 systemd[1]: Created slice kubepods-besteffort-pod18bb959a_5135_402a_a8f0_b13989e39228.slice. Aug 13 00:05:15.670192 kubelet[2482]: I0813 00:05:15.670087 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/18bb959a-5135-402a-a8f0-b13989e39228-cni-log-dir\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670192 kubelet[2482]: I0813 00:05:15.670125 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/18bb959a-5135-402a-a8f0-b13989e39228-flexvol-driver-host\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670192 kubelet[2482]: I0813 00:05:15.670143 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fwtw8\" (UniqueName: \"kubernetes.io/projected/18bb959a-5135-402a-a8f0-b13989e39228-kube-api-access-fwtw8\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670192 kubelet[2482]: I0813 00:05:15.670161 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/18bb959a-5135-402a-a8f0-b13989e39228-lib-modules\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670395 kubelet[2482]: I0813 00:05:15.670176 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/18bb959a-5135-402a-a8f0-b13989e39228-var-lib-calico\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670395 kubelet[2482]: I0813 00:05:15.670231 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/18bb959a-5135-402a-a8f0-b13989e39228-tigera-ca-bundle\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670395 kubelet[2482]: I0813 00:05:15.670246 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/18bb959a-5135-402a-a8f0-b13989e39228-var-run-calico\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670395 kubelet[2482]: I0813 00:05:15.670283 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/18bb959a-5135-402a-a8f0-b13989e39228-policysync\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670395 kubelet[2482]: I0813 00:05:15.670298 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/18bb959a-5135-402a-a8f0-b13989e39228-xtables-lock\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670511 kubelet[2482]: I0813 00:05:15.670314 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/18bb959a-5135-402a-a8f0-b13989e39228-cni-bin-dir\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670511 kubelet[2482]: I0813 00:05:15.670329 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/18bb959a-5135-402a-a8f0-b13989e39228-cni-net-dir\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.670511 kubelet[2482]: I0813 00:05:15.670343 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/18bb959a-5135-402a-a8f0-b13989e39228-node-certs\") pod \"calico-node-jkl6n\" (UID: \"18bb959a-5135-402a-a8f0-b13989e39228\") " pod="calico-system/calico-node-jkl6n" Aug 13 00:05:15.727318 kubelet[2482]: E0813 00:05:15.727275 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5s8h8" podUID="155955ac-e694-496e-8435-16aca9011621" Aug 13 00:05:15.748636 env[1470]: time="2025-08-13T00:05:15.748577769Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-54b8fc64d5-96cxj,Uid:fdebb4ec-d02d-4f35-8e0c-7ab758b0dcf9,Namespace:calico-system,Attempt:0,}" Aug 13 00:05:15.771385 kubelet[2482]: I0813 00:05:15.771331 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/155955ac-e694-496e-8435-16aca9011621-kubelet-dir\") pod \"csi-node-driver-5s8h8\" (UID: \"155955ac-e694-496e-8435-16aca9011621\") " pod="calico-system/csi-node-driver-5s8h8" Aug 13 00:05:15.771385 kubelet[2482]: I0813 00:05:15.771382 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/155955ac-e694-496e-8435-16aca9011621-registration-dir\") pod \"csi-node-driver-5s8h8\" (UID: \"155955ac-e694-496e-8435-16aca9011621\") " pod="calico-system/csi-node-driver-5s8h8" Aug 13 00:05:15.771555 kubelet[2482]: I0813 00:05:15.771468 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ddx4q\" (UniqueName: \"kubernetes.io/projected/155955ac-e694-496e-8435-16aca9011621-kube-api-access-ddx4q\") pod \"csi-node-driver-5s8h8\" (UID: \"155955ac-e694-496e-8435-16aca9011621\") " pod="calico-system/csi-node-driver-5s8h8" Aug 13 00:05:15.771555 kubelet[2482]: I0813 00:05:15.771534 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/155955ac-e694-496e-8435-16aca9011621-socket-dir\") pod \"csi-node-driver-5s8h8\" (UID: \"155955ac-e694-496e-8435-16aca9011621\") " pod="calico-system/csi-node-driver-5s8h8" Aug 13 00:05:15.771605 kubelet[2482]: I0813 00:05:15.771549 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/155955ac-e694-496e-8435-16aca9011621-varrun\") pod \"csi-node-driver-5s8h8\" (UID: \"155955ac-e694-496e-8435-16aca9011621\") " pod="calico-system/csi-node-driver-5s8h8" Aug 13 00:05:15.773941 kubelet[2482]: E0813 00:05:15.773915 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.773941 kubelet[2482]: W0813 00:05:15.773934 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.774067 kubelet[2482]: E0813 00:05:15.773950 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.774148 kubelet[2482]: E0813 00:05:15.774132 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.774148 kubelet[2482]: W0813 00:05:15.774144 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.774225 kubelet[2482]: E0813 00:05:15.774153 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.782805 kubelet[2482]: E0813 00:05:15.782782 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.782805 kubelet[2482]: W0813 00:05:15.782799 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.782916 kubelet[2482]: E0813 00:05:15.782811 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.793816 kubelet[2482]: E0813 00:05:15.793760 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.793946 kubelet[2482]: W0813 00:05:15.793932 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.794019 kubelet[2482]: E0813 00:05:15.794006 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.852951 env[1470]: time="2025-08-13T00:05:15.852367831Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:15.852951 env[1470]: time="2025-08-13T00:05:15.852406192Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:15.852951 env[1470]: time="2025-08-13T00:05:15.852416712Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:15.853118 env[1470]: time="2025-08-13T00:05:15.852975724Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a2d319dea71b731190e797220911829c2445d2815814efb492f0c5a2dc29cf3b pid=2884 runtime=io.containerd.runc.v2 Aug 13 00:05:15.866490 systemd[1]: Started cri-containerd-a2d319dea71b731190e797220911829c2445d2815814efb492f0c5a2dc29cf3b.scope. Aug 13 00:05:15.872239 kubelet[2482]: E0813 00:05:15.872069 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.872239 kubelet[2482]: W0813 00:05:15.872088 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.872239 kubelet[2482]: E0813 00:05:15.872106 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.872635 kubelet[2482]: E0813 00:05:15.872454 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.872635 kubelet[2482]: W0813 00:05:15.872466 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.872635 kubelet[2482]: E0813 00:05:15.872477 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.872952 kubelet[2482]: E0813 00:05:15.872793 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.872952 kubelet[2482]: W0813 00:05:15.872805 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.872952 kubelet[2482]: E0813 00:05:15.872816 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.873246 kubelet[2482]: E0813 00:05:15.873090 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.873246 kubelet[2482]: W0813 00:05:15.873102 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.873246 kubelet[2482]: E0813 00:05:15.873116 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.873625 kubelet[2482]: E0813 00:05:15.873443 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.873625 kubelet[2482]: W0813 00:05:15.873456 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.873625 kubelet[2482]: E0813 00:05:15.873468 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.873911 kubelet[2482]: E0813 00:05:15.873771 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.873911 kubelet[2482]: W0813 00:05:15.873784 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.873911 kubelet[2482]: E0813 00:05:15.873794 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.874180 kubelet[2482]: E0813 00:05:15.874039 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.874180 kubelet[2482]: W0813 00:05:15.874051 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.874180 kubelet[2482]: E0813 00:05:15.874061 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.874598 kubelet[2482]: E0813 00:05:15.874388 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.874598 kubelet[2482]: W0813 00:05:15.874401 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.874598 kubelet[2482]: E0813 00:05:15.874412 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.874989 kubelet[2482]: E0813 00:05:15.874746 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.874989 kubelet[2482]: W0813 00:05:15.874758 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.874989 kubelet[2482]: E0813 00:05:15.874768 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.875347 kubelet[2482]: E0813 00:05:15.875147 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.875347 kubelet[2482]: W0813 00:05:15.875160 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.875347 kubelet[2482]: E0813 00:05:15.875171 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.875666 kubelet[2482]: E0813 00:05:15.875496 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.875666 kubelet[2482]: W0813 00:05:15.875509 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.875666 kubelet[2482]: E0813 00:05:15.875519 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.875965 kubelet[2482]: E0813 00:05:15.875816 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.875965 kubelet[2482]: W0813 00:05:15.875829 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.875965 kubelet[2482]: E0813 00:05:15.875839 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.876241 kubelet[2482]: E0813 00:05:15.876104 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.876241 kubelet[2482]: W0813 00:05:15.876116 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.876241 kubelet[2482]: E0813 00:05:15.876128 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.876562 kubelet[2482]: E0813 00:05:15.876463 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.876562 kubelet[2482]: W0813 00:05:15.876475 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.876562 kubelet[2482]: E0813 00:05:15.876486 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.876773 kubelet[2482]: E0813 00:05:15.876761 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.876839 kubelet[2482]: W0813 00:05:15.876828 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.876924 kubelet[2482]: E0813 00:05:15.876912 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.878348 kubelet[2482]: E0813 00:05:15.878328 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.878453 kubelet[2482]: W0813 00:05:15.878440 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.878516 kubelet[2482]: E0813 00:05:15.878505 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.878743 kubelet[2482]: E0813 00:05:15.878730 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.878838 kubelet[2482]: W0813 00:05:15.878824 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.878905 kubelet[2482]: E0813 00:05:15.878893 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.879118 kubelet[2482]: E0813 00:05:15.879107 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.879196 kubelet[2482]: W0813 00:05:15.879184 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.879272 kubelet[2482]: E0813 00:05:15.879244 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.879492 kubelet[2482]: E0813 00:05:15.879479 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.879564 kubelet[2482]: W0813 00:05:15.879552 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.879639 kubelet[2482]: E0813 00:05:15.879627 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.879848 kubelet[2482]: E0813 00:05:15.879837 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.879926 kubelet[2482]: W0813 00:05:15.879913 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.879984 kubelet[2482]: E0813 00:05:15.879973 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.880237 kubelet[2482]: E0813 00:05:15.880225 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.880340 kubelet[2482]: W0813 00:05:15.880326 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.880414 kubelet[2482]: E0813 00:05:15.880403 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.880696 kubelet[2482]: E0813 00:05:15.880682 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.880775 kubelet[2482]: W0813 00:05:15.880762 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.880839 kubelet[2482]: E0813 00:05:15.880828 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.881281 env[1470]: time="2025-08-13T00:05:15.881217958Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-jkl6n,Uid:18bb959a-5135-402a-a8f0-b13989e39228,Namespace:calico-system,Attempt:0,}" Aug 13 00:05:15.881427 kubelet[2482]: E0813 00:05:15.881413 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.881504 kubelet[2482]: W0813 00:05:15.881492 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.881568 kubelet[2482]: E0813 00:05:15.881556 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.883893 kubelet[2482]: E0813 00:05:15.883818 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.884034 kubelet[2482]: W0813 00:05:15.884017 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.884103 kubelet[2482]: E0813 00:05:15.884091 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.884522 kubelet[2482]: E0813 00:05:15.884506 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.884629 kubelet[2482]: W0813 00:05:15.884616 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.884695 kubelet[2482]: E0813 00:05:15.884683 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.895355 kubelet[2482]: E0813 00:05:15.895328 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:15.895355 kubelet[2482]: W0813 00:05:15.895346 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:15.895472 kubelet[2482]: E0813 00:05:15.895368 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:15.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit: BPF prog-id=119 op=LOAD Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2884 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:15.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643331396465613731623733313139306537393732323039313138 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2884 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:15.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643331396465613731623733313139306537393732323039313138 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit: BPF prog-id=120 op=LOAD Aug 13 00:05:15.909000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2884 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:15.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643331396465613731623733313139306537393732323039313138 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit: BPF prog-id=121 op=LOAD Aug 13 00:05:15.909000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2884 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:15.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643331396465613731623733313139306537393732323039313138 Aug 13 00:05:15.909000 audit: BPF prog-id=121 op=UNLOAD Aug 13 00:05:15.909000 audit: BPF prog-id=120 op=UNLOAD Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { perfmon } for pid=2896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit[2896]: AVC avc: denied { bpf } for pid=2896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:15.909000 audit: BPF prog-id=122 op=LOAD Aug 13 00:05:15.909000 audit[2896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2884 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:15.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643331396465613731623733313139306537393732323039313138 Aug 13 00:05:15.937694 env[1470]: time="2025-08-13T00:05:15.937579744Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-54b8fc64d5-96cxj,Uid:fdebb4ec-d02d-4f35-8e0c-7ab758b0dcf9,Namespace:calico-system,Attempt:0,} returns sandbox id \"a2d319dea71b731190e797220911829c2445d2815814efb492f0c5a2dc29cf3b\"" Aug 13 00:05:15.940964 env[1470]: time="2025-08-13T00:05:15.939314220Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Aug 13 00:05:15.985465 env[1470]: time="2025-08-13T00:05:15.985387869Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:15.985591 env[1470]: time="2025-08-13T00:05:15.985474031Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:15.985591 env[1470]: time="2025-08-13T00:05:15.985500231Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:15.985721 env[1470]: time="2025-08-13T00:05:15.985672195Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ef0de2475b57d057afe149507bdb87a277962d41b530fd62ed2347f7911e0683 pid=2955 runtime=io.containerd.runc.v2 Aug 13 00:05:15.996622 systemd[1]: Started cri-containerd-ef0de2475b57d057afe149507bdb87a277962d41b530fd62ed2347f7911e0683.scope. Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.007000 audit: BPF prog-id=123 op=LOAD Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2955 pid=2964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:16.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566306465323437356235376430353761666531343935303762646238 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2955 pid=2964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:16.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566306465323437356235376430353761666531343935303762646238 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.008000 audit: BPF prog-id=124 op=LOAD Aug 13 00:05:16.008000 audit[2964]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2955 pid=2964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:16.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566306465323437356235376430353761666531343935303762646238 Aug 13 00:05:16.009000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.009000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.009000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.009000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.009000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.009000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.009000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.009000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.009000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.009000 audit: BPF prog-id=125 op=LOAD Aug 13 00:05:16.009000 audit[2964]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2955 pid=2964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:16.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566306465323437356235376430353761666531343935303762646238 Aug 13 00:05:16.010000 audit: BPF prog-id=125 op=UNLOAD Aug 13 00:05:16.010000 audit: BPF prog-id=124 op=UNLOAD Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { perfmon } for pid=2964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit[2964]: AVC avc: denied { bpf } for pid=2964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:16.010000 audit: BPF prog-id=126 op=LOAD Aug 13 00:05:16.010000 audit[2964]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2955 pid=2964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:16.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566306465323437356235376430353761666531343935303762646238 Aug 13 00:05:16.025280 env[1470]: time="2025-08-13T00:05:16.025178216Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-jkl6n,Uid:18bb959a-5135-402a-a8f0-b13989e39228,Namespace:calico-system,Attempt:0,} returns sandbox id \"ef0de2475b57d057afe149507bdb87a277962d41b530fd62ed2347f7911e0683\"" Aug 13 00:05:16.388000 audit[2992]: NETFILTER_CFG table=filter:100 family=2 entries=20 op=nft_register_rule pid=2992 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:16.394556 kernel: kauditd_printk_skb: 128 callbacks suppressed Aug 13 00:05:16.394641 kernel: audit: type=1325 audit(1755043516.388:980): table=filter:100 family=2 entries=20 op=nft_register_rule pid=2992 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:16.388000 audit[2992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffc2c09560 a2=0 a3=1 items=0 ppid=2589 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:16.432644 kernel: audit: type=1300 audit(1755043516.388:980): arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffc2c09560 a2=0 a3=1 items=0 ppid=2589 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:16.433277 kernel: audit: type=1327 audit(1755043516.388:980): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:16.388000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:16.407000 audit[2992]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2992 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:16.459314 kernel: audit: type=1325 audit(1755043516.407:981): table=nat:101 family=2 entries=12 op=nft_register_rule pid=2992 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:16.407000 audit[2992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc2c09560 a2=0 a3=1 items=0 ppid=2589 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:16.484256 kernel: audit: type=1300 audit(1755043516.407:981): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc2c09560 a2=0 a3=1 items=0 ppid=2589 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:16.407000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:16.497836 kernel: audit: type=1327 audit(1755043516.407:981): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:17.598030 kubelet[2482]: E0813 00:05:17.597981 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5s8h8" podUID="155955ac-e694-496e-8435-16aca9011621" Aug 13 00:05:18.900830 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4260497591.mount: Deactivated successfully. Aug 13 00:05:19.596758 kubelet[2482]: E0813 00:05:19.596721 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5s8h8" podUID="155955ac-e694-496e-8435-16aca9011621" Aug 13 00:05:19.639155 env[1470]: time="2025-08-13T00:05:19.639122086Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:19.654847 env[1470]: time="2025-08-13T00:05:19.654823950Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:19.664003 env[1470]: time="2025-08-13T00:05:19.663950607Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:19.672649 env[1470]: time="2025-08-13T00:05:19.672609815Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:19.673191 env[1470]: time="2025-08-13T00:05:19.673162865Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Aug 13 00:05:19.674716 env[1470]: time="2025-08-13T00:05:19.674664014Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Aug 13 00:05:19.706863 env[1470]: time="2025-08-13T00:05:19.706824558Z" level=info msg="CreateContainer within sandbox \"a2d319dea71b731190e797220911829c2445d2815814efb492f0c5a2dc29cf3b\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Aug 13 00:05:19.818890 env[1470]: time="2025-08-13T00:05:19.818301399Z" level=info msg="CreateContainer within sandbox \"a2d319dea71b731190e797220911829c2445d2815814efb492f0c5a2dc29cf3b\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"6b07c92274518832de8c59b1bd2ecbd42ed94548a15e0a94e77e9630e9a43bc5\"" Aug 13 00:05:19.821022 env[1470]: time="2025-08-13T00:05:19.819582263Z" level=info msg="StartContainer for \"6b07c92274518832de8c59b1bd2ecbd42ed94548a15e0a94e77e9630e9a43bc5\"" Aug 13 00:05:19.835266 systemd[1]: Started cri-containerd-6b07c92274518832de8c59b1bd2ecbd42ed94548a15e0a94e77e9630e9a43bc5.scope. Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.866376 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3995108462.mount: Deactivated successfully. Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.885970 kernel: audit: type=1400 audit(1755043519.846:982): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.886051 kernel: audit: type=1400 audit(1755043519.846:983): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.886077 kernel: audit: type=1400 audit(1755043519.846:984): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.919003 kernel: audit: type=1400 audit(1755043519.846:985): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.846000 audit: BPF prog-id=127 op=LOAD Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2884 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:19.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303763393232373435313838333264653863353962316264326563 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2884 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:19.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303763393232373435313838333264653863353962316264326563 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit: BPF prog-id=128 op=LOAD Aug 13 00:05:19.863000 audit[3003]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2884 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:19.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303763393232373435313838333264653863353962316264326563 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit: BPF prog-id=129 op=LOAD Aug 13 00:05:19.863000 audit[3003]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2884 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:19.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303763393232373435313838333264653863353962316264326563 Aug 13 00:05:19.863000 audit: BPF prog-id=129 op=UNLOAD Aug 13 00:05:19.863000 audit: BPF prog-id=128 op=UNLOAD Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { perfmon } for pid=3003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit[3003]: AVC avc: denied { bpf } for pid=3003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:19.863000 audit: BPF prog-id=130 op=LOAD Aug 13 00:05:19.863000 audit[3003]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2884 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:19.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662303763393232373435313838333264653863353962316264326563 Aug 13 00:05:19.959506 env[1470]: time="2025-08-13T00:05:19.959450495Z" level=info msg="StartContainer for \"6b07c92274518832de8c59b1bd2ecbd42ed94548a15e0a94e77e9630e9a43bc5\" returns successfully" Aug 13 00:05:20.691843 kubelet[2482]: I0813 00:05:20.691771 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-54b8fc64d5-96cxj" podStartSLOduration=1.956466833 podStartE2EDuration="5.691757307s" podCreationTimestamp="2025-08-13 00:05:15 +0000 UTC" firstStartedPulling="2025-08-13 00:05:15.938767209 +0000 UTC m=+26.447914275" lastFinishedPulling="2025-08-13 00:05:19.674057723 +0000 UTC m=+30.183204749" observedRunningTime="2025-08-13 00:05:20.690585364 +0000 UTC m=+31.199732430" watchObservedRunningTime="2025-08-13 00:05:20.691757307 +0000 UTC m=+31.200904373" Aug 13 00:05:20.775055 kubelet[2482]: E0813 00:05:20.775022 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.775055 kubelet[2482]: W0813 00:05:20.775046 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.775223 kubelet[2482]: E0813 00:05:20.775080 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.775298 kubelet[2482]: E0813 00:05:20.775281 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.775332 kubelet[2482]: W0813 00:05:20.775296 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.775364 kubelet[2482]: E0813 00:05:20.775330 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.775505 kubelet[2482]: E0813 00:05:20.775489 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.775505 kubelet[2482]: W0813 00:05:20.775503 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.775558 kubelet[2482]: E0813 00:05:20.775512 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.775665 kubelet[2482]: E0813 00:05:20.775650 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.775665 kubelet[2482]: W0813 00:05:20.775663 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.775720 kubelet[2482]: E0813 00:05:20.775671 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.775830 kubelet[2482]: E0813 00:05:20.775815 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.775830 kubelet[2482]: W0813 00:05:20.775827 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.775881 kubelet[2482]: E0813 00:05:20.775836 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.775980 kubelet[2482]: E0813 00:05:20.775958 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.776010 kubelet[2482]: W0813 00:05:20.775978 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.776010 kubelet[2482]: E0813 00:05:20.775987 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.776128 kubelet[2482]: E0813 00:05:20.776107 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.776128 kubelet[2482]: W0813 00:05:20.776126 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.776182 kubelet[2482]: E0813 00:05:20.776134 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.776282 kubelet[2482]: E0813 00:05:20.776268 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.776282 kubelet[2482]: W0813 00:05:20.776281 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.776342 kubelet[2482]: E0813 00:05:20.776289 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.776454 kubelet[2482]: E0813 00:05:20.776439 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.776454 kubelet[2482]: W0813 00:05:20.776452 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.776505 kubelet[2482]: E0813 00:05:20.776461 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.776608 kubelet[2482]: E0813 00:05:20.776586 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.776608 kubelet[2482]: W0813 00:05:20.776606 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.776660 kubelet[2482]: E0813 00:05:20.776614 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.776756 kubelet[2482]: E0813 00:05:20.776735 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.776756 kubelet[2482]: W0813 00:05:20.776753 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.776802 kubelet[2482]: E0813 00:05:20.776762 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.776900 kubelet[2482]: E0813 00:05:20.776881 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.776931 kubelet[2482]: W0813 00:05:20.776900 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.776931 kubelet[2482]: E0813 00:05:20.776908 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.777051 kubelet[2482]: E0813 00:05:20.777033 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.777079 kubelet[2482]: W0813 00:05:20.777050 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.777079 kubelet[2482]: E0813 00:05:20.777058 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.777196 kubelet[2482]: E0813 00:05:20.777181 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.777226 kubelet[2482]: W0813 00:05:20.777198 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.777226 kubelet[2482]: E0813 00:05:20.777206 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.777370 kubelet[2482]: E0813 00:05:20.777348 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.777370 kubelet[2482]: W0813 00:05:20.777367 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.777427 kubelet[2482]: E0813 00:05:20.777375 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.806703 kubelet[2482]: E0813 00:05:20.806679 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.806703 kubelet[2482]: W0813 00:05:20.806696 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.806826 kubelet[2482]: E0813 00:05:20.806707 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.806899 kubelet[2482]: E0813 00:05:20.806881 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.806899 kubelet[2482]: W0813 00:05:20.806894 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.806965 kubelet[2482]: E0813 00:05:20.806903 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.807072 kubelet[2482]: E0813 00:05:20.807057 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.807072 kubelet[2482]: W0813 00:05:20.807069 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.807133 kubelet[2482]: E0813 00:05:20.807077 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.807282 kubelet[2482]: E0813 00:05:20.807267 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.807282 kubelet[2482]: W0813 00:05:20.807280 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.807362 kubelet[2482]: E0813 00:05:20.807289 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.807470 kubelet[2482]: E0813 00:05:20.807453 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.807470 kubelet[2482]: W0813 00:05:20.807467 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.807576 kubelet[2482]: E0813 00:05:20.807477 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.807630 kubelet[2482]: E0813 00:05:20.807614 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.807698 kubelet[2482]: W0813 00:05:20.807682 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.807698 kubelet[2482]: E0813 00:05:20.807697 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.807916 kubelet[2482]: E0813 00:05:20.807897 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.807916 kubelet[2482]: W0813 00:05:20.807912 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.807979 kubelet[2482]: E0813 00:05:20.807922 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.808325 kubelet[2482]: E0813 00:05:20.808307 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.808401 kubelet[2482]: W0813 00:05:20.808389 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812126 kubelet[2482]: E0813 00:05:20.808441 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812126 kubelet[2482]: E0813 00:05:20.808620 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812126 kubelet[2482]: W0813 00:05:20.808628 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812126 kubelet[2482]: E0813 00:05:20.808637 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812126 kubelet[2482]: E0813 00:05:20.808800 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812126 kubelet[2482]: W0813 00:05:20.808809 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812126 kubelet[2482]: E0813 00:05:20.808817 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812126 kubelet[2482]: E0813 00:05:20.808957 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812126 kubelet[2482]: W0813 00:05:20.808964 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812126 kubelet[2482]: E0813 00:05:20.808972 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812423 kubelet[2482]: E0813 00:05:20.809124 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812423 kubelet[2482]: W0813 00:05:20.809132 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812423 kubelet[2482]: E0813 00:05:20.809140 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812423 kubelet[2482]: E0813 00:05:20.809321 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812423 kubelet[2482]: W0813 00:05:20.809330 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812423 kubelet[2482]: E0813 00:05:20.809339 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812423 kubelet[2482]: E0813 00:05:20.809552 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812423 kubelet[2482]: W0813 00:05:20.809561 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812423 kubelet[2482]: E0813 00:05:20.809573 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812423 kubelet[2482]: E0813 00:05:20.809729 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812626 kubelet[2482]: W0813 00:05:20.809737 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812626 kubelet[2482]: E0813 00:05:20.809745 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812626 kubelet[2482]: E0813 00:05:20.809902 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812626 kubelet[2482]: W0813 00:05:20.809910 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812626 kubelet[2482]: E0813 00:05:20.809919 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812626 kubelet[2482]: E0813 00:05:20.810347 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812626 kubelet[2482]: W0813 00:05:20.810360 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812626 kubelet[2482]: E0813 00:05:20.810374 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:20.812626 kubelet[2482]: E0813 00:05:20.810538 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:20.812626 kubelet[2482]: W0813 00:05:20.810547 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:20.812828 kubelet[2482]: E0813 00:05:20.810558 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.470911 env[1470]: time="2025-08-13T00:05:21.470872900Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:21.492405 env[1470]: time="2025-08-13T00:05:21.492369621Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:21.512561 env[1470]: time="2025-08-13T00:05:21.512520276Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:21.524871 env[1470]: time="2025-08-13T00:05:21.524833586Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:21.525450 env[1470]: time="2025-08-13T00:05:21.525419197Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Aug 13 00:05:21.538908 env[1470]: time="2025-08-13T00:05:21.538877407Z" level=info msg="CreateContainer within sandbox \"ef0de2475b57d057afe149507bdb87a277962d41b530fd62ed2347f7911e0683\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Aug 13 00:05:21.596279 kubelet[2482]: E0813 00:05:21.595920 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5s8h8" podUID="155955ac-e694-496e-8435-16aca9011621" Aug 13 00:05:21.618844 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount459956611.mount: Deactivated successfully. Aug 13 00:05:21.665281 env[1470]: time="2025-08-13T00:05:21.665222722Z" level=info msg="CreateContainer within sandbox \"ef0de2475b57d057afe149507bdb87a277962d41b530fd62ed2347f7911e0683\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"1ed963b5143cbabc18f301f19d728e08cf221f5df2d74e33e7f14d68d2e09524\"" Aug 13 00:05:21.666006 env[1470]: time="2025-08-13T00:05:21.665980776Z" level=info msg="StartContainer for \"1ed963b5143cbabc18f301f19d728e08cf221f5df2d74e33e7f14d68d2e09524\"" Aug 13 00:05:21.682281 kubelet[2482]: I0813 00:05:21.681233 2482 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:05:21.688143 kubelet[2482]: E0813 00:05:21.688121 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.688305 kubelet[2482]: W0813 00:05:21.688278 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.688399 kubelet[2482]: E0813 00:05:21.688385 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.691540 kubelet[2482]: E0813 00:05:21.691523 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.691655 kubelet[2482]: W0813 00:05:21.691641 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.691794 kubelet[2482]: E0813 00:05:21.691779 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.695783 kubelet[2482]: E0813 00:05:21.695759 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.696337 kubelet[2482]: W0813 00:05:21.696321 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.696455 kubelet[2482]: E0813 00:05:21.696441 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.696729 kubelet[2482]: E0813 00:05:21.696717 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.696880 kubelet[2482]: W0813 00:05:21.696862 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.696970 kubelet[2482]: E0813 00:05:21.696958 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.697212 kubelet[2482]: E0813 00:05:21.697200 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.697347 kubelet[2482]: W0813 00:05:21.697332 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.697428 kubelet[2482]: E0813 00:05:21.697416 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.697655 kubelet[2482]: E0813 00:05:21.697643 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.697749 kubelet[2482]: W0813 00:05:21.697736 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.697820 kubelet[2482]: E0813 00:05:21.697808 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.698106 kubelet[2482]: E0813 00:05:21.698088 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.698204 kubelet[2482]: W0813 00:05:21.698191 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.698332 kubelet[2482]: E0813 00:05:21.698319 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.698577 kubelet[2482]: E0813 00:05:21.698565 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.698706 kubelet[2482]: W0813 00:05:21.698693 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.698805 kubelet[2482]: E0813 00:05:21.698793 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.699070 kubelet[2482]: E0813 00:05:21.699058 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.699183 kubelet[2482]: W0813 00:05:21.699169 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.699334 kubelet[2482]: E0813 00:05:21.699319 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.699599 kubelet[2482]: E0813 00:05:21.699586 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.699699 kubelet[2482]: W0813 00:05:21.699687 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.699820 kubelet[2482]: E0813 00:05:21.699807 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.700101 kubelet[2482]: E0813 00:05:21.700090 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.700200 kubelet[2482]: W0813 00:05:21.700188 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.700358 kubelet[2482]: E0813 00:05:21.700261 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.702296 systemd[1]: Started cri-containerd-1ed963b5143cbabc18f301f19d728e08cf221f5df2d74e33e7f14d68d2e09524.scope. Aug 13 00:05:21.706789 kubelet[2482]: E0813 00:05:21.706754 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.706789 kubelet[2482]: W0813 00:05:21.706776 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.706789 kubelet[2482]: E0813 00:05:21.706788 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.706992 kubelet[2482]: E0813 00:05:21.706964 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.706992 kubelet[2482]: W0813 00:05:21.706980 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.706992 kubelet[2482]: E0813 00:05:21.706991 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.707142 kubelet[2482]: E0813 00:05:21.707122 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.707142 kubelet[2482]: W0813 00:05:21.707134 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.707142 kubelet[2482]: E0813 00:05:21.707142 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.707327 kubelet[2482]: E0813 00:05:21.707312 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.707327 kubelet[2482]: W0813 00:05:21.707323 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.707402 kubelet[2482]: E0813 00:05:21.707332 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.712569 kubelet[2482]: E0813 00:05:21.712543 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.712569 kubelet[2482]: W0813 00:05:21.712560 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.712569 kubelet[2482]: E0813 00:05:21.712571 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.712758 kubelet[2482]: E0813 00:05:21.712734 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.712758 kubelet[2482]: W0813 00:05:21.712748 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.712758 kubelet[2482]: E0813 00:05:21.712757 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.712967 kubelet[2482]: E0813 00:05:21.712949 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.712967 kubelet[2482]: W0813 00:05:21.712961 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.712967 kubelet[2482]: E0813 00:05:21.712969 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.713169 kubelet[2482]: E0813 00:05:21.713151 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.713169 kubelet[2482]: W0813 00:05:21.713163 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.713169 kubelet[2482]: E0813 00:05:21.713171 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.713343 kubelet[2482]: E0813 00:05:21.713324 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.713343 kubelet[2482]: W0813 00:05:21.713336 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.713414 kubelet[2482]: E0813 00:05:21.713344 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.713544 kubelet[2482]: E0813 00:05:21.713528 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.713544 kubelet[2482]: W0813 00:05:21.713541 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.713614 kubelet[2482]: E0813 00:05:21.713550 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.713718 kubelet[2482]: E0813 00:05:21.713698 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.713718 kubelet[2482]: W0813 00:05:21.713711 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.713781 kubelet[2482]: E0813 00:05:21.713719 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.714071 kubelet[2482]: E0813 00:05:21.714051 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.714071 kubelet[2482]: W0813 00:05:21.714065 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.714153 kubelet[2482]: E0813 00:05:21.714074 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.714268 kubelet[2482]: E0813 00:05:21.714233 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.714320 kubelet[2482]: W0813 00:05:21.714297 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.714320 kubelet[2482]: E0813 00:05:21.714312 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.714559 kubelet[2482]: E0813 00:05:21.714537 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.714559 kubelet[2482]: W0813 00:05:21.714552 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.714559 kubelet[2482]: E0813 00:05:21.714562 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.714785 kubelet[2482]: E0813 00:05:21.714765 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.714785 kubelet[2482]: W0813 00:05:21.714777 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.714785 kubelet[2482]: E0813 00:05:21.714785 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.714981 kubelet[2482]: E0813 00:05:21.714964 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.714981 kubelet[2482]: W0813 00:05:21.714975 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.714981 kubelet[2482]: E0813 00:05:21.714982 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.716322 kubelet[2482]: E0813 00:05:21.716244 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.716322 kubelet[2482]: W0813 00:05:21.716314 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.716422 kubelet[2482]: E0813 00:05:21.716327 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.717761 kubelet[2482]: E0813 00:05:21.717732 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.717761 kubelet[2482]: W0813 00:05:21.717753 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.717860 kubelet[2482]: E0813 00:05:21.717766 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.718622 kubelet[2482]: E0813 00:05:21.718598 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.718622 kubelet[2482]: W0813 00:05:21.718614 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.718711 kubelet[2482]: E0813 00:05:21.718626 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.718843 kubelet[2482]: E0813 00:05:21.718826 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.718843 kubelet[2482]: W0813 00:05:21.718838 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.718916 kubelet[2482]: E0813 00:05:21.718846 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.719043 kubelet[2482]: E0813 00:05:21.719026 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.719043 kubelet[2482]: W0813 00:05:21.719037 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.719111 kubelet[2482]: E0813 00:05:21.719045 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.719366 kubelet[2482]: E0813 00:05:21.719344 2482 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Aug 13 00:05:21.719366 kubelet[2482]: W0813 00:05:21.719358 2482 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Aug 13 00:05:21.719450 kubelet[2482]: E0813 00:05:21.719369 2482 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Aug 13 00:05:21.745656 kernel: kauditd_printk_skb: 53 callbacks suppressed Aug 13 00:05:21.745741 kernel: audit: type=1400 audit(1755043521.723:1000): avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2955 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:21.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165643936336235313433636261626331386633303166313964373238 Aug 13 00:05:21.795289 kernel: audit: type=1300 audit(1755043521.723:1000): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2955 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:21.795395 kernel: audit: type=1327 audit(1755043521.723:1000): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165643936336235313433636261626331386633303166313964373238 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.830506 kernel: audit: type=1400 audit(1755043521.723:1001): avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.830600 kernel: audit: type=1400 audit(1755043521.723:1001): avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.847994 kernel: audit: type=1400 audit(1755043521.723:1001): avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.864685 kernel: audit: type=1400 audit(1755043521.723:1001): avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.881117 kernel: audit: type=1400 audit(1755043521.723:1001): avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.881186 env[1470]: time="2025-08-13T00:05:21.865164048Z" level=info msg="StartContainer for \"1ed963b5143cbabc18f301f19d728e08cf221f5df2d74e33e7f14d68d2e09524\" returns successfully" Aug 13 00:05:21.881580 systemd[1]: cri-containerd-1ed963b5143cbabc18f301f19d728e08cf221f5df2d74e33e7f14d68d2e09524.scope: Deactivated successfully. Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.915057 kernel: audit: type=1400 audit(1755043521.723:1001): avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.915111 kernel: audit: type=1400 audit(1755043521.723:1001): avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.723000 audit: BPF prog-id=131 op=LOAD Aug 13 00:05:21.723000 audit[3075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2955 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:21.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165643936336235313433636261626331386633303166313964373238 Aug 13 00:05:21.728000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.728000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.728000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.728000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.728000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.728000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.728000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.728000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.728000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.728000 audit: BPF prog-id=132 op=LOAD Aug 13 00:05:21.728000 audit[3075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2955 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:21.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165643936336235313433636261626331386633303166313964373238 Aug 13 00:05:21.744000 audit: BPF prog-id=132 op=UNLOAD Aug 13 00:05:21.744000 audit: BPF prog-id=131 op=UNLOAD Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:21.744000 audit: BPF prog-id=133 op=LOAD Aug 13 00:05:21.744000 audit[3075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2955 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:21.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165643936336235313433636261626331386633303166313964373238 Aug 13 00:05:21.914000 audit: BPF prog-id=133 op=UNLOAD Aug 13 00:05:21.935369 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1ed963b5143cbabc18f301f19d728e08cf221f5df2d74e33e7f14d68d2e09524-rootfs.mount: Deactivated successfully. Aug 13 00:05:23.000615 env[1470]: time="2025-08-13T00:05:23.000563170Z" level=info msg="shim disconnected" id=1ed963b5143cbabc18f301f19d728e08cf221f5df2d74e33e7f14d68d2e09524 Aug 13 00:05:23.000615 env[1470]: time="2025-08-13T00:05:23.000609650Z" level=warning msg="cleaning up after shim disconnected" id=1ed963b5143cbabc18f301f19d728e08cf221f5df2d74e33e7f14d68d2e09524 namespace=k8s.io Aug 13 00:05:23.001011 env[1470]: time="2025-08-13T00:05:23.000620651Z" level=info msg="cleaning up dead shim" Aug 13 00:05:23.006951 env[1470]: time="2025-08-13T00:05:23.006913324Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:05:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3153 runtime=io.containerd.runc.v2\n" Aug 13 00:05:23.596836 kubelet[2482]: E0813 00:05:23.596793 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5s8h8" podUID="155955ac-e694-496e-8435-16aca9011621" Aug 13 00:05:23.687964 env[1470]: time="2025-08-13T00:05:23.687761332Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Aug 13 00:05:25.598840 kubelet[2482]: E0813 00:05:25.598525 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5s8h8" podUID="155955ac-e694-496e-8435-16aca9011621" Aug 13 00:05:27.598314 kubelet[2482]: E0813 00:05:27.597243 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5s8h8" podUID="155955ac-e694-496e-8435-16aca9011621" Aug 13 00:05:27.911442 env[1470]: time="2025-08-13T00:05:27.911341296Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:27.940030 env[1470]: time="2025-08-13T00:05:27.939991573Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:27.951439 env[1470]: time="2025-08-13T00:05:27.951402043Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:27.970168 env[1470]: time="2025-08-13T00:05:27.970138915Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:27.970465 env[1470]: time="2025-08-13T00:05:27.970436000Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Aug 13 00:05:27.986055 env[1470]: time="2025-08-13T00:05:27.986012860Z" level=info msg="CreateContainer within sandbox \"ef0de2475b57d057afe149507bdb87a277962d41b530fd62ed2347f7911e0683\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Aug 13 00:05:28.063028 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4283546703.mount: Deactivated successfully. Aug 13 00:05:28.114045 env[1470]: time="2025-08-13T00:05:28.114004038Z" level=info msg="CreateContainer within sandbox \"ef0de2475b57d057afe149507bdb87a277962d41b530fd62ed2347f7911e0683\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"8eac27a9fb730d6616981eca24063860f94978dac64cddd85c9bc963564288fc\"" Aug 13 00:05:28.114855 env[1470]: time="2025-08-13T00:05:28.114830451Z" level=info msg="StartContainer for \"8eac27a9fb730d6616981eca24063860f94978dac64cddd85c9bc963564288fc\"" Aug 13 00:05:28.133074 systemd[1]: Started cri-containerd-8eac27a9fb730d6616981eca24063860f94978dac64cddd85c9bc963564288fc.scope. Aug 13 00:05:28.140301 systemd[1]: run-containerd-runc-k8s.io-8eac27a9fb730d6616981eca24063860f94978dac64cddd85c9bc963564288fc-runc.mN8A1I.mount: Deactivated successfully. Aug 13 00:05:28.178284 kernel: kauditd_printk_skb: 34 callbacks suppressed Aug 13 00:05:28.178408 kernel: audit: type=1400 audit(1755043528.155:1007): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2955 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:28.203410 kernel: audit: type=1300 audit(1755043528.155:1007): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2955 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:28.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616332376139666237333064363631363938316563613234303633 Aug 13 00:05:28.226310 kernel: audit: type=1327 audit(1755043528.155:1007): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616332376139666237333064363631363938316563613234303633 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.260226 kernel: audit: type=1400 audit(1755043528.155:1008): avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.260351 kernel: audit: type=1400 audit(1755043528.155:1008): avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.276019 kernel: audit: type=1400 audit(1755043528.155:1008): avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.295375 kernel: audit: type=1400 audit(1755043528.155:1008): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.312228 kernel: audit: type=1400 audit(1755043528.155:1008): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.312341 kernel: audit: type=1400 audit(1755043528.155:1008): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.312596 env[1470]: time="2025-08-13T00:05:28.312560566Z" level=info msg="StartContainer for \"8eac27a9fb730d6616981eca24063860f94978dac64cddd85c9bc963564288fc\" returns successfully" Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.345267 kernel: audit: type=1400 audit(1755043528.155:1008): avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.155000 audit: BPF prog-id=134 op=LOAD Aug 13 00:05:28.155000 audit[3178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2955 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:28.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616332376139666237333064363631363938316563613234303633 Aug 13 00:05:28.161000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.161000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.161000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.161000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.161000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.161000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.161000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.161000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.161000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.161000 audit: BPF prog-id=135 op=LOAD Aug 13 00:05:28.161000 audit[3178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2955 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:28.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616332376139666237333064363631363938316563613234303633 Aug 13 00:05:28.177000 audit: BPF prog-id=135 op=UNLOAD Aug 13 00:05:28.177000 audit: BPF prog-id=134 op=UNLOAD Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { perfmon } for pid=3178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit[3178]: AVC avc: denied { bpf } for pid=3178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:28.177000 audit: BPF prog-id=136 op=LOAD Aug 13 00:05:28.177000 audit[3178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2955 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:28.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865616332376139666237333064363631363938316563613234303633 Aug 13 00:05:29.566291 env[1470]: time="2025-08-13T00:05:29.566201231Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Aug 13 00:05:29.569345 systemd[1]: cri-containerd-8eac27a9fb730d6616981eca24063860f94978dac64cddd85c9bc963564288fc.scope: Deactivated successfully. Aug 13 00:05:29.571000 audit: BPF prog-id=136 op=UNLOAD Aug 13 00:05:29.586600 kubelet[2482]: I0813 00:05:29.586571 2482 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Aug 13 00:05:29.588739 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8eac27a9fb730d6616981eca24063860f94978dac64cddd85c9bc963564288fc-rootfs.mount: Deactivated successfully. Aug 13 00:05:29.608710 systemd[1]: Created slice kubepods-besteffort-pod155955ac_e694_496e_8435_16aca9011621.slice. Aug 13 00:05:30.154815 env[1470]: time="2025-08-13T00:05:30.154762928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5s8h8,Uid:155955ac-e694-496e-8435-16aca9011621,Namespace:calico-system,Attempt:0,}" Aug 13 00:05:30.478156 kubelet[2482]: I0813 00:05:30.477620 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b74d3bfc-4f89-48d9-aad9-0aab058e613f-whisker-ca-bundle\") pod \"whisker-558cbf8d66-ksrqt\" (UID: \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\") " pod="calico-system/whisker-558cbf8d66-ksrqt" Aug 13 00:05:30.478156 kubelet[2482]: I0813 00:05:30.477656 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b74d3bfc-4f89-48d9-aad9-0aab058e613f-whisker-backend-key-pair\") pod \"whisker-558cbf8d66-ksrqt\" (UID: \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\") " pod="calico-system/whisker-558cbf8d66-ksrqt" Aug 13 00:05:30.478156 kubelet[2482]: I0813 00:05:30.477683 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c72d6\" (UniqueName: \"kubernetes.io/projected/b74d3bfc-4f89-48d9-aad9-0aab058e613f-kube-api-access-c72d6\") pod \"whisker-558cbf8d66-ksrqt\" (UID: \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\") " pod="calico-system/whisker-558cbf8d66-ksrqt" Aug 13 00:05:30.479247 systemd[1]: Created slice kubepods-besteffort-podb74d3bfc_4f89_48d9_aad9_0aab058e613f.slice. Aug 13 00:05:30.482147 env[1470]: time="2025-08-13T00:05:30.482110099Z" level=info msg="shim disconnected" id=8eac27a9fb730d6616981eca24063860f94978dac64cddd85c9bc963564288fc Aug 13 00:05:30.482368 env[1470]: time="2025-08-13T00:05:30.482348943Z" level=warning msg="cleaning up after shim disconnected" id=8eac27a9fb730d6616981eca24063860f94978dac64cddd85c9bc963564288fc namespace=k8s.io Aug 13 00:05:30.482478 env[1470]: time="2025-08-13T00:05:30.482463344Z" level=info msg="cleaning up dead shim" Aug 13 00:05:30.491148 env[1470]: time="2025-08-13T00:05:30.491114921Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:05:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3218 runtime=io.containerd.runc.v2\n" Aug 13 00:05:30.508620 systemd[1]: Created slice kubepods-burstable-pod201b1d82_04f8_4f80_9cbd_95654fdd542e.slice. Aug 13 00:05:30.521513 systemd[1]: Created slice kubepods-besteffort-pod3fc74946_2172_4092_b038_3fbf914f9ea0.slice. Aug 13 00:05:30.533787 systemd[1]: Created slice kubepods-besteffort-pod1dd3d88d_3f62_4e35_8832_966cbdf918e8.slice. Aug 13 00:05:30.558295 systemd[1]: Created slice kubepods-burstable-pod0fe71868_7b1a_4e41_a3bb_561f2af259b6.slice. Aug 13 00:05:30.565413 systemd[1]: Created slice kubepods-besteffort-pod6681f5a2_e210_41c8_bad6_4e82c91ad26f.slice. Aug 13 00:05:30.581496 systemd[1]: Created slice kubepods-besteffort-pod03d26822_c6e0_4d53_995b_0c48022b6e2b.slice. Aug 13 00:05:30.589497 systemd[1]: Created slice kubepods-besteffort-podfeacf951_12e6_4ab1_a3db_59528fac3a21.slice. Aug 13 00:05:30.643313 env[1470]: time="2025-08-13T00:05:30.643232764Z" level=error msg="Failed to destroy network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:30.645450 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2-shm.mount: Deactivated successfully. Aug 13 00:05:30.645831 env[1470]: time="2025-08-13T00:05:30.645798484Z" level=error msg="encountered an error cleaning up failed sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:30.645952 env[1470]: time="2025-08-13T00:05:30.645927086Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5s8h8,Uid:155955ac-e694-496e-8435-16aca9011621,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:30.646238 kubelet[2482]: E0813 00:05:30.646206 2482 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:30.646661 kubelet[2482]: E0813 00:05:30.646641 2482 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5s8h8" Aug 13 00:05:30.646749 kubelet[2482]: E0813 00:05:30.646734 2482 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5s8h8" Aug 13 00:05:30.646866 kubelet[2482]: E0813 00:05:30.646841 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-5s8h8_calico-system(155955ac-e694-496e-8435-16aca9011621)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-5s8h8_calico-system(155955ac-e694-496e-8435-16aca9011621)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5s8h8" podUID="155955ac-e694-496e-8435-16aca9011621" Aug 13 00:05:30.678658 kubelet[2482]: I0813 00:05:30.678608 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6681f5a2-e210-41c8-bad6-4e82c91ad26f-calico-apiserver-certs\") pod \"calico-apiserver-db67c69c4-9hpz2\" (UID: \"6681f5a2-e210-41c8-bad6-4e82c91ad26f\") " pod="calico-apiserver/calico-apiserver-db67c69c4-9hpz2" Aug 13 00:05:30.678790 kubelet[2482]: I0813 00:05:30.678669 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3fc74946-2172-4092-b038-3fbf914f9ea0-tigera-ca-bundle\") pod \"calico-kube-controllers-689f76fcb5-r25jb\" (UID: \"3fc74946-2172-4092-b038-3fbf914f9ea0\") " pod="calico-system/calico-kube-controllers-689f76fcb5-r25jb" Aug 13 00:05:30.678790 kubelet[2482]: I0813 00:05:30.678700 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tvhm6\" (UniqueName: \"kubernetes.io/projected/feacf951-12e6-4ab1-a3db-59528fac3a21-kube-api-access-tvhm6\") pod \"goldmane-768f4c5c69-hslpg\" (UID: \"feacf951-12e6-4ab1-a3db-59528fac3a21\") " pod="calico-system/goldmane-768f4c5c69-hslpg" Aug 13 00:05:30.678790 kubelet[2482]: I0813 00:05:30.678753 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/0fe71868-7b1a-4e41-a3bb-561f2af259b6-config-volume\") pod \"coredns-674b8bbfcf-n6vrt\" (UID: \"0fe71868-7b1a-4e41-a3bb-561f2af259b6\") " pod="kube-system/coredns-674b8bbfcf-n6vrt" Aug 13 00:05:30.678790 kubelet[2482]: I0813 00:05:30.678784 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ksrdf\" (UniqueName: \"kubernetes.io/projected/0fe71868-7b1a-4e41-a3bb-561f2af259b6-kube-api-access-ksrdf\") pod \"coredns-674b8bbfcf-n6vrt\" (UID: \"0fe71868-7b1a-4e41-a3bb-561f2af259b6\") " pod="kube-system/coredns-674b8bbfcf-n6vrt" Aug 13 00:05:30.678978 kubelet[2482]: I0813 00:05:30.678815 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4xwgs\" (UniqueName: \"kubernetes.io/projected/6681f5a2-e210-41c8-bad6-4e82c91ad26f-kube-api-access-4xwgs\") pod \"calico-apiserver-db67c69c4-9hpz2\" (UID: \"6681f5a2-e210-41c8-bad6-4e82c91ad26f\") " pod="calico-apiserver/calico-apiserver-db67c69c4-9hpz2" Aug 13 00:05:30.678978 kubelet[2482]: I0813 00:05:30.678843 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/feacf951-12e6-4ab1-a3db-59528fac3a21-config\") pod \"goldmane-768f4c5c69-hslpg\" (UID: \"feacf951-12e6-4ab1-a3db-59528fac3a21\") " pod="calico-system/goldmane-768f4c5c69-hslpg" Aug 13 00:05:30.678978 kubelet[2482]: I0813 00:05:30.678872 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cmpmb\" (UniqueName: \"kubernetes.io/projected/03d26822-c6e0-4d53-995b-0c48022b6e2b-kube-api-access-cmpmb\") pod \"calico-apiserver-5bbbfc55d5-c5zbr\" (UID: \"03d26822-c6e0-4d53-995b-0c48022b6e2b\") " pod="calico-apiserver/calico-apiserver-5bbbfc55d5-c5zbr" Aug 13 00:05:30.678978 kubelet[2482]: I0813 00:05:30.678906 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/201b1d82-04f8-4f80-9cbd-95654fdd542e-config-volume\") pod \"coredns-674b8bbfcf-9zbtc\" (UID: \"201b1d82-04f8-4f80-9cbd-95654fdd542e\") " pod="kube-system/coredns-674b8bbfcf-9zbtc" Aug 13 00:05:30.678978 kubelet[2482]: I0813 00:05:30.678938 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tnf6v\" (UniqueName: \"kubernetes.io/projected/3fc74946-2172-4092-b038-3fbf914f9ea0-kube-api-access-tnf6v\") pod \"calico-kube-controllers-689f76fcb5-r25jb\" (UID: \"3fc74946-2172-4092-b038-3fbf914f9ea0\") " pod="calico-system/calico-kube-controllers-689f76fcb5-r25jb" Aug 13 00:05:30.679199 kubelet[2482]: I0813 00:05:30.678967 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/feacf951-12e6-4ab1-a3db-59528fac3a21-goldmane-key-pair\") pod \"goldmane-768f4c5c69-hslpg\" (UID: \"feacf951-12e6-4ab1-a3db-59528fac3a21\") " pod="calico-system/goldmane-768f4c5c69-hslpg" Aug 13 00:05:30.679199 kubelet[2482]: I0813 00:05:30.678995 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/03d26822-c6e0-4d53-995b-0c48022b6e2b-calico-apiserver-certs\") pod \"calico-apiserver-5bbbfc55d5-c5zbr\" (UID: \"03d26822-c6e0-4d53-995b-0c48022b6e2b\") " pod="calico-apiserver/calico-apiserver-5bbbfc55d5-c5zbr" Aug 13 00:05:30.679199 kubelet[2482]: I0813 00:05:30.679031 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zhsrz\" (UniqueName: \"kubernetes.io/projected/1dd3d88d-3f62-4e35-8832-966cbdf918e8-kube-api-access-zhsrz\") pod \"calico-apiserver-db67c69c4-f8bkz\" (UID: \"1dd3d88d-3f62-4e35-8832-966cbdf918e8\") " pod="calico-apiserver/calico-apiserver-db67c69c4-f8bkz" Aug 13 00:05:30.679199 kubelet[2482]: I0813 00:05:30.679068 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hmfbp\" (UniqueName: \"kubernetes.io/projected/201b1d82-04f8-4f80-9cbd-95654fdd542e-kube-api-access-hmfbp\") pod \"coredns-674b8bbfcf-9zbtc\" (UID: \"201b1d82-04f8-4f80-9cbd-95654fdd542e\") " pod="kube-system/coredns-674b8bbfcf-9zbtc" Aug 13 00:05:30.679199 kubelet[2482]: I0813 00:05:30.679104 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1dd3d88d-3f62-4e35-8832-966cbdf918e8-calico-apiserver-certs\") pod \"calico-apiserver-db67c69c4-f8bkz\" (UID: \"1dd3d88d-3f62-4e35-8832-966cbdf918e8\") " pod="calico-apiserver/calico-apiserver-db67c69c4-f8bkz" Aug 13 00:05:30.679460 kubelet[2482]: I0813 00:05:30.679146 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/feacf951-12e6-4ab1-a3db-59528fac3a21-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-hslpg\" (UID: \"feacf951-12e6-4ab1-a3db-59528fac3a21\") " pod="calico-system/goldmane-768f4c5c69-hslpg" Aug 13 00:05:30.704518 env[1470]: time="2025-08-13T00:05:30.704469691Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Aug 13 00:05:30.704975 kubelet[2482]: I0813 00:05:30.704954 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:30.705647 env[1470]: time="2025-08-13T00:05:30.705602629Z" level=info msg="StopPodSandbox for \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\"" Aug 13 00:05:30.741742 env[1470]: time="2025-08-13T00:05:30.740368978Z" level=error msg="StopPodSandbox for \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\" failed" error="failed to destroy network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:30.742057 kubelet[2482]: E0813 00:05:30.742024 2482 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:30.742122 kubelet[2482]: E0813 00:05:30.742076 2482 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2"} Aug 13 00:05:30.742157 kubelet[2482]: E0813 00:05:30.742137 2482 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"155955ac-e694-496e-8435-16aca9011621\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:05:30.742212 kubelet[2482]: E0813 00:05:30.742159 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"155955ac-e694-496e-8435-16aca9011621\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5s8h8" podUID="155955ac-e694-496e-8435-16aca9011621" Aug 13 00:05:30.795433 env[1470]: time="2025-08-13T00:05:30.795369647Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-558cbf8d66-ksrqt,Uid:b74d3bfc-4f89-48d9-aad9-0aab058e613f,Namespace:calico-system,Attempt:0,}" Aug 13 00:05:30.825306 env[1470]: time="2025-08-13T00:05:30.825231399Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-689f76fcb5-r25jb,Uid:3fc74946-2172-4092-b038-3fbf914f9ea0,Namespace:calico-system,Attempt:0,}" Aug 13 00:05:30.839287 env[1470]: time="2025-08-13T00:05:30.839187979Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-db67c69c4-f8bkz,Uid:1dd3d88d-3f62-4e35-8832-966cbdf918e8,Namespace:calico-apiserver,Attempt:0,}" Aug 13 00:05:30.878107 env[1470]: time="2025-08-13T00:05:30.878069873Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n6vrt,Uid:0fe71868-7b1a-4e41-a3bb-561f2af259b6,Namespace:kube-system,Attempt:0,}" Aug 13 00:05:30.885313 env[1470]: time="2025-08-13T00:05:30.885277587Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-db67c69c4-9hpz2,Uid:6681f5a2-e210-41c8-bad6-4e82c91ad26f,Namespace:calico-apiserver,Attempt:0,}" Aug 13 00:05:30.886962 env[1470]: time="2025-08-13T00:05:30.886926733Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5bbbfc55d5-c5zbr,Uid:03d26822-c6e0-4d53-995b-0c48022b6e2b,Namespace:calico-apiserver,Attempt:0,}" Aug 13 00:05:30.896748 kubelet[2482]: I0813 00:05:30.896726 2482 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:05:30.896838 env[1470]: time="2025-08-13T00:05:30.896763928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-hslpg,Uid:feacf951-12e6-4ab1-a3db-59528fac3a21,Namespace:calico-system,Attempt:0,}" Aug 13 00:05:30.927000 audit[3285]: NETFILTER_CFG table=filter:102 family=2 entries=21 op=nft_register_rule pid=3285 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:30.927000 audit[3285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe48547a0 a2=0 a3=1 items=0 ppid=2589 pid=3285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:30.927000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:30.933000 audit[3285]: NETFILTER_CFG table=nat:103 family=2 entries=19 op=nft_register_chain pid=3285 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:30.933000 audit[3285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe48547a0 a2=0 a3=1 items=0 ppid=2589 pid=3285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:30.933000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:31.112177 env[1470]: time="2025-08-13T00:05:31.112134300Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9zbtc,Uid:201b1d82-04f8-4f80-9cbd-95654fdd542e,Namespace:kube-system,Attempt:0,}" Aug 13 00:05:31.270804 env[1470]: time="2025-08-13T00:05:31.270747963Z" level=error msg="Failed to destroy network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.271107 env[1470]: time="2025-08-13T00:05:31.271067728Z" level=error msg="encountered an error cleaning up failed sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.271165 env[1470]: time="2025-08-13T00:05:31.271122369Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-558cbf8d66-ksrqt,Uid:b74d3bfc-4f89-48d9-aad9-0aab058e613f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.271398 kubelet[2482]: E0813 00:05:31.271359 2482 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.271460 kubelet[2482]: E0813 00:05:31.271435 2482 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-558cbf8d66-ksrqt" Aug 13 00:05:31.271489 kubelet[2482]: E0813 00:05:31.271457 2482 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-558cbf8d66-ksrqt" Aug 13 00:05:31.271546 kubelet[2482]: E0813 00:05:31.271519 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-558cbf8d66-ksrqt_calico-system(b74d3bfc-4f89-48d9-aad9-0aab058e613f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-558cbf8d66-ksrqt_calico-system(b74d3bfc-4f89-48d9-aad9-0aab058e613f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-558cbf8d66-ksrqt" podUID="b74d3bfc-4f89-48d9-aad9-0aab058e613f" Aug 13 00:05:31.315187 env[1470]: time="2025-08-13T00:05:31.315133092Z" level=error msg="Failed to destroy network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.315488 env[1470]: time="2025-08-13T00:05:31.315455377Z" level=error msg="encountered an error cleaning up failed sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.315529 env[1470]: time="2025-08-13T00:05:31.315504258Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-689f76fcb5-r25jb,Uid:3fc74946-2172-4092-b038-3fbf914f9ea0,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.315751 kubelet[2482]: E0813 00:05:31.315714 2482 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.315805 kubelet[2482]: E0813 00:05:31.315782 2482 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-689f76fcb5-r25jb" Aug 13 00:05:31.315834 kubelet[2482]: E0813 00:05:31.315810 2482 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-689f76fcb5-r25jb" Aug 13 00:05:31.315902 kubelet[2482]: E0813 00:05:31.315873 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-689f76fcb5-r25jb_calico-system(3fc74946-2172-4092-b038-3fbf914f9ea0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-689f76fcb5-r25jb_calico-system(3fc74946-2172-4092-b038-3fbf914f9ea0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-689f76fcb5-r25jb" podUID="3fc74946-2172-4092-b038-3fbf914f9ea0" Aug 13 00:05:31.479051 env[1470]: time="2025-08-13T00:05:31.478935436Z" level=error msg="Failed to destroy network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.479493 env[1470]: time="2025-08-13T00:05:31.479463284Z" level=error msg="encountered an error cleaning up failed sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.479623 env[1470]: time="2025-08-13T00:05:31.479597086Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-db67c69c4-f8bkz,Uid:1dd3d88d-3f62-4e35-8832-966cbdf918e8,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.480275 kubelet[2482]: E0813 00:05:31.480011 2482 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.480275 kubelet[2482]: E0813 00:05:31.480108 2482 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-db67c69c4-f8bkz" Aug 13 00:05:31.480275 kubelet[2482]: E0813 00:05:31.480127 2482 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-db67c69c4-f8bkz" Aug 13 00:05:31.480432 kubelet[2482]: E0813 00:05:31.480184 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-db67c69c4-f8bkz_calico-apiserver(1dd3d88d-3f62-4e35-8832-966cbdf918e8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-db67c69c4-f8bkz_calico-apiserver(1dd3d88d-3f62-4e35-8832-966cbdf918e8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-db67c69c4-f8bkz" podUID="1dd3d88d-3f62-4e35-8832-966cbdf918e8" Aug 13 00:05:31.546471 env[1470]: time="2025-08-13T00:05:31.546416404Z" level=error msg="Failed to destroy network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.546753 env[1470]: time="2025-08-13T00:05:31.546721328Z" level=error msg="encountered an error cleaning up failed sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.546793 env[1470]: time="2025-08-13T00:05:31.546768809Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n6vrt,Uid:0fe71868-7b1a-4e41-a3bb-561f2af259b6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.547508 kubelet[2482]: E0813 00:05:31.546959 2482 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.547508 kubelet[2482]: E0813 00:05:31.547013 2482 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-n6vrt" Aug 13 00:05:31.547508 kubelet[2482]: E0813 00:05:31.547041 2482 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-n6vrt" Aug 13 00:05:31.547670 kubelet[2482]: E0813 00:05:31.547094 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-n6vrt_kube-system(0fe71868-7b1a-4e41-a3bb-561f2af259b6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-n6vrt_kube-system(0fe71868-7b1a-4e41-a3bb-561f2af259b6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-n6vrt" podUID="0fe71868-7b1a-4e41-a3bb-561f2af259b6" Aug 13 00:05:31.623355 env[1470]: time="2025-08-13T00:05:31.623305437Z" level=error msg="Failed to destroy network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.625441 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302-shm.mount: Deactivated successfully. Aug 13 00:05:31.628321 env[1470]: time="2025-08-13T00:05:31.626778251Z" level=error msg="encountered an error cleaning up failed sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.628321 env[1470]: time="2025-08-13T00:05:31.626831572Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-db67c69c4-9hpz2,Uid:6681f5a2-e210-41c8-bad6-4e82c91ad26f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.628979 kubelet[2482]: E0813 00:05:31.628579 2482 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.628979 kubelet[2482]: E0813 00:05:31.628627 2482 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-db67c69c4-9hpz2" Aug 13 00:05:31.628979 kubelet[2482]: E0813 00:05:31.628661 2482 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-db67c69c4-9hpz2" Aug 13 00:05:31.629130 kubelet[2482]: E0813 00:05:31.628702 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-db67c69c4-9hpz2_calico-apiserver(6681f5a2-e210-41c8-bad6-4e82c91ad26f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-db67c69c4-9hpz2_calico-apiserver(6681f5a2-e210-41c8-bad6-4e82c91ad26f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-db67c69c4-9hpz2" podUID="6681f5a2-e210-41c8-bad6-4e82c91ad26f" Aug 13 00:05:31.664913 env[1470]: time="2025-08-13T00:05:31.664860563Z" level=error msg="Failed to destroy network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.666851 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba-shm.mount: Deactivated successfully. Aug 13 00:05:31.669669 env[1470]: time="2025-08-13T00:05:31.668133933Z" level=error msg="encountered an error cleaning up failed sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.669669 env[1470]: time="2025-08-13T00:05:31.668197454Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5bbbfc55d5-c5zbr,Uid:03d26822-c6e0-4d53-995b-0c48022b6e2b,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.670377 kubelet[2482]: E0813 00:05:31.669928 2482 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.670377 kubelet[2482]: E0813 00:05:31.669976 2482 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5bbbfc55d5-c5zbr" Aug 13 00:05:31.670377 kubelet[2482]: E0813 00:05:31.670007 2482 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5bbbfc55d5-c5zbr" Aug 13 00:05:31.670654 kubelet[2482]: E0813 00:05:31.670070 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5bbbfc55d5-c5zbr_calico-apiserver(03d26822-c6e0-4d53-995b-0c48022b6e2b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5bbbfc55d5-c5zbr_calico-apiserver(03d26822-c6e0-4d53-995b-0c48022b6e2b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5bbbfc55d5-c5zbr" podUID="03d26822-c6e0-4d53-995b-0c48022b6e2b" Aug 13 00:05:31.689799 env[1470]: time="2025-08-13T00:05:31.689744069Z" level=error msg="Failed to destroy network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.690114 env[1470]: time="2025-08-13T00:05:31.690074554Z" level=error msg="encountered an error cleaning up failed sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.690167 env[1470]: time="2025-08-13T00:05:31.690123595Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-hslpg,Uid:feacf951-12e6-4ab1-a3db-59528fac3a21,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.690711 kubelet[2482]: E0813 00:05:31.690352 2482 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.690711 kubelet[2482]: E0813 00:05:31.690398 2482 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-hslpg" Aug 13 00:05:31.690711 kubelet[2482]: E0813 00:05:31.690424 2482 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-hslpg" Aug 13 00:05:31.690867 kubelet[2482]: E0813 00:05:31.690476 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-hslpg_calico-system(feacf951-12e6-4ab1-a3db-59528fac3a21)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-hslpg_calico-system(feacf951-12e6-4ab1-a3db-59528fac3a21)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-hslpg" podUID="feacf951-12e6-4ab1-a3db-59528fac3a21" Aug 13 00:05:31.706823 kubelet[2482]: I0813 00:05:31.706795 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:31.708422 env[1470]: time="2025-08-13T00:05:31.708384398Z" level=info msg="StopPodSandbox for \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\"" Aug 13 00:05:31.710307 kubelet[2482]: I0813 00:05:31.709574 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:31.710837 env[1470]: time="2025-08-13T00:05:31.710813356Z" level=info msg="StopPodSandbox for \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\"" Aug 13 00:05:31.712711 kubelet[2482]: I0813 00:05:31.712684 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:31.713195 env[1470]: time="2025-08-13T00:05:31.713158112Z" level=info msg="StopPodSandbox for \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\"" Aug 13 00:05:31.714238 kubelet[2482]: I0813 00:05:31.714219 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:31.715055 env[1470]: time="2025-08-13T00:05:31.715015221Z" level=info msg="StopPodSandbox for \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\"" Aug 13 00:05:31.717886 kubelet[2482]: I0813 00:05:31.717858 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:31.718375 env[1470]: time="2025-08-13T00:05:31.718343233Z" level=info msg="StopPodSandbox for \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\"" Aug 13 00:05:31.719738 kubelet[2482]: I0813 00:05:31.719669 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:31.720667 env[1470]: time="2025-08-13T00:05:31.720644069Z" level=info msg="StopPodSandbox for \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\"" Aug 13 00:05:31.723457 kubelet[2482]: I0813 00:05:31.722647 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:31.732302 env[1470]: time="2025-08-13T00:05:31.732207928Z" level=info msg="StopPodSandbox for \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\"" Aug 13 00:05:31.777024 env[1470]: time="2025-08-13T00:05:31.776688899Z" level=error msg="Failed to destroy network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.778261 env[1470]: time="2025-08-13T00:05:31.778214763Z" level=error msg="encountered an error cleaning up failed sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.778611 env[1470]: time="2025-08-13T00:05:31.778577208Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9zbtc,Uid:201b1d82-04f8-4f80-9cbd-95654fdd542e,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.778933 kubelet[2482]: E0813 00:05:31.778889 2482 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.779002 kubelet[2482]: E0813 00:05:31.778945 2482 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-9zbtc" Aug 13 00:05:31.779002 kubelet[2482]: E0813 00:05:31.778967 2482 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-9zbtc" Aug 13 00:05:31.779062 kubelet[2482]: E0813 00:05:31.779009 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-9zbtc_kube-system(201b1d82-04f8-4f80-9cbd-95654fdd542e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-9zbtc_kube-system(201b1d82-04f8-4f80-9cbd-95654fdd542e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-9zbtc" podUID="201b1d82-04f8-4f80-9cbd-95654fdd542e" Aug 13 00:05:31.813761 env[1470]: time="2025-08-13T00:05:31.813703074Z" level=error msg="StopPodSandbox for \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\" failed" error="failed to destroy network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.815855 env[1470]: time="2025-08-13T00:05:31.814214882Z" level=error msg="StopPodSandbox for \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\" failed" error="failed to destroy network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.815917 kubelet[2482]: E0813 00:05:31.814028 2482 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:31.815917 kubelet[2482]: E0813 00:05:31.814081 2482 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81"} Aug 13 00:05:31.815917 kubelet[2482]: E0813 00:05:31.814113 2482 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3fc74946-2172-4092-b038-3fbf914f9ea0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:05:31.815917 kubelet[2482]: E0813 00:05:31.814135 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3fc74946-2172-4092-b038-3fbf914f9ea0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-689f76fcb5-r25jb" podUID="3fc74946-2172-4092-b038-3fbf914f9ea0" Aug 13 00:05:31.816067 kubelet[2482]: E0813 00:05:31.814346 2482 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:31.816067 kubelet[2482]: E0813 00:05:31.814370 2482 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54"} Aug 13 00:05:31.816067 kubelet[2482]: E0813 00:05:31.814394 2482 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:05:31.816067 kubelet[2482]: E0813 00:05:31.814411 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-558cbf8d66-ksrqt" podUID="b74d3bfc-4f89-48d9-aad9-0aab058e613f" Aug 13 00:05:31.824647 env[1470]: time="2025-08-13T00:05:31.824601203Z" level=error msg="StopPodSandbox for \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\" failed" error="failed to destroy network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.824798 kubelet[2482]: E0813 00:05:31.824767 2482 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:31.824867 kubelet[2482]: E0813 00:05:31.824803 2482 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b"} Aug 13 00:05:31.824867 kubelet[2482]: E0813 00:05:31.824829 2482 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0fe71868-7b1a-4e41-a3bb-561f2af259b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:05:31.824867 kubelet[2482]: E0813 00:05:31.824850 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0fe71868-7b1a-4e41-a3bb-561f2af259b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-n6vrt" podUID="0fe71868-7b1a-4e41-a3bb-561f2af259b6" Aug 13 00:05:31.833246 env[1470]: time="2025-08-13T00:05:31.833196016Z" level=error msg="StopPodSandbox for \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\" failed" error="failed to destroy network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.833392 kubelet[2482]: E0813 00:05:31.833361 2482 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:31.833454 kubelet[2482]: E0813 00:05:31.833397 2482 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501"} Aug 13 00:05:31.833454 kubelet[2482]: E0813 00:05:31.833422 2482 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"feacf951-12e6-4ab1-a3db-59528fac3a21\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:05:31.833454 kubelet[2482]: E0813 00:05:31.833440 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"feacf951-12e6-4ab1-a3db-59528fac3a21\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-hslpg" podUID="feacf951-12e6-4ab1-a3db-59528fac3a21" Aug 13 00:05:31.837323 env[1470]: time="2025-08-13T00:05:31.837280240Z" level=error msg="StopPodSandbox for \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\" failed" error="failed to destroy network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.837449 kubelet[2482]: E0813 00:05:31.837418 2482 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:31.837495 kubelet[2482]: E0813 00:05:31.837451 2482 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302"} Aug 13 00:05:31.837495 kubelet[2482]: E0813 00:05:31.837474 2482 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6681f5a2-e210-41c8-bad6-4e82c91ad26f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:05:31.837576 kubelet[2482]: E0813 00:05:31.837493 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6681f5a2-e210-41c8-bad6-4e82c91ad26f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-db67c69c4-9hpz2" podUID="6681f5a2-e210-41c8-bad6-4e82c91ad26f" Aug 13 00:05:31.837708 env[1470]: time="2025-08-13T00:05:31.837649805Z" level=error msg="StopPodSandbox for \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\" failed" error="failed to destroy network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.837909 kubelet[2482]: E0813 00:05:31.837862 2482 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:31.837909 kubelet[2482]: E0813 00:05:31.837890 2482 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00"} Aug 13 00:05:31.838018 kubelet[2482]: E0813 00:05:31.837910 2482 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1dd3d88d-3f62-4e35-8832-966cbdf918e8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:05:31.838018 kubelet[2482]: E0813 00:05:31.837927 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1dd3d88d-3f62-4e35-8832-966cbdf918e8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-db67c69c4-f8bkz" podUID="1dd3d88d-3f62-4e35-8832-966cbdf918e8" Aug 13 00:05:31.842593 env[1470]: time="2025-08-13T00:05:31.842554922Z" level=error msg="StopPodSandbox for \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\" failed" error="failed to destroy network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:31.842881 kubelet[2482]: E0813 00:05:31.842846 2482 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:31.842881 kubelet[2482]: E0813 00:05:31.842880 2482 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba"} Aug 13 00:05:31.842971 kubelet[2482]: E0813 00:05:31.842901 2482 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"03d26822-c6e0-4d53-995b-0c48022b6e2b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:05:31.842971 kubelet[2482]: E0813 00:05:31.842917 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"03d26822-c6e0-4d53-995b-0c48022b6e2b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5bbbfc55d5-c5zbr" podUID="03d26822-c6e0-4d53-995b-0c48022b6e2b" Aug 13 00:05:32.599735 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124-shm.mount: Deactivated successfully. Aug 13 00:05:32.599832 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501-shm.mount: Deactivated successfully. Aug 13 00:05:32.724714 kubelet[2482]: I0813 00:05:32.724679 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:32.726280 env[1470]: time="2025-08-13T00:05:32.725360401Z" level=info msg="StopPodSandbox for \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\"" Aug 13 00:05:32.751750 env[1470]: time="2025-08-13T00:05:32.751699723Z" level=error msg="StopPodSandbox for \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\" failed" error="failed to destroy network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Aug 13 00:05:32.751951 kubelet[2482]: E0813 00:05:32.751913 2482 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:32.752005 kubelet[2482]: E0813 00:05:32.751960 2482 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124"} Aug 13 00:05:32.752036 kubelet[2482]: E0813 00:05:32.752002 2482 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"201b1d82-04f8-4f80-9cbd-95654fdd542e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Aug 13 00:05:32.752036 kubelet[2482]: E0813 00:05:32.752023 2482 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"201b1d82-04f8-4f80-9cbd-95654fdd542e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-9zbtc" podUID="201b1d82-04f8-4f80-9cbd-95654fdd542e" Aug 13 00:05:38.937734 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2422653945.mount: Deactivated successfully. Aug 13 00:05:39.055677 env[1470]: time="2025-08-13T00:05:39.055620817Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:39.085182 env[1470]: time="2025-08-13T00:05:39.085130261Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:39.100534 env[1470]: time="2025-08-13T00:05:39.100488590Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:39.115593 env[1470]: time="2025-08-13T00:05:39.115547116Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:39.116696 env[1470]: time="2025-08-13T00:05:39.116245406Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Aug 13 00:05:39.142565 env[1470]: time="2025-08-13T00:05:39.142522645Z" level=info msg="CreateContainer within sandbox \"ef0de2475b57d057afe149507bdb87a277962d41b530fd62ed2347f7911e0683\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Aug 13 00:05:39.237743 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3840790119.mount: Deactivated successfully. Aug 13 00:05:39.285592 env[1470]: time="2025-08-13T00:05:39.285546919Z" level=info msg="CreateContainer within sandbox \"ef0de2475b57d057afe149507bdb87a277962d41b530fd62ed2347f7911e0683\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"86d10437454c36779544774608103d6b17358379ce82bda0627f6e5f64b1023a\"" Aug 13 00:05:39.286176 env[1470]: time="2025-08-13T00:05:39.286148287Z" level=info msg="StartContainer for \"86d10437454c36779544774608103d6b17358379ce82bda0627f6e5f64b1023a\"" Aug 13 00:05:39.301038 systemd[1]: Started cri-containerd-86d10437454c36779544774608103d6b17358379ce82bda0627f6e5f64b1023a.scope. Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.327946 kernel: kauditd_printk_skb: 40 callbacks suppressed Aug 13 00:05:39.328032 kernel: audit: type=1400 audit(1755043539.321:1016): avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2955 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:39.369186 kernel: audit: type=1300 audit(1755043539.321:1016): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2955 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:39.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836643130343337343534633336373739353434373734363038313033 Aug 13 00:05:39.391989 kernel: audit: type=1327 audit(1755043539.321:1016): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836643130343337343534633336373739353434373734363038313033 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.408316 kernel: audit: type=1400 audit(1755043539.321:1017): avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.430294 kernel: audit: type=1400 audit(1755043539.321:1017): avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.446599 kernel: audit: type=1400 audit(1755043539.321:1017): avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.464949 kernel: audit: type=1400 audit(1755043539.321:1017): avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.484239 kernel: audit: type=1400 audit(1755043539.321:1017): avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.501034 kernel: audit: type=1400 audit(1755043539.321:1017): avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.519923 kernel: audit: type=1400 audit(1755043539.321:1017): avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.321000 audit: BPF prog-id=137 op=LOAD Aug 13 00:05:39.321000 audit[3639]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2955 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:39.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836643130343337343534633336373739353434373734363038313033 Aug 13 00:05:39.326000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.326000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.326000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.326000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.326000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.326000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.326000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.326000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.326000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.326000 audit: BPF prog-id=138 op=LOAD Aug 13 00:05:39.326000 audit[3639]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2955 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:39.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836643130343337343534633336373739353434373734363038313033 Aug 13 00:05:39.342000 audit: BPF prog-id=138 op=UNLOAD Aug 13 00:05:39.342000 audit: BPF prog-id=137 op=UNLOAD Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:39.342000 audit: BPF prog-id=139 op=LOAD Aug 13 00:05:39.342000 audit[3639]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2955 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:39.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836643130343337343534633336373739353434373734363038313033 Aug 13 00:05:39.653544 env[1470]: time="2025-08-13T00:05:39.653487425Z" level=info msg="StartContainer for \"86d10437454c36779544774608103d6b17358379ce82bda0627f6e5f64b1023a\" returns successfully" Aug 13 00:05:39.990521 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Aug 13 00:05:39.990682 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 13 00:05:40.094935 kubelet[2482]: I0813 00:05:40.094868 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-jkl6n" podStartSLOduration=2.003792574 podStartE2EDuration="25.094854036s" podCreationTimestamp="2025-08-13 00:05:15 +0000 UTC" firstStartedPulling="2025-08-13 00:05:16.026289439 +0000 UTC m=+26.535436465" lastFinishedPulling="2025-08-13 00:05:39.117350861 +0000 UTC m=+49.626497927" observedRunningTime="2025-08-13 00:05:39.776692388 +0000 UTC m=+50.285839454" watchObservedRunningTime="2025-08-13 00:05:40.094854036 +0000 UTC m=+50.604001102" Aug 13 00:05:40.095902 env[1470]: time="2025-08-13T00:05:40.095870090Z" level=info msg="StopPodSandbox for \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\"" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.179 [INFO][3708] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.179 [INFO][3708] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" iface="eth0" netns="/var/run/netns/cni-d327dc58-ad58-da47-07ba-39dfac42143f" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.179 [INFO][3708] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" iface="eth0" netns="/var/run/netns/cni-d327dc58-ad58-da47-07ba-39dfac42143f" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.179 [INFO][3708] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" iface="eth0" netns="/var/run/netns/cni-d327dc58-ad58-da47-07ba-39dfac42143f" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.179 [INFO][3708] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.180 [INFO][3708] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.199 [INFO][3720] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" HandleID="k8s-pod-network.0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.199 [INFO][3720] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.199 [INFO][3720] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.210 [WARNING][3720] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" HandleID="k8s-pod-network.0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.210 [INFO][3720] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" HandleID="k8s-pod-network.0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.211 [INFO][3720] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:40.216766 env[1470]: 2025-08-13 00:05:40.213 [INFO][3708] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:40.219576 systemd[1]: run-netns-cni\x2dd327dc58\x2dad58\x2dda47\x2d07ba\x2d39dfac42143f.mount: Deactivated successfully. Aug 13 00:05:40.219983 env[1470]: time="2025-08-13T00:05:40.219949200Z" level=info msg="TearDown network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\" successfully" Aug 13 00:05:40.220068 env[1470]: time="2025-08-13T00:05:40.220051401Z" level=info msg="StopPodSandbox for \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\" returns successfully" Aug 13 00:05:40.253667 kubelet[2482]: I0813 00:05:40.253571 2482 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b74d3bfc-4f89-48d9-aad9-0aab058e613f-whisker-backend-key-pair\") pod \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\" (UID: \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\") " Aug 13 00:05:40.261546 systemd[1]: var-lib-kubelet-pods-b74d3bfc\x2d4f89\x2d48d9\x2daad9\x2d0aab058e613f-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Aug 13 00:05:40.263182 kubelet[2482]: I0813 00:05:40.263128 2482 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b74d3bfc-4f89-48d9-aad9-0aab058e613f-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "b74d3bfc-4f89-48d9-aad9-0aab058e613f" (UID: "b74d3bfc-4f89-48d9-aad9-0aab058e613f"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Aug 13 00:05:40.355290 kubelet[2482]: I0813 00:05:40.355091 2482 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-c72d6\" (UniqueName: \"kubernetes.io/projected/b74d3bfc-4f89-48d9-aad9-0aab058e613f-kube-api-access-c72d6\") pod \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\" (UID: \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\") " Aug 13 00:05:40.355290 kubelet[2482]: I0813 00:05:40.355131 2482 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b74d3bfc-4f89-48d9-aad9-0aab058e613f-whisker-ca-bundle\") pod \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\" (UID: \"b74d3bfc-4f89-48d9-aad9-0aab058e613f\") " Aug 13 00:05:40.355290 kubelet[2482]: I0813 00:05:40.355185 2482 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b74d3bfc-4f89-48d9-aad9-0aab058e613f-whisker-backend-key-pair\") on node \"ci-3510.3.8-a-c7286a0eab\" DevicePath \"\"" Aug 13 00:05:40.355526 kubelet[2482]: I0813 00:05:40.355497 2482 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b74d3bfc-4f89-48d9-aad9-0aab058e613f-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "b74d3bfc-4f89-48d9-aad9-0aab058e613f" (UID: "b74d3bfc-4f89-48d9-aad9-0aab058e613f"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Aug 13 00:05:40.360287 systemd[1]: var-lib-kubelet-pods-b74d3bfc\x2d4f89\x2d48d9\x2daad9\x2d0aab058e613f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dc72d6.mount: Deactivated successfully. Aug 13 00:05:40.361575 kubelet[2482]: I0813 00:05:40.361539 2482 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b74d3bfc-4f89-48d9-aad9-0aab058e613f-kube-api-access-c72d6" (OuterVolumeSpecName: "kube-api-access-c72d6") pod "b74d3bfc-4f89-48d9-aad9-0aab058e613f" (UID: "b74d3bfc-4f89-48d9-aad9-0aab058e613f"). InnerVolumeSpecName "kube-api-access-c72d6". PluginName "kubernetes.io/projected", VolumeGIDValue "" Aug 13 00:05:40.456134 kubelet[2482]: I0813 00:05:40.456103 2482 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b74d3bfc-4f89-48d9-aad9-0aab058e613f-whisker-ca-bundle\") on node \"ci-3510.3.8-a-c7286a0eab\" DevicePath \"\"" Aug 13 00:05:40.456134 kubelet[2482]: I0813 00:05:40.456131 2482 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-c72d6\" (UniqueName: \"kubernetes.io/projected/b74d3bfc-4f89-48d9-aad9-0aab058e613f-kube-api-access-c72d6\") on node \"ci-3510.3.8-a-c7286a0eab\" DevicePath \"\"" Aug 13 00:05:40.746712 systemd[1]: Removed slice kubepods-besteffort-podb74d3bfc_4f89_48d9_aad9_0aab058e613f.slice. Aug 13 00:05:40.847977 systemd[1]: Created slice kubepods-besteffort-poddd95f81c_b972_4941_9cf4_faf517afa2e6.slice. Aug 13 00:05:40.936207 systemd[1]: run-containerd-runc-k8s.io-86d10437454c36779544774608103d6b17358379ce82bda0627f6e5f64b1023a-runc.K95jXx.mount: Deactivated successfully. Aug 13 00:05:40.959151 kubelet[2482]: I0813 00:05:40.959036 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/dd95f81c-b972-4941-9cf4-faf517afa2e6-whisker-backend-key-pair\") pod \"whisker-565d5d6578-ctqdx\" (UID: \"dd95f81c-b972-4941-9cf4-faf517afa2e6\") " pod="calico-system/whisker-565d5d6578-ctqdx" Aug 13 00:05:40.959151 kubelet[2482]: I0813 00:05:40.959079 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dd95f81c-b972-4941-9cf4-faf517afa2e6-whisker-ca-bundle\") pod \"whisker-565d5d6578-ctqdx\" (UID: \"dd95f81c-b972-4941-9cf4-faf517afa2e6\") " pod="calico-system/whisker-565d5d6578-ctqdx" Aug 13 00:05:40.959151 kubelet[2482]: I0813 00:05:40.959097 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sgfjb\" (UniqueName: \"kubernetes.io/projected/dd95f81c-b972-4941-9cf4-faf517afa2e6-kube-api-access-sgfjb\") pod \"whisker-565d5d6578-ctqdx\" (UID: \"dd95f81c-b972-4941-9cf4-faf517afa2e6\") " pod="calico-system/whisker-565d5d6578-ctqdx" Aug 13 00:05:41.151341 env[1470]: time="2025-08-13T00:05:41.151304787Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-565d5d6578-ctqdx,Uid:dd95f81c-b972-4941-9cf4-faf517afa2e6,Namespace:calico-system,Attempt:0,}" Aug 13 00:05:41.375000 audit[3817]: AVC avc: denied { write } for pid=3817 comm="tee" name="fd" dev="proc" ino=25393 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:05:41.375000 audit[3817]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffde6c7bf a2=241 a3=1b6 items=1 ppid=3797 pid=3817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.375000 audit: CWD cwd="/etc/service/enabled/confd/log" Aug 13 00:05:41.375000 audit: PATH item=0 name="/dev/fd/63" inode=25386 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:05:41.375000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:05:41.395000 audit[3835]: AVC avc: denied { write } for pid=3835 comm="tee" name="fd" dev="proc" ino=25425 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:05:41.395000 audit[3835]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd95b57c0 a2=241 a3=1b6 items=1 ppid=3789 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.395000 audit: CWD cwd="/etc/service/enabled/bird/log" Aug 13 00:05:41.420444 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:05:41.420574 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif289a956cd1: link becomes ready Aug 13 00:05:41.427934 systemd-networkd[1624]: calif289a956cd1: Link UP Aug 13 00:05:41.428087 systemd-networkd[1624]: calif289a956cd1: Gained carrier Aug 13 00:05:41.395000 audit: PATH item=0 name="/dev/fd/63" inode=25422 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:05:41.395000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.300 [INFO][3763] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.312 [INFO][3763] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0 whisker-565d5d6578- calico-system dd95f81c-b972-4941-9cf4-faf517afa2e6 943 0 2025-08-13 00:05:40 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:565d5d6578 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab whisker-565d5d6578-ctqdx eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calif289a956cd1 [] [] }} ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Namespace="calico-system" Pod="whisker-565d5d6578-ctqdx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.312 [INFO][3763] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Namespace="calico-system" Pod="whisker-565d5d6578-ctqdx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.335 [INFO][3775] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" HandleID="k8s-pod-network.17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.335 [INFO][3775] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" HandleID="k8s-pod-network.17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"whisker-565d5d6578-ctqdx", "timestamp":"2025-08-13 00:05:41.335279187 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.335 [INFO][3775] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.335 [INFO][3775] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.335 [INFO][3775] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.347 [INFO][3775] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.352 [INFO][3775] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.357 [INFO][3775] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.359 [INFO][3775] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.363 [INFO][3775] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.363 [INFO][3775] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.366 [INFO][3775] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6 Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.370 [INFO][3775] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.380 [INFO][3775] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.129/26] block=192.168.21.128/26 handle="k8s-pod-network.17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.380 [INFO][3775] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.129/26] handle="k8s-pod-network.17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.380 [INFO][3775] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:41.445499 env[1470]: 2025-08-13 00:05:41.380 [INFO][3775] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.129/26] IPv6=[] ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" HandleID="k8s-pod-network.17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" Aug 13 00:05:41.446131 env[1470]: 2025-08-13 00:05:41.382 [INFO][3763] cni-plugin/k8s.go 418: Populated endpoint ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Namespace="calico-system" Pod="whisker-565d5d6578-ctqdx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0", GenerateName:"whisker-565d5d6578-", Namespace:"calico-system", SelfLink:"", UID:"dd95f81c-b972-4941-9cf4-faf517afa2e6", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"565d5d6578", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"whisker-565d5d6578-ctqdx", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.21.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calif289a956cd1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:41.446131 env[1470]: 2025-08-13 00:05:41.382 [INFO][3763] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.129/32] ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Namespace="calico-system" Pod="whisker-565d5d6578-ctqdx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" Aug 13 00:05:41.446131 env[1470]: 2025-08-13 00:05:41.382 [INFO][3763] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif289a956cd1 ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Namespace="calico-system" Pod="whisker-565d5d6578-ctqdx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" Aug 13 00:05:41.446131 env[1470]: 2025-08-13 00:05:41.426 [INFO][3763] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Namespace="calico-system" Pod="whisker-565d5d6578-ctqdx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" Aug 13 00:05:41.446131 env[1470]: 2025-08-13 00:05:41.427 [INFO][3763] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Namespace="calico-system" Pod="whisker-565d5d6578-ctqdx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0", GenerateName:"whisker-565d5d6578-", Namespace:"calico-system", SelfLink:"", UID:"dd95f81c-b972-4941-9cf4-faf517afa2e6", ResourceVersion:"943", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"565d5d6578", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6", Pod:"whisker-565d5d6578-ctqdx", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.21.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calif289a956cd1", MAC:"66:87:33:03:36:fa", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:41.446131 env[1470]: 2025-08-13 00:05:41.443 [INFO][3763] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6" Namespace="calico-system" Pod="whisker-565d5d6578-ctqdx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--565d5d6578--ctqdx-eth0" Aug 13 00:05:41.453000 audit[3850]: AVC avc: denied { write } for pid=3850 comm="tee" name="fd" dev="proc" ino=25831 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:05:41.453000 audit[3850]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd15397c1 a2=241 a3=1b6 items=1 ppid=3791 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.453000 audit: CWD cwd="/etc/service/enabled/cni/log" Aug 13 00:05:41.453000 audit: PATH item=0 name="/dev/fd/63" inode=25814 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:05:41.453000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:05:41.459000 audit[3854]: AVC avc: denied { write } for pid=3854 comm="tee" name="fd" dev="proc" ino=25462 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:05:41.459000 audit[3854]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd830b7af a2=241 a3=1b6 items=1 ppid=3801 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.459000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Aug 13 00:05:41.459000 audit: PATH item=0 name="/dev/fd/63" inode=25442 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:05:41.459000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:05:41.463000 audit[3859]: AVC avc: denied { write } for pid=3859 comm="tee" name="fd" dev="proc" ino=25468 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:05:41.463000 audit[3859]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc45327b0 a2=241 a3=1b6 items=1 ppid=3793 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.463000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Aug 13 00:05:41.463000 audit: PATH item=0 name="/dev/fd/63" inode=25828 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:05:41.463000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:05:41.472000 audit[3868]: AVC avc: denied { write } for pid=3868 comm="tee" name="fd" dev="proc" ino=25472 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:05:41.472000 audit[3868]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffecafb7bf a2=241 a3=1b6 items=1 ppid=3796 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.472000 audit: CWD cwd="/etc/service/enabled/felix/log" Aug 13 00:05:41.472000 audit: PATH item=0 name="/dev/fd/63" inode=25465 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:05:41.472000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:05:41.475000 audit[3871]: AVC avc: denied { write } for pid=3871 comm="tee" name="fd" dev="proc" ino=25476 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Aug 13 00:05:41.475000 audit[3871]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe69267bf a2=241 a3=1b6 items=1 ppid=3806 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.475000 audit: CWD cwd="/etc/service/enabled/bird6/log" Aug 13 00:05:41.475000 audit: PATH item=0 name="/dev/fd/63" inode=25833 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Aug 13 00:05:41.475000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Aug 13 00:05:41.599277 kubelet[2482]: I0813 00:05:41.599217 2482 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="b74d3bfc-4f89-48d9-aad9-0aab058e613f" path="/var/lib/kubelet/pods/b74d3bfc-4f89-48d9-aad9-0aab058e613f/volumes" Aug 13 00:05:41.728000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.728000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.728000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.728000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.728000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.728000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.728000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.728000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.728000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.728000 audit: BPF prog-id=140 op=LOAD Aug 13 00:05:41.728000 audit[3900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd05e0388 a2=98 a3=ffffd05e0378 items=0 ppid=3805 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.728000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:05:41.729000 audit: BPF prog-id=140 op=UNLOAD Aug 13 00:05:41.729000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.729000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.729000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.729000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.729000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.729000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.729000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.729000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.729000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.729000 audit: BPF prog-id=141 op=LOAD Aug 13 00:05:41.729000 audit[3900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd05e0238 a2=74 a3=95 items=0 ppid=3805 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.729000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:05:41.730000 audit: BPF prog-id=141 op=UNLOAD Aug 13 00:05:41.730000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.730000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.730000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.730000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.730000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.730000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.730000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.730000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.730000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.730000 audit: BPF prog-id=142 op=LOAD Aug 13 00:05:41.730000 audit[3900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd05e0268 a2=40 a3=ffffd05e0298 items=0 ppid=3805 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.730000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:05:41.731000 audit: BPF prog-id=142 op=UNLOAD Aug 13 00:05:41.731000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.731000 audit[3900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd05e0380 a2=50 a3=0 items=0 ppid=3805 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.731000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Aug 13 00:05:41.745000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.745000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.745000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.745000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.745000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.745000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.745000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.745000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.745000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.745000 audit: BPF prog-id=143 op=LOAD Aug 13 00:05:41.745000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe60784c8 a2=98 a3=ffffe60784b8 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.745000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.746000 audit: BPF prog-id=143 op=UNLOAD Aug 13 00:05:41.747000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.747000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.747000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.747000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.747000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.747000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.747000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.747000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.747000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.747000 audit: BPF prog-id=144 op=LOAD Aug 13 00:05:41.747000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe6078158 a2=74 a3=95 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.747000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.748000 audit: BPF prog-id=144 op=UNLOAD Aug 13 00:05:41.748000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.748000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.748000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.748000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.748000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.748000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.748000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.748000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.748000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.748000 audit: BPF prog-id=145 op=LOAD Aug 13 00:05:41.748000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe60781b8 a2=94 a3=2 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.748000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.748000 audit: BPF prog-id=145 op=UNLOAD Aug 13 00:05:41.849000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.849000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.849000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.849000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.849000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.849000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.849000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.849000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.849000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.849000 audit: BPF prog-id=146 op=LOAD Aug 13 00:05:41.849000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe6078178 a2=40 a3=ffffe60781a8 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.849000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.850000 audit: BPF prog-id=146 op=UNLOAD Aug 13 00:05:41.850000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.850000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe6078290 a2=50 a3=0 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.850000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.859000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.859000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe60781e8 a2=28 a3=ffffe6078318 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.859000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.859000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.859000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6078218 a2=28 a3=ffffe6078348 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.859000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.860000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.860000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe60780c8 a2=28 a3=ffffe60781f8 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.860000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.860000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.860000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6078238 a2=28 a3=ffffe6078368 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.860000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.860000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.860000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6078218 a2=28 a3=ffffe6078348 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.860000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.860000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.860000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6078208 a2=28 a3=ffffe6078338 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.860000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.860000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.860000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6078238 a2=28 a3=ffffe6078368 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.860000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.860000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.860000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6078218 a2=28 a3=ffffe6078348 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.860000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.860000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.860000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6078238 a2=28 a3=ffffe6078368 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.860000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.860000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.860000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe6078208 a2=28 a3=ffffe6078338 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.860000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe6078288 a2=28 a3=ffffe60783c8 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.861000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe6077fc0 a2=50 a3=0 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.861000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit: BPF prog-id=147 op=LOAD Aug 13 00:05:41.861000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe6077fc8 a2=94 a3=5 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.861000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.861000 audit: BPF prog-id=147 op=UNLOAD Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe60780d0 a2=50 a3=0 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.861000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffe6078218 a2=4 a3=3 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.861000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.861000 audit[3906]: AVC avc: denied { confidentiality } for pid=3906 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:05:41.861000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe60781f8 a2=94 a3=6 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.861000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.863000 audit[3906]: AVC avc: denied { confidentiality } for pid=3906 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:05:41.863000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe60779c8 a2=94 a3=83 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.863000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.864000 audit[3906]: AVC avc: denied { confidentiality } for pid=3906 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:05:41.864000 audit[3906]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe60779c8 a2=94 a3=83 items=0 ppid=3805 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.864000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit: BPF prog-id=148 op=LOAD Aug 13 00:05:41.871000 audit[3910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffed0444b8 a2=98 a3=ffffed0444a8 items=0 ppid=3805 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.871000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 00:05:41.871000 audit: BPF prog-id=148 op=UNLOAD Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit: BPF prog-id=149 op=LOAD Aug 13 00:05:41.871000 audit[3910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffed044368 a2=74 a3=95 items=0 ppid=3805 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.871000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 00:05:41.871000 audit: BPF prog-id=149 op=UNLOAD Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { perfmon } for pid=3910 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit[3910]: AVC avc: denied { bpf } for pid=3910 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.871000 audit: BPF prog-id=150 op=LOAD Aug 13 00:05:41.871000 audit[3910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffed044398 a2=40 a3=ffffed0443c8 items=0 ppid=3805 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.871000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Aug 13 00:05:41.871000 audit: BPF prog-id=150 op=UNLOAD Aug 13 00:05:41.914519 env[1470]: time="2025-08-13T00:05:41.914456309Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:41.914748 env[1470]: time="2025-08-13T00:05:41.914495670Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:41.914748 env[1470]: time="2025-08-13T00:05:41.914524070Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:41.914748 env[1470]: time="2025-08-13T00:05:41.914658712Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6 pid=3928 runtime=io.containerd.runc.v2 Aug 13 00:05:41.932946 systemd[1]: Started cri-containerd-17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6.scope. Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.945000 audit: BPF prog-id=151 op=LOAD Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3928 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633266646262633065396535373638623533393963393362373334 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3928 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633266646262633065396535373638623533393963393362373334 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit: BPF prog-id=152 op=LOAD Aug 13 00:05:41.946000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3928 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633266646262633065396535373638623533393963393362373334 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit: BPF prog-id=153 op=LOAD Aug 13 00:05:41.946000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3928 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633266646262633065396535373638623533393963393362373334 Aug 13 00:05:41.946000 audit: BPF prog-id=153 op=UNLOAD Aug 13 00:05:41.946000 audit: BPF prog-id=152 op=UNLOAD Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:41.946000 audit: BPF prog-id=154 op=LOAD Aug 13 00:05:41.946000 audit[3940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3928 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:41.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633266646262633065396535373638623533393963393362373334 Aug 13 00:05:41.966066 env[1470]: time="2025-08-13T00:05:41.966029033Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-565d5d6578-ctqdx,Uid:dd95f81c-b972-4941-9cf4-faf517afa2e6,Namespace:calico-system,Attempt:0,} returns sandbox id \"17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6\"" Aug 13 00:05:41.967880 env[1470]: time="2025-08-13T00:05:41.967853658Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Aug 13 00:05:42.139357 systemd-networkd[1624]: vxlan.calico: Link UP Aug 13 00:05:42.139365 systemd-networkd[1624]: vxlan.calico: Gained carrier Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit: BPF prog-id=155 op=LOAD Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd5e3c858 a2=98 a3=ffffd5e3c848 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit: BPF prog-id=155 op=UNLOAD Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit: BPF prog-id=156 op=LOAD Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd5e3c538 a2=74 a3=95 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit: BPF prog-id=156 op=UNLOAD Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit: BPF prog-id=157 op=LOAD Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd5e3c598 a2=94 a3=2 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit: BPF prog-id=157 op=UNLOAD Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd5e3c5c8 a2=28 a3=ffffd5e3c6f8 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5e3c5f8 a2=28 a3=ffffd5e3c728 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5e3c4a8 a2=28 a3=ffffd5e3c5d8 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd5e3c618 a2=28 a3=ffffd5e3c748 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd5e3c5f8 a2=28 a3=ffffd5e3c728 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd5e3c5e8 a2=28 a3=ffffd5e3c718 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd5e3c618 a2=28 a3=ffffd5e3c748 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5e3c5f8 a2=28 a3=ffffd5e3c728 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5e3c618 a2=28 a3=ffffd5e3c748 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd5e3c5e8 a2=28 a3=ffffd5e3c718 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd5e3c668 a2=28 a3=ffffd5e3c7a8 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.161000 audit: BPF prog-id=158 op=LOAD Aug 13 00:05:42.161000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd5e3c488 a2=40 a3=ffffd5e3c4b8 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.161000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.161000 audit: BPF prog-id=158 op=UNLOAD Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffd5e3c4b0 a2=50 a3=0 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.162000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffd5e3c4b0 a2=50 a3=0 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.162000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit: BPF prog-id=159 op=LOAD Aug 13 00:05:42.162000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd5e3bc18 a2=94 a3=2 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.162000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.162000 audit: BPF prog-id=159 op=UNLOAD Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.162000 audit: BPF prog-id=160 op=LOAD Aug 13 00:05:42.162000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd5e3bda8 a2=94 a3=30 items=0 ppid=3805 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.162000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Aug 13 00:05:42.172000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.172000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.172000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.172000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.172000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.172000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.172000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.172000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.172000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.172000 audit: BPF prog-id=161 op=LOAD Aug 13 00:05:42.172000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcf64cbc8 a2=98 a3=ffffcf64cbb8 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.172000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.172000 audit: BPF prog-id=161 op=UNLOAD Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit: BPF prog-id=162 op=LOAD Aug 13 00:05:42.173000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcf64c858 a2=74 a3=95 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.173000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.173000 audit: BPF prog-id=162 op=UNLOAD Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.173000 audit: BPF prog-id=163 op=LOAD Aug 13 00:05:42.173000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcf64c8b8 a2=94 a3=2 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.173000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.173000 audit: BPF prog-id=163 op=UNLOAD Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit: BPF prog-id=164 op=LOAD Aug 13 00:05:42.271000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcf64c878 a2=40 a3=ffffcf64c8a8 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.271000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.271000 audit: BPF prog-id=164 op=UNLOAD Aug 13 00:05:42.271000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.271000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffcf64c990 a2=50 a3=0 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.271000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcf64c8e8 a2=28 a3=ffffcf64ca18 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf64c918 a2=28 a3=ffffcf64ca48 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf64c7c8 a2=28 a3=ffffcf64c8f8 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcf64c938 a2=28 a3=ffffcf64ca68 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcf64c918 a2=28 a3=ffffcf64ca48 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcf64c908 a2=28 a3=ffffcf64ca38 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcf64c938 a2=28 a3=ffffcf64ca68 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf64c918 a2=28 a3=ffffcf64ca48 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf64c938 a2=28 a3=ffffcf64ca68 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf64c908 a2=28 a3=ffffcf64ca38 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcf64c988 a2=28 a3=ffffcf64cac8 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcf64c6c0 a2=50 a3=0 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit: BPF prog-id=165 op=LOAD Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcf64c6c8 a2=94 a3=5 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit: BPF prog-id=165 op=UNLOAD Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcf64c7d0 a2=50 a3=0 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffcf64c918 a2=4 a3=3 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.279000 audit[3984]: AVC avc: denied { confidentiality } for pid=3984 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:05:42.279000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcf64c8f8 a2=94 a3=6 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { confidentiality } for pid=3984 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Aug 13 00:05:42.280000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcf64c0c8 a2=94 a3=83 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.280000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcf64c0c8 a2=94 a3=83 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.280000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcf64db08 a2=10 a3=ffffcf64dbf8 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.280000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcf64d9c8 a2=10 a3=ffffcf64dab8 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.280000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcf64d938 a2=10 a3=ffffcf64dab8 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.280000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.280000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:42.280000 audit[3984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffcf64d938 a2=10 a3=ffffcf64dab8 items=0 ppid=3805 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.280000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Aug 13 00:05:42.289000 audit: BPF prog-id=160 op=UNLOAD Aug 13 00:05:42.468000 audit[4012]: NETFILTER_CFG table=mangle:104 family=2 entries=16 op=nft_register_chain pid=4012 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:42.468000 audit[4012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffce751cc0 a2=0 a3=ffff96094fa8 items=0 ppid=3805 pid=4012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.468000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:42.472000 audit[4010]: NETFILTER_CFG table=nat:105 family=2 entries=15 op=nft_register_chain pid=4010 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:42.472000 audit[4010]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=fffffed70530 a2=0 a3=ffffb16c1fa8 items=0 ppid=3805 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.472000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:42.515000 audit[4009]: NETFILTER_CFG table=raw:106 family=2 entries=21 op=nft_register_chain pid=4009 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:42.515000 audit[4009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffdcd27f20 a2=0 a3=ffff84e20fa8 items=0 ppid=3805 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.515000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:42.524000 audit[4014]: NETFILTER_CFG table=filter:107 family=2 entries=94 op=nft_register_chain pid=4014 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:42.524000 audit[4014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=ffffe0228050 a2=0 a3=ffffb8f85fa8 items=0 ppid=3805 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.524000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:42.597213 env[1470]: time="2025-08-13T00:05:42.597170333Z" level=info msg="StopPodSandbox for \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\"" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.643 [INFO][4035] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.643 [INFO][4035] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" iface="eth0" netns="/var/run/netns/cni-1c431a56-057a-ff68-76ab-5a3391efd6f7" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.643 [INFO][4035] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" iface="eth0" netns="/var/run/netns/cni-1c431a56-057a-ff68-76ab-5a3391efd6f7" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.643 [INFO][4035] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" iface="eth0" netns="/var/run/netns/cni-1c431a56-057a-ff68-76ab-5a3391efd6f7" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.643 [INFO][4035] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.643 [INFO][4035] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.662 [INFO][4042] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" HandleID="k8s-pod-network.0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.662 [INFO][4042] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.664 [INFO][4042] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.673 [WARNING][4042] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" HandleID="k8s-pod-network.0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.673 [INFO][4042] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" HandleID="k8s-pod-network.0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.674 [INFO][4042] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:42.677907 env[1470]: 2025-08-13 00:05:42.676 [INFO][4035] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:42.680632 systemd[1]: run-netns-cni\x2d1c431a56\x2d057a\x2dff68\x2d76ab\x2d5a3391efd6f7.mount: Deactivated successfully. Aug 13 00:05:42.681108 env[1470]: time="2025-08-13T00:05:42.681075870Z" level=info msg="TearDown network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\" successfully" Aug 13 00:05:42.681502 env[1470]: time="2025-08-13T00:05:42.681232872Z" level=info msg="StopPodSandbox for \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\" returns successfully" Aug 13 00:05:42.682409 env[1470]: time="2025-08-13T00:05:42.682370447Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5bbbfc55d5-c5zbr,Uid:03d26822-c6e0-4d53-995b-0c48022b6e2b,Namespace:calico-apiserver,Attempt:1,}" Aug 13 00:05:42.959856 systemd-networkd[1624]: cali823512fb2c7: Link UP Aug 13 00:05:42.960385 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali823512fb2c7: link becomes ready Aug 13 00:05:42.960041 systemd-networkd[1624]: cali823512fb2c7: Gained carrier Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.885 [INFO][4048] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0 calico-apiserver-5bbbfc55d5- calico-apiserver 03d26822-c6e0-4d53-995b-0c48022b6e2b 955 0 2025-08-13 00:05:13 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5bbbfc55d5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab calico-apiserver-5bbbfc55d5-c5zbr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali823512fb2c7 [] [] }} ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-c5zbr" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.885 [INFO][4048] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-c5zbr" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.910 [INFO][4060] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" HandleID="k8s-pod-network.a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.910 [INFO][4060] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" HandleID="k8s-pod-network.a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3640), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"calico-apiserver-5bbbfc55d5-c5zbr", "timestamp":"2025-08-13 00:05:42.910744833 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.911 [INFO][4060] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.911 [INFO][4060] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.911 [INFO][4060] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.919 [INFO][4060] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.923 [INFO][4060] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.927 [INFO][4060] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.928 [INFO][4060] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.930 [INFO][4060] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.930 [INFO][4060] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.932 [INFO][4060] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2 Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.938 [INFO][4060] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.947 [INFO][4060] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.130/26] block=192.168.21.128/26 handle="k8s-pod-network.a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.947 [INFO][4060] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.130/26] handle="k8s-pod-network.a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.947 [INFO][4060] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:42.979855 env[1470]: 2025-08-13 00:05:42.947 [INFO][4060] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.130/26] IPv6=[] ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" HandleID="k8s-pod-network.a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.980428 env[1470]: 2025-08-13 00:05:42.949 [INFO][4048] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-c5zbr" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0", GenerateName:"calico-apiserver-5bbbfc55d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"03d26822-c6e0-4d53-995b-0c48022b6e2b", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5bbbfc55d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"calico-apiserver-5bbbfc55d5-c5zbr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali823512fb2c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:42.980428 env[1470]: 2025-08-13 00:05:42.949 [INFO][4048] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.130/32] ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-c5zbr" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.980428 env[1470]: 2025-08-13 00:05:42.949 [INFO][4048] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali823512fb2c7 ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-c5zbr" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.980428 env[1470]: 2025-08-13 00:05:42.960 [INFO][4048] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-c5zbr" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.980428 env[1470]: 2025-08-13 00:05:42.965 [INFO][4048] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-c5zbr" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0", GenerateName:"calico-apiserver-5bbbfc55d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"03d26822-c6e0-4d53-995b-0c48022b6e2b", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5bbbfc55d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2", Pod:"calico-apiserver-5bbbfc55d5-c5zbr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali823512fb2c7", MAC:"d6:b3:c8:d7:bf:08", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:42.980428 env[1470]: 2025-08-13 00:05:42.977 [INFO][4048] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-c5zbr" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:42.990000 audit[4075]: NETFILTER_CFG table=filter:108 family=2 entries=50 op=nft_register_chain pid=4075 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:42.990000 audit[4075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffc4a54b20 a2=0 a3=ffff9210dfa8 items=0 ppid=3805 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:42.990000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:43.018950 env[1470]: time="2025-08-13T00:05:43.018864443Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:43.018950 env[1470]: time="2025-08-13T00:05:43.018918724Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:43.018950 env[1470]: time="2025-08-13T00:05:43.018930564Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:43.019322 env[1470]: time="2025-08-13T00:05:43.019273288Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2 pid=4085 runtime=io.containerd.runc.v2 Aug 13 00:05:43.034189 systemd[1]: Started cri-containerd-a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2.scope. Aug 13 00:05:43.039333 systemd[1]: run-containerd-runc-k8s.io-a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2-runc.rkrwxX.mount: Deactivated successfully. Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.056000 audit: BPF prog-id=166 op=LOAD Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000197b38 a2=10 a3=0 items=0 ppid=4085 pid=4094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:43.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373763376238353461626133316363626239383030306433613132 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001975a0 a2=3c a3=0 items=0 ppid=4085 pid=4094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:43.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373763376238353461626133316363626239383030306433613132 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit: BPF prog-id=167 op=LOAD Aug 13 00:05:43.057000 audit[4094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001978e0 a2=78 a3=0 items=0 ppid=4085 pid=4094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:43.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373763376238353461626133316363626239383030306433613132 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit: BPF prog-id=168 op=LOAD Aug 13 00:05:43.057000 audit[4094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000197670 a2=78 a3=0 items=0 ppid=4085 pid=4094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:43.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373763376238353461626133316363626239383030306433613132 Aug 13 00:05:43.057000 audit: BPF prog-id=168 op=UNLOAD Aug 13 00:05:43.057000 audit: BPF prog-id=167 op=UNLOAD Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { perfmon } for pid=4094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit[4094]: AVC avc: denied { bpf } for pid=4094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:43.057000 audit: BPF prog-id=169 op=LOAD Aug 13 00:05:43.057000 audit[4094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000197b40 a2=78 a3=0 items=0 ppid=4085 pid=4094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:43.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373763376238353461626133316363626239383030306433613132 Aug 13 00:05:43.086438 env[1470]: time="2025-08-13T00:05:43.086396514Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5bbbfc55d5-c5zbr,Uid:03d26822-c6e0-4d53-995b-0c48022b6e2b,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2\"" Aug 13 00:05:43.462462 systemd-networkd[1624]: calif289a956cd1: Gained IPv6LL Aug 13 00:05:43.599699 env[1470]: time="2025-08-13T00:05:43.599651131Z" level=info msg="StopPodSandbox for \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\"" Aug 13 00:05:43.655007 systemd-networkd[1624]: vxlan.calico: Gained IPv6LL Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.679 [INFO][4132] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.679 [INFO][4132] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" iface="eth0" netns="/var/run/netns/cni-282c81a0-c580-a960-4a1d-9065f8ffd297" Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.680 [INFO][4132] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" iface="eth0" netns="/var/run/netns/cni-282c81a0-c580-a960-4a1d-9065f8ffd297" Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.680 [INFO][4132] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" iface="eth0" netns="/var/run/netns/cni-282c81a0-c580-a960-4a1d-9065f8ffd297" Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.680 [INFO][4132] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.680 [INFO][4132] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.709 [INFO][4139] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" HandleID="k8s-pod-network.a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.709 [INFO][4139] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.709 [INFO][4139] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.719 [WARNING][4139] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" HandleID="k8s-pod-network.a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.719 [INFO][4139] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" HandleID="k8s-pod-network.a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.720 [INFO][4139] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:43.724077 env[1470]: 2025-08-13 00:05:43.722 [INFO][4132] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:43.726620 systemd[1]: run-netns-cni\x2d282c81a0\x2dc580\x2da960\x2d4a1d\x2d9065f8ffd297.mount: Deactivated successfully. Aug 13 00:05:43.727903 env[1470]: time="2025-08-13T00:05:43.727869144Z" level=info msg="TearDown network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\" successfully" Aug 13 00:05:43.728031 env[1470]: time="2025-08-13T00:05:43.727987785Z" level=info msg="StopPodSandbox for \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\" returns successfully" Aug 13 00:05:43.728834 env[1470]: time="2025-08-13T00:05:43.728807236Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9zbtc,Uid:201b1d82-04f8-4f80-9cbd-95654fdd542e,Namespace:kube-system,Attempt:1,}" Aug 13 00:05:43.919605 env[1470]: time="2025-08-13T00:05:43.919541215Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:43.981145 env[1470]: time="2025-08-13T00:05:43.981022727Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:43.997783 env[1470]: time="2025-08-13T00:05:43.997735423Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:44.009499 env[1470]: time="2025-08-13T00:05:44.009434452Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:44.010540 env[1470]: time="2025-08-13T00:05:44.010508906Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Aug 13 00:05:44.014711 env[1470]: time="2025-08-13T00:05:44.014647358Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 00:05:44.027094 env[1470]: time="2025-08-13T00:05:44.027059476Z" level=info msg="CreateContainer within sandbox \"17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Aug 13 00:05:44.101387 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:05:44.101903 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali49540aaddd0: link becomes ready Aug 13 00:05:44.097574 systemd-networkd[1624]: cali49540aaddd0: Link UP Aug 13 00:05:44.102305 systemd-networkd[1624]: cali49540aaddd0: Gained carrier Aug 13 00:05:44.125742 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4104791361.mount: Deactivated successfully. Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.011 [INFO][4145] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0 coredns-674b8bbfcf- kube-system 201b1d82-04f8-4f80-9cbd-95654fdd542e 962 0 2025-08-13 00:04:55 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab coredns-674b8bbfcf-9zbtc eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali49540aaddd0 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zbtc" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.013 [INFO][4145] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zbtc" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.044 [INFO][4158] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" HandleID="k8s-pod-network.d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.044 [INFO][4158] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" HandleID="k8s-pod-network.d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c1060), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"coredns-674b8bbfcf-9zbtc", "timestamp":"2025-08-13 00:05:44.044392777 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.044 [INFO][4158] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.044 [INFO][4158] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.044 [INFO][4158] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.059 [INFO][4158] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.063 [INFO][4158] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.066 [INFO][4158] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.068 [INFO][4158] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.070 [INFO][4158] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.070 [INFO][4158] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.071 [INFO][4158] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.077 [INFO][4158] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.085 [INFO][4158] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.131/26] block=192.168.21.128/26 handle="k8s-pod-network.d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.085 [INFO][4158] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.131/26] handle="k8s-pod-network.d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.085 [INFO][4158] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:44.130067 env[1470]: 2025-08-13 00:05:44.085 [INFO][4158] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.131/26] IPv6=[] ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" HandleID="k8s-pod-network.d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:44.131171 env[1470]: 2025-08-13 00:05:44.087 [INFO][4145] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zbtc" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"201b1d82-04f8-4f80-9cbd-95654fdd542e", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 4, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"coredns-674b8bbfcf-9zbtc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.21.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali49540aaddd0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:44.131171 env[1470]: 2025-08-13 00:05:44.087 [INFO][4145] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.131/32] ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zbtc" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:44.131171 env[1470]: 2025-08-13 00:05:44.087 [INFO][4145] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali49540aaddd0 ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zbtc" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:44.131171 env[1470]: 2025-08-13 00:05:44.105 [INFO][4145] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zbtc" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:44.131171 env[1470]: 2025-08-13 00:05:44.106 [INFO][4145] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zbtc" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"201b1d82-04f8-4f80-9cbd-95654fdd542e", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 4, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d", Pod:"coredns-674b8bbfcf-9zbtc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.21.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali49540aaddd0", MAC:"72:ff:35:0b:66:63", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:44.131171 env[1470]: 2025-08-13 00:05:44.124 [INFO][4145] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zbtc" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:44.139000 audit[4173]: NETFILTER_CFG table=filter:109 family=2 entries=46 op=nft_register_chain pid=4173 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:44.139000 audit[4173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23740 a0=3 a1=ffffcba36190 a2=0 a3=ffff8a715fa8 items=0 ppid=3805 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.139000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:44.171188 env[1470]: time="2025-08-13T00:05:44.171126548Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:44.171188 env[1470]: time="2025-08-13T00:05:44.171164229Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:44.172148 env[1470]: time="2025-08-13T00:05:44.171174229Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:44.172148 env[1470]: time="2025-08-13T00:05:44.171398071Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d pid=4182 runtime=io.containerd.runc.v2 Aug 13 00:05:44.195328 systemd[1]: Started cri-containerd-d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d.scope. Aug 13 00:05:44.197743 env[1470]: time="2025-08-13T00:05:44.197701566Z" level=info msg="CreateContainer within sandbox \"17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"29df952ea62280ae6be9b0c603c78046c7603f86be64b06462f2f632e791788f\"" Aug 13 00:05:44.198415 env[1470]: time="2025-08-13T00:05:44.198206492Z" level=info msg="StartContainer for \"29df952ea62280ae6be9b0c603c78046c7603f86be64b06462f2f632e791788f\"" Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.219000 audit: BPF prog-id=170 op=LOAD Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4182 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436373439623566396264386562386431313465636437356166616434 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4182 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436373439623566396264386562386431313465636437356166616434 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit: BPF prog-id=171 op=LOAD Aug 13 00:05:44.220000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4182 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436373439623566396264386562386431313465636437356166616434 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit: BPF prog-id=172 op=LOAD Aug 13 00:05:44.220000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4182 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436373439623566396264386562386431313465636437356166616434 Aug 13 00:05:44.220000 audit: BPF prog-id=172 op=UNLOAD Aug 13 00:05:44.220000 audit: BPF prog-id=171 op=UNLOAD Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.223166 systemd[1]: Started cri-containerd-29df952ea62280ae6be9b0c603c78046c7603f86be64b06462f2f632e791788f.scope. Aug 13 00:05:44.220000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.220000 audit: BPF prog-id=173 op=LOAD Aug 13 00:05:44.220000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4182 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436373439623566396264386562386431313465636437356166616434 Aug 13 00:05:44.230369 systemd-networkd[1624]: cali823512fb2c7: Gained IPv6LL Aug 13 00:05:44.251916 env[1470]: time="2025-08-13T00:05:44.251802534Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9zbtc,Uid:201b1d82-04f8-4f80-9cbd-95654fdd542e,Namespace:kube-system,Attempt:1,} returns sandbox id \"d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d\"" Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.255000 audit: BPF prog-id=174 op=LOAD Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3928 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646639353265613632323830616536626539623063363033633738 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3928 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646639353265613632323830616536626539623063363033633738 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit: BPF prog-id=175 op=LOAD Aug 13 00:05:44.256000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3928 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646639353265613632323830616536626539623063363033633738 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.256000 audit: BPF prog-id=176 op=LOAD Aug 13 00:05:44.256000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3928 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646639353265613632323830616536626539623063363033633738 Aug 13 00:05:44.256000 audit: BPF prog-id=176 op=UNLOAD Aug 13 00:05:44.257000 audit: BPF prog-id=175 op=UNLOAD Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.257000 audit: BPF prog-id=177 op=LOAD Aug 13 00:05:44.257000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3928 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239646639353265613632323830616536626539623063363033633738 Aug 13 00:05:44.278138 env[1470]: time="2025-08-13T00:05:44.278093068Z" level=info msg="CreateContainer within sandbox \"d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 00:05:44.299000 audit[4230]: AVC avc: denied { search } for pid=4230 comm="nginx" name="crypto" dev="proc" ino=26616 scontext=system_u:system_r:svirt_lxc_net_t:s0:c241,c534 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Aug 13 00:05:44.299000 audit[4230]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffbdd2c958 a2=0 a3=0 items=0 ppid=3928 pid=4230 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c241,c534 key=(null) Aug 13 00:05:44.299000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Aug 13 00:05:44.302441 env[1470]: time="2025-08-13T00:05:44.302408537Z" level=info msg="StartContainer for \"29df952ea62280ae6be9b0c603c78046c7603f86be64b06462f2f632e791788f\" returns successfully" Aug 13 00:05:44.423390 env[1470]: time="2025-08-13T00:05:44.423328555Z" level=info msg="CreateContainer within sandbox \"d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"169fb876a45353bf006ca3e41691d328ecd2bc3aef84f61184114c319919996d\"" Aug 13 00:05:44.424308 env[1470]: time="2025-08-13T00:05:44.424269607Z" level=info msg="StartContainer for \"169fb876a45353bf006ca3e41691d328ecd2bc3aef84f61184114c319919996d\"" Aug 13 00:05:44.437473 systemd[1]: Started cri-containerd-169fb876a45353bf006ca3e41691d328ecd2bc3aef84f61184114c319919996d.scope. Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.456948 kernel: kauditd_printk_skb: 833 callbacks suppressed Aug 13 00:05:44.457051 kernel: audit: type=1400 audit(1755043544.450:1206): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.489311 kernel: audit: type=1400 audit(1755043544.450:1207): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.505911 kernel: audit: type=1400 audit(1755043544.450:1208): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.524514 kernel: audit: type=1400 audit(1755043544.450:1209): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.524768 kernel: audit: type=1400 audit(1755043544.450:1210): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.556628 kernel: audit: type=1400 audit(1755043544.450:1211): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.573137 kernel: audit: type=1400 audit(1755043544.450:1212): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.589825 kernel: audit: type=1400 audit(1755043544.450:1213): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.597258 env[1470]: time="2025-08-13T00:05:44.597219286Z" level=info msg="StopPodSandbox for \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\"" Aug 13 00:05:44.606538 kernel: audit: type=1400 audit(1755043544.450:1214): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.608509 env[1470]: time="2025-08-13T00:05:44.597502289Z" level=info msg="StopPodSandbox for \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\"" Aug 13 00:05:44.623927 kernel: audit: type=1400 audit(1755043544.450:1215): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit: BPF prog-id=178 op=LOAD Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4182 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396662383736613435333533626630303663613365343136393164 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4182 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396662383736613435333533626630303663613365343136393164 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.450000 audit: BPF prog-id=179 op=LOAD Aug 13 00:05:44.450000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4182 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396662383736613435333533626630303663613365343136393164 Aug 13 00:05:44.455000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.455000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.455000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.455000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.455000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.455000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.455000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.455000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.455000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.455000 audit: BPF prog-id=180 op=LOAD Aug 13 00:05:44.455000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4182 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396662383736613435333533626630303663613365343136393164 Aug 13 00:05:44.471000 audit: BPF prog-id=180 op=UNLOAD Aug 13 00:05:44.471000 audit: BPF prog-id=179 op=UNLOAD Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:44.471000 audit: BPF prog-id=181 op=LOAD Aug 13 00:05:44.471000 audit[4261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4182 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136396662383736613435333533626630303663613365343136393164 Aug 13 00:05:44.589000 audit[4271]: AVC avc: denied { getattr } for pid=4271 comm="coredns" path="cgroup:[4026532713]" dev="nsfs" ino=4026532713 scontext=system_u:system_r:svirt_lxc_net_t:s0:c148,c669 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 00:05:44.589000 audit[4271]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056810 a2=400014c578 a3=0 items=0 ppid=4182 pid=4271 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c148,c669 key=(null) Aug 13 00:05:44.589000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 00:05:44.635650 env[1470]: time="2025-08-13T00:05:44.635584613Z" level=info msg="StartContainer for \"169fb876a45353bf006ca3e41691d328ecd2bc3aef84f61184114c319919996d\" returns successfully" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.688 [INFO][4308] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.688 [INFO][4308] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" iface="eth0" netns="/var/run/netns/cni-8732c452-257b-8305-ae1c-380933416d0c" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.688 [INFO][4308] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" iface="eth0" netns="/var/run/netns/cni-8732c452-257b-8305-ae1c-380933416d0c" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.689 [INFO][4308] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" iface="eth0" netns="/var/run/netns/cni-8732c452-257b-8305-ae1c-380933416d0c" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.689 [INFO][4308] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.689 [INFO][4308] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.720 [INFO][4321] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" HandleID="k8s-pod-network.bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.720 [INFO][4321] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.720 [INFO][4321] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.733 [WARNING][4321] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" HandleID="k8s-pod-network.bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.733 [INFO][4321] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" HandleID="k8s-pod-network.bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.735 [INFO][4321] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:44.737428 env[1470]: 2025-08-13 00:05:44.736 [INFO][4308] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:44.738024 env[1470]: time="2025-08-13T00:05:44.737991275Z" level=info msg="TearDown network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\" successfully" Aug 13 00:05:44.738108 env[1470]: time="2025-08-13T00:05:44.738092917Z" level=info msg="StopPodSandbox for \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\" returns successfully" Aug 13 00:05:44.738956 env[1470]: time="2025-08-13T00:05:44.738910367Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-db67c69c4-f8bkz,Uid:1dd3d88d-3f62-4e35-8832-966cbdf918e8,Namespace:calico-apiserver,Attempt:1,}" Aug 13 00:05:44.778510 kubelet[2482]: I0813 00:05:44.778038 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-9zbtc" podStartSLOduration=49.778022104 podStartE2EDuration="49.778022104s" podCreationTimestamp="2025-08-13 00:04:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:05:44.777608779 +0000 UTC m=+55.286755845" watchObservedRunningTime="2025-08-13 00:05:44.778022104 +0000 UTC m=+55.287169170" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.704 [INFO][4312] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.704 [INFO][4312] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" iface="eth0" netns="/var/run/netns/cni-994256cc-b38c-d4cf-aa7f-52c568132c6f" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.704 [INFO][4312] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" iface="eth0" netns="/var/run/netns/cni-994256cc-b38c-d4cf-aa7f-52c568132c6f" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.704 [INFO][4312] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" iface="eth0" netns="/var/run/netns/cni-994256cc-b38c-d4cf-aa7f-52c568132c6f" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.704 [INFO][4312] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.704 [INFO][4312] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.752 [INFO][4327] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" HandleID="k8s-pod-network.a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.752 [INFO][4327] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.753 [INFO][4327] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.765 [WARNING][4327] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" HandleID="k8s-pod-network.a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.765 [INFO][4327] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" HandleID="k8s-pod-network.a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.769 [INFO][4327] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:44.783374 env[1470]: 2025-08-13 00:05:44.782 [INFO][4312] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:44.784196 env[1470]: time="2025-08-13T00:05:44.784148502Z" level=info msg="TearDown network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\" successfully" Aug 13 00:05:44.784334 env[1470]: time="2025-08-13T00:05:44.784315504Z" level=info msg="StopPodSandbox for \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\" returns successfully" Aug 13 00:05:44.785511 env[1470]: time="2025-08-13T00:05:44.785483759Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5s8h8,Uid:155955ac-e694-496e-8435-16aca9011621,Namespace:calico-system,Attempt:1,}" Aug 13 00:05:44.805000 audit[4335]: NETFILTER_CFG table=filter:110 family=2 entries=20 op=nft_register_rule pid=4335 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:44.805000 audit[4335]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe1fcd180 a2=0 a3=1 items=0 ppid=2589 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.805000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:44.811000 audit[4335]: NETFILTER_CFG table=nat:111 family=2 entries=14 op=nft_register_rule pid=4335 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:44.811000 audit[4335]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffe1fcd180 a2=0 a3=1 items=0 ppid=2589 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.811000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:44.825000 audit[4337]: NETFILTER_CFG table=filter:112 family=2 entries=17 op=nft_register_rule pid=4337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:44.825000 audit[4337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffdf1e88b0 a2=0 a3=1 items=0 ppid=2589 pid=4337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.825000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:44.831000 audit[4337]: NETFILTER_CFG table=nat:113 family=2 entries=35 op=nft_register_chain pid=4337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:44.831000 audit[4337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffdf1e88b0 a2=0 a3=1 items=0 ppid=2589 pid=4337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:44.831000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:45.025408 systemd[1]: run-containerd-runc-k8s.io-d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d-runc.kQtAnx.mount: Deactivated successfully. Aug 13 00:05:45.025498 systemd[1]: run-netns-cni\x2d8732c452\x2d257b\x2d8305\x2dae1c\x2d380933416d0c.mount: Deactivated successfully. Aug 13 00:05:45.025561 systemd[1]: run-netns-cni\x2d994256cc\x2db38c\x2dd4cf\x2daa7f\x2d52c568132c6f.mount: Deactivated successfully. Aug 13 00:05:45.160846 systemd-networkd[1624]: cali075463155a8: Link UP Aug 13 00:05:45.174869 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:05:45.174974 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali075463155a8: link becomes ready Aug 13 00:05:45.179640 systemd-networkd[1624]: cali075463155a8: Gained carrier Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.060 [INFO][4338] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0 calico-apiserver-db67c69c4- calico-apiserver 1dd3d88d-3f62-4e35-8832-966cbdf918e8 977 0 2025-08-13 00:05:11 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:db67c69c4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab calico-apiserver-db67c69c4-f8bkz eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali075463155a8 [] [] }} ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-f8bkz" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.060 [INFO][4338] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-f8bkz" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.096 [INFO][4352] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.096 [INFO][4352] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2ff0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"calico-apiserver-db67c69c4-f8bkz", "timestamp":"2025-08-13 00:05:45.096326695 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.096 [INFO][4352] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.096 [INFO][4352] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.097 [INFO][4352] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.109 [INFO][4352] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.117 [INFO][4352] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.126 [INFO][4352] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.128 [INFO][4352] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.130 [INFO][4352] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.130 [INFO][4352] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.131 [INFO][4352] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37 Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.137 [INFO][4352] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.147 [INFO][4352] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.132/26] block=192.168.21.128/26 handle="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.147 [INFO][4352] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.132/26] handle="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.147 [INFO][4352] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:45.199457 env[1470]: 2025-08-13 00:05:45.147 [INFO][4352] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.132/26] IPv6=[] ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:45.200016 env[1470]: 2025-08-13 00:05:45.149 [INFO][4338] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-f8bkz" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0", GenerateName:"calico-apiserver-db67c69c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1dd3d88d-3f62-4e35-8832-966cbdf918e8", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"db67c69c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"calico-apiserver-db67c69c4-f8bkz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali075463155a8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:45.200016 env[1470]: 2025-08-13 00:05:45.149 [INFO][4338] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.132/32] ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-f8bkz" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:45.200016 env[1470]: 2025-08-13 00:05:45.149 [INFO][4338] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali075463155a8 ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-f8bkz" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:45.200016 env[1470]: 2025-08-13 00:05:45.180 [INFO][4338] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-f8bkz" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:45.200016 env[1470]: 2025-08-13 00:05:45.181 [INFO][4338] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-f8bkz" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0", GenerateName:"calico-apiserver-db67c69c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1dd3d88d-3f62-4e35-8832-966cbdf918e8", ResourceVersion:"977", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"db67c69c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37", Pod:"calico-apiserver-db67c69c4-f8bkz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali075463155a8", MAC:"e6:39:dc:7d:1e:23", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:45.200016 env[1470]: 2025-08-13 00:05:45.196 [INFO][4338] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-f8bkz" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:45.216000 audit[4383]: NETFILTER_CFG table=filter:114 family=2 entries=45 op=nft_register_chain pid=4383 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:45.216000 audit[4383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24264 a0=3 a1=fffffbc948d0 a2=0 a3=ffffb133ffa8 items=0 ppid=3805 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.216000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:45.229558 env[1470]: time="2025-08-13T00:05:45.229365764Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:45.229558 env[1470]: time="2025-08-13T00:05:45.229405244Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:45.229558 env[1470]: time="2025-08-13T00:05:45.229415604Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:45.230825 env[1470]: time="2025-08-13T00:05:45.230238135Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37 pid=4391 runtime=io.containerd.runc.v2 Aug 13 00:05:45.257286 systemd[1]: Started cri-containerd-3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37.scope. Aug 13 00:05:45.270380 systemd-networkd[1624]: cali8baaad35256: Link UP Aug 13 00:05:45.278408 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8baaad35256: link becomes ready Aug 13 00:05:45.278379 systemd-networkd[1624]: cali8baaad35256: Gained carrier Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.144 [INFO][4357] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0 csi-node-driver- calico-system 155955ac-e694-496e-8435-16aca9011621 978 0 2025-08-13 00:05:15 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab csi-node-driver-5s8h8 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali8baaad35256 [] [] }} ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Namespace="calico-system" Pod="csi-node-driver-5s8h8" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.144 [INFO][4357] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Namespace="calico-system" Pod="csi-node-driver-5s8h8" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.188 [INFO][4371] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" HandleID="k8s-pod-network.4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.188 [INFO][4371] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" HandleID="k8s-pod-network.4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002caff0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"csi-node-driver-5s8h8", "timestamp":"2025-08-13 00:05:45.188619573 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.188 [INFO][4371] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.188 [INFO][4371] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.188 [INFO][4371] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.210 [INFO][4371] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.222 [INFO][4371] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.227 [INFO][4371] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.230 [INFO][4371] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.236 [INFO][4371] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.236 [INFO][4371] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.239 [INFO][4371] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783 Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.245 [INFO][4371] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.265 [INFO][4371] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.133/26] block=192.168.21.128/26 handle="k8s-pod-network.4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.265 [INFO][4371] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.133/26] handle="k8s-pod-network.4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.265 [INFO][4371] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:45.296043 env[1470]: 2025-08-13 00:05:45.266 [INFO][4371] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.133/26] IPv6=[] ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" HandleID="k8s-pod-network.4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:45.296641 env[1470]: 2025-08-13 00:05:45.267 [INFO][4357] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Namespace="calico-system" Pod="csi-node-driver-5s8h8" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"155955ac-e694-496e-8435-16aca9011621", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"csi-node-driver-5s8h8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.21.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8baaad35256", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:45.296641 env[1470]: 2025-08-13 00:05:45.267 [INFO][4357] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.133/32] ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Namespace="calico-system" Pod="csi-node-driver-5s8h8" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:45.296641 env[1470]: 2025-08-13 00:05:45.267 [INFO][4357] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8baaad35256 ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Namespace="calico-system" Pod="csi-node-driver-5s8h8" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:45.296641 env[1470]: 2025-08-13 00:05:45.278 [INFO][4357] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Namespace="calico-system" Pod="csi-node-driver-5s8h8" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:45.296641 env[1470]: 2025-08-13 00:05:45.281 [INFO][4357] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Namespace="calico-system" Pod="csi-node-driver-5s8h8" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"155955ac-e694-496e-8435-16aca9011621", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783", Pod:"csi-node-driver-5s8h8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.21.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8baaad35256", MAC:"d6:3e:55:d2:d7:23", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:45.296641 env[1470]: 2025-08-13 00:05:45.294 [INFO][4357] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783" Namespace="calico-system" Pod="csi-node-driver-5s8h8" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.304000 audit: BPF prog-id=182 op=LOAD Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4391 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343163663832363735326530336430383662613831373234326332 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4391 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343163663832363735326530336430383662613831373234326332 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.305000 audit: BPF prog-id=183 op=LOAD Aug 13 00:05:45.305000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4391 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343163663832363735326530336430383662613831373234326332 Aug 13 00:05:45.306000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.306000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.306000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.306000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.306000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.306000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.306000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.306000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.306000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.306000 audit: BPF prog-id=184 op=LOAD Aug 13 00:05:45.306000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4391 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343163663832363735326530336430383662613831373234326332 Aug 13 00:05:45.306000 audit: BPF prog-id=184 op=UNLOAD Aug 13 00:05:45.306000 audit: BPF prog-id=183 op=UNLOAD Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.307000 audit: BPF prog-id=185 op=LOAD Aug 13 00:05:45.307000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4391 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343163663832363735326530336430383662613831373234326332 Aug 13 00:05:45.318350 systemd-networkd[1624]: cali49540aaddd0: Gained IPv6LL Aug 13 00:05:45.320000 audit[4426]: NETFILTER_CFG table=filter:115 family=2 entries=54 op=nft_register_chain pid=4426 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:45.320000 audit[4426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25992 a0=3 a1=ffffe0ac15e0 a2=0 a3=ffff90b6bfa8 items=0 ppid=3805 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.320000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:45.339201 env[1470]: time="2025-08-13T00:05:45.339164221Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-db67c69c4-f8bkz,Uid:1dd3d88d-3f62-4e35-8832-966cbdf918e8,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\"" Aug 13 00:05:45.341365 env[1470]: time="2025-08-13T00:05:45.341161086Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:45.341365 env[1470]: time="2025-08-13T00:05:45.341205167Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:45.341365 env[1470]: time="2025-08-13T00:05:45.341289208Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:45.342312 env[1470]: time="2025-08-13T00:05:45.342214179Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783 pid=4439 runtime=io.containerd.runc.v2 Aug 13 00:05:45.356900 systemd[1]: Started cri-containerd-4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783.scope. Aug 13 00:05:45.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.369000 audit: BPF prog-id=186 op=LOAD Aug 13 00:05:45.371000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.371000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4439 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466613532323966623364326133343466646332303261636239666364 Aug 13 00:05:45.371000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.371000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4439 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466613532323966623364326133343466646332303261636239666364 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit: BPF prog-id=187 op=LOAD Aug 13 00:05:45.372000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4439 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466613532323966623364326133343466646332303261636239666364 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.372000 audit: BPF prog-id=188 op=LOAD Aug 13 00:05:45.372000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4439 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466613532323966623364326133343466646332303261636239666364 Aug 13 00:05:45.373000 audit: BPF prog-id=188 op=UNLOAD Aug 13 00:05:45.373000 audit: BPF prog-id=187 op=UNLOAD Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { perfmon } for pid=4450 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit[4450]: AVC avc: denied { bpf } for pid=4450 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:45.373000 audit: BPF prog-id=189 op=LOAD Aug 13 00:05:45.373000 audit[4450]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4439 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:45.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466613532323966623364326133343466646332303261636239666364 Aug 13 00:05:45.385288 env[1470]: time="2025-08-13T00:05:45.385232999Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5s8h8,Uid:155955ac-e694-496e-8435-16aca9011621,Namespace:calico-system,Attempt:1,} returns sandbox id \"4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783\"" Aug 13 00:05:46.023296 systemd[1]: run-containerd-runc-k8s.io-3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37-runc.tYkFGE.mount: Deactivated successfully. Aug 13 00:05:46.298000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:46.298000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:46.298000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002c29950 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:05:46.298000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:46.298000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b79240 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:05:46.298000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:46.343376 systemd-networkd[1624]: cali8baaad35256: Gained IPv6LL Aug 13 00:05:46.451000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:46.451000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=400e43c060 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:05:46.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:05:46.451000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522483 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:46.451000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=400e43c0c0 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:05:46.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:05:46.457000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522489 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:46.457000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:46.457000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=400e43c210 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:05:46.457000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:05:46.457000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=400db06c30 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:05:46.457000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:05:46.457000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:46.457000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=40126e4c00 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:05:46.457000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:05:46.458000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:46.458000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=4012b6a420 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:05:46.458000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:05:46.605463 env[1470]: time="2025-08-13T00:05:46.597320742Z" level=info msg="StopPodSandbox for \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\"" Aug 13 00:05:46.605463 env[1470]: time="2025-08-13T00:05:46.597622066Z" level=info msg="StopPodSandbox for \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\"" Aug 13 00:05:46.605463 env[1470]: time="2025-08-13T00:05:46.597825588Z" level=info msg="StopPodSandbox for \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\"" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.664 [INFO][4498] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.664 [INFO][4498] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" iface="eth0" netns="/var/run/netns/cni-1ced623b-a192-67cf-7036-59d0354e0b1b" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.665 [INFO][4498] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" iface="eth0" netns="/var/run/netns/cni-1ced623b-a192-67cf-7036-59d0354e0b1b" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.666 [INFO][4498] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" iface="eth0" netns="/var/run/netns/cni-1ced623b-a192-67cf-7036-59d0354e0b1b" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.666 [INFO][4498] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.666 [INFO][4498] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.739 [INFO][4522] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" HandleID="k8s-pod-network.62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.739 [INFO][4522] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.739 [INFO][4522] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.747 [WARNING][4522] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" HandleID="k8s-pod-network.62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.747 [INFO][4522] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" HandleID="k8s-pod-network.62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.749 [INFO][4522] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:46.751679 env[1470]: 2025-08-13 00:05:46.750 [INFO][4498] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:46.756570 systemd[1]: run-netns-cni\x2d1ced623b\x2da192\x2d67cf\x2d7036\x2d59d0354e0b1b.mount: Deactivated successfully. Aug 13 00:05:46.758375 env[1470]: time="2025-08-13T00:05:46.758329655Z" level=info msg="TearDown network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\" successfully" Aug 13 00:05:46.758375 env[1470]: time="2025-08-13T00:05:46.758369935Z" level=info msg="StopPodSandbox for \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\" returns successfully" Aug 13 00:05:46.764382 env[1470]: time="2025-08-13T00:05:46.763089594Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-689f76fcb5-r25jb,Uid:3fc74946-2172-4092-b038-3fbf914f9ea0,Namespace:calico-system,Attempt:1,}" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.695 [INFO][4505] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.697 [INFO][4505] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" iface="eth0" netns="/var/run/netns/cni-e5df2ef5-ed46-62b1-73ff-fa1f8e0f2154" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.697 [INFO][4505] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" iface="eth0" netns="/var/run/netns/cni-e5df2ef5-ed46-62b1-73ff-fa1f8e0f2154" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.697 [INFO][4505] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" iface="eth0" netns="/var/run/netns/cni-e5df2ef5-ed46-62b1-73ff-fa1f8e0f2154" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.697 [INFO][4505] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.697 [INFO][4505] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.753 [INFO][4528] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" HandleID="k8s-pod-network.096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.753 [INFO][4528] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.754 [INFO][4528] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.767 [WARNING][4528] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" HandleID="k8s-pod-network.096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.767 [INFO][4528] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" HandleID="k8s-pod-network.096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.768 [INFO][4528] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:46.770459 env[1470]: 2025-08-13 00:05:46.769 [INFO][4505] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:46.774108 env[1470]: time="2025-08-13T00:05:46.773782926Z" level=info msg="TearDown network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\" successfully" Aug 13 00:05:46.774108 env[1470]: time="2025-08-13T00:05:46.773805406Z" level=info msg="StopPodSandbox for \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\" returns successfully" Aug 13 00:05:46.772674 systemd[1]: run-netns-cni\x2de5df2ef5\x2ded46\x2d62b1\x2d73ff\x2dfa1f8e0f2154.mount: Deactivated successfully. Aug 13 00:05:46.774692 env[1470]: time="2025-08-13T00:05:46.774653377Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n6vrt,Uid:0fe71868-7b1a-4e41-a3bb-561f2af259b6,Namespace:kube-system,Attempt:1,}" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.731 [INFO][4509] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.731 [INFO][4509] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" iface="eth0" netns="/var/run/netns/cni-f8300774-d091-60c0-6918-ec7427297e17" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.731 [INFO][4509] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" iface="eth0" netns="/var/run/netns/cni-f8300774-d091-60c0-6918-ec7427297e17" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.731 [INFO][4509] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" iface="eth0" netns="/var/run/netns/cni-f8300774-d091-60c0-6918-ec7427297e17" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.731 [INFO][4509] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.731 [INFO][4509] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.789 [INFO][4536] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" HandleID="k8s-pod-network.10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.789 [INFO][4536] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.790 [INFO][4536] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.798 [WARNING][4536] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" HandleID="k8s-pod-network.10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.798 [INFO][4536] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" HandleID="k8s-pod-network.10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.799 [INFO][4536] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:46.801817 env[1470]: 2025-08-13 00:05:46.800 [INFO][4509] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:46.805565 env[1470]: time="2025-08-13T00:05:46.804924311Z" level=info msg="TearDown network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\" successfully" Aug 13 00:05:46.805565 env[1470]: time="2025-08-13T00:05:46.804960072Z" level=info msg="StopPodSandbox for \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\" returns successfully" Aug 13 00:05:46.805565 env[1470]: time="2025-08-13T00:05:46.805490598Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-hslpg,Uid:feacf951-12e6-4ab1-a3db-59528fac3a21,Namespace:calico-system,Attempt:1,}" Aug 13 00:05:46.804158 systemd[1]: run-netns-cni\x2df8300774\x2dd091\x2d60c0\x2d6918\x2dec7427297e17.mount: Deactivated successfully. Aug 13 00:05:47.239014 systemd-networkd[1624]: cali075463155a8: Gained IPv6LL Aug 13 00:05:47.282017 systemd-networkd[1624]: calid4d3dde5e95: Link UP Aug 13 00:05:47.296101 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Aug 13 00:05:47.296229 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid4d3dde5e95: link becomes ready Aug 13 00:05:47.302704 systemd-networkd[1624]: calid4d3dde5e95: Gained carrier Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.081 [INFO][4544] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0 calico-kube-controllers-689f76fcb5- calico-system 3fc74946-2172-4092-b038-3fbf914f9ea0 1001 0 2025-08-13 00:05:15 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:689f76fcb5 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab calico-kube-controllers-689f76fcb5-r25jb eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calid4d3dde5e95 [] [] }} ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Namespace="calico-system" Pod="calico-kube-controllers-689f76fcb5-r25jb" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.081 [INFO][4544] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Namespace="calico-system" Pod="calico-kube-controllers-689f76fcb5-r25jb" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.167 [INFO][4570] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" HandleID="k8s-pod-network.8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.177 [INFO][4570] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" HandleID="k8s-pod-network.8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab490), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"calico-kube-controllers-689f76fcb5-r25jb", "timestamp":"2025-08-13 00:05:47.167578173 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.177 [INFO][4570] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.177 [INFO][4570] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.178 [INFO][4570] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.191 [INFO][4570] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.200 [INFO][4570] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.224 [INFO][4570] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.229 [INFO][4570] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.240 [INFO][4570] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.240 [INFO][4570] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.243 [INFO][4570] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142 Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.250 [INFO][4570] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.274 [INFO][4570] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.134/26] block=192.168.21.128/26 handle="k8s-pod-network.8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.274 [INFO][4570] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.134/26] handle="k8s-pod-network.8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.274 [INFO][4570] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:47.336400 env[1470]: 2025-08-13 00:05:47.274 [INFO][4570] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.134/26] IPv6=[] ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" HandleID="k8s-pod-network.8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:47.337003 env[1470]: 2025-08-13 00:05:47.278 [INFO][4544] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Namespace="calico-system" Pod="calico-kube-controllers-689f76fcb5-r25jb" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0", GenerateName:"calico-kube-controllers-689f76fcb5-", Namespace:"calico-system", SelfLink:"", UID:"3fc74946-2172-4092-b038-3fbf914f9ea0", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"689f76fcb5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"calico-kube-controllers-689f76fcb5-r25jb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.21.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid4d3dde5e95", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:47.337003 env[1470]: 2025-08-13 00:05:47.279 [INFO][4544] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.134/32] ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Namespace="calico-system" Pod="calico-kube-controllers-689f76fcb5-r25jb" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:47.337003 env[1470]: 2025-08-13 00:05:47.279 [INFO][4544] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid4d3dde5e95 ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Namespace="calico-system" Pod="calico-kube-controllers-689f76fcb5-r25jb" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:47.337003 env[1470]: 2025-08-13 00:05:47.304 [INFO][4544] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Namespace="calico-system" Pod="calico-kube-controllers-689f76fcb5-r25jb" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:47.337003 env[1470]: 2025-08-13 00:05:47.311 [INFO][4544] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Namespace="calico-system" Pod="calico-kube-controllers-689f76fcb5-r25jb" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0", GenerateName:"calico-kube-controllers-689f76fcb5-", Namespace:"calico-system", SelfLink:"", UID:"3fc74946-2172-4092-b038-3fbf914f9ea0", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"689f76fcb5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142", Pod:"calico-kube-controllers-689f76fcb5-r25jb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.21.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid4d3dde5e95", MAC:"c6:20:4b:48:30:7d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:47.337003 env[1470]: 2025-08-13 00:05:47.332 [INFO][4544] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142" Namespace="calico-system" Pod="calico-kube-controllers-689f76fcb5-r25jb" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:47.386795 env[1470]: time="2025-08-13T00:05:47.386713009Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:47.386795 env[1470]: time="2025-08-13T00:05:47.386788970Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:47.386954 env[1470]: time="2025-08-13T00:05:47.386815091Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:47.386954 env[1470]: time="2025-08-13T00:05:47.386935572Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142 pid=4614 runtime=io.containerd.runc.v2 Aug 13 00:05:47.440454 systemd-networkd[1624]: cali67e22204118: Link UP Aug 13 00:05:47.440632 systemd-networkd[1624]: cali67e22204118: Gained carrier Aug 13 00:05:47.441315 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali67e22204118: link becomes ready Aug 13 00:05:47.437000 audit[4635]: NETFILTER_CFG table=filter:116 family=2 entries=48 op=nft_register_chain pid=4635 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:47.437000 audit[4635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23124 a0=3 a1=fffff6163200 a2=0 a3=ffff93d08fa8 items=0 ppid=3805 pid=4635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.437000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:47.457784 systemd[1]: Started cri-containerd-8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142.scope. Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.121 [INFO][4558] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0 goldmane-768f4c5c69- calico-system feacf951-12e6-4ab1-a3db-59528fac3a21 1003 0 2025-08-13 00:05:15 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab goldmane-768f4c5c69-hslpg eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali67e22204118 [] [] }} ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Namespace="calico-system" Pod="goldmane-768f4c5c69-hslpg" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.121 [INFO][4558] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Namespace="calico-system" Pod="goldmane-768f4c5c69-hslpg" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.210 [INFO][4584] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" HandleID="k8s-pod-network.e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.210 [INFO][4584] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" HandleID="k8s-pod-network.e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab4a0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"goldmane-768f4c5c69-hslpg", "timestamp":"2025-08-13 00:05:47.209580846 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.210 [INFO][4584] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.275 [INFO][4584] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.275 [INFO][4584] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.322 [INFO][4584] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.349 [INFO][4584] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.366 [INFO][4584] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.369 [INFO][4584] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.378 [INFO][4584] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.378 [INFO][4584] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.380 [INFO][4584] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355 Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.400 [INFO][4584] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.419 [INFO][4584] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.135/26] block=192.168.21.128/26 handle="k8s-pod-network.e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.419 [INFO][4584] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.135/26] handle="k8s-pod-network.e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.419 [INFO][4584] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:47.470140 env[1470]: 2025-08-13 00:05:47.419 [INFO][4584] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.135/26] IPv6=[] ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" HandleID="k8s-pod-network.e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:47.470810 env[1470]: 2025-08-13 00:05:47.422 [INFO][4558] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Namespace="calico-system" Pod="goldmane-768f4c5c69-hslpg" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"feacf951-12e6-4ab1-a3db-59528fac3a21", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"goldmane-768f4c5c69-hslpg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.21.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali67e22204118", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:47.470810 env[1470]: 2025-08-13 00:05:47.423 [INFO][4558] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.135/32] ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Namespace="calico-system" Pod="goldmane-768f4c5c69-hslpg" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:47.470810 env[1470]: 2025-08-13 00:05:47.423 [INFO][4558] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali67e22204118 ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Namespace="calico-system" Pod="goldmane-768f4c5c69-hslpg" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:47.470810 env[1470]: 2025-08-13 00:05:47.433 [INFO][4558] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Namespace="calico-system" Pod="goldmane-768f4c5c69-hslpg" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:47.470810 env[1470]: 2025-08-13 00:05:47.441 [INFO][4558] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Namespace="calico-system" Pod="goldmane-768f4c5c69-hslpg" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"feacf951-12e6-4ab1-a3db-59528fac3a21", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355", Pod:"goldmane-768f4c5c69-hslpg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.21.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali67e22204118", MAC:"96:5c:8f:3d:15:fa", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:47.470810 env[1470]: 2025-08-13 00:05:47.463 [INFO][4558] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355" Namespace="calico-system" Pod="goldmane-768f4c5c69-hslpg" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:47.528015 systemd-networkd[1624]: calic42a923a7b5: Link UP Aug 13 00:05:47.536466 systemd-networkd[1624]: calic42a923a7b5: Gained carrier Aug 13 00:05:47.537316 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic42a923a7b5: link becomes ready Aug 13 00:05:47.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.539000 audit: BPF prog-id=190 op=LOAD Aug 13 00:05:47.539000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.539000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4614 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866373030653138316661623161613063613238643434353963336338 Aug 13 00:05:47.539000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.539000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4614 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866373030653138316661623161613063613238643434353963336338 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit: BPF prog-id=191 op=LOAD Aug 13 00:05:47.540000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4614 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866373030653138316661623161613063613238643434353963336338 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit: BPF prog-id=192 op=LOAD Aug 13 00:05:47.540000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4614 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866373030653138316661623161613063613238643434353963336338 Aug 13 00:05:47.540000 audit: BPF prog-id=192 op=UNLOAD Aug 13 00:05:47.540000 audit: BPF prog-id=191 op=UNLOAD Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.540000 audit: BPF prog-id=193 op=LOAD Aug 13 00:05:47.540000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4614 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866373030653138316661623161613063613238643434353963336338 Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.217 [INFO][4567] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0 coredns-674b8bbfcf- kube-system 0fe71868-7b1a-4e41-a3bb-561f2af259b6 1002 0 2025-08-13 00:04:55 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab coredns-674b8bbfcf-n6vrt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic42a923a7b5 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6vrt" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.217 [INFO][4567] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6vrt" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.267 [INFO][4594] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" HandleID="k8s-pod-network.276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.269 [INFO][4594] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" HandleID="k8s-pod-network.276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3600), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"coredns-674b8bbfcf-n6vrt", "timestamp":"2025-08-13 00:05:47.267885278 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.269 [INFO][4594] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.419 [INFO][4594] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.419 [INFO][4594] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.469 [INFO][4594] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.479 [INFO][4594] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.490 [INFO][4594] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.493 [INFO][4594] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.498 [INFO][4594] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.498 [INFO][4594] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.500 [INFO][4594] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.510 [INFO][4594] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.517 [INFO][4594] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.136/26] block=192.168.21.128/26 handle="k8s-pod-network.276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.517 [INFO][4594] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.136/26] handle="k8s-pod-network.276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.518 [INFO][4594] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:47.558681 env[1470]: 2025-08-13 00:05:47.518 [INFO][4594] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.136/26] IPv6=[] ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" HandleID="k8s-pod-network.276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:47.559238 env[1470]: 2025-08-13 00:05:47.519 [INFO][4567] cni-plugin/k8s.go 418: Populated endpoint ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6vrt" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"0fe71868-7b1a-4e41-a3bb-561f2af259b6", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 4, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"coredns-674b8bbfcf-n6vrt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.21.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic42a923a7b5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:47.559238 env[1470]: 2025-08-13 00:05:47.519 [INFO][4567] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.136/32] ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6vrt" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:47.559238 env[1470]: 2025-08-13 00:05:47.519 [INFO][4567] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic42a923a7b5 ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6vrt" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:47.559238 env[1470]: 2025-08-13 00:05:47.537 [INFO][4567] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6vrt" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:47.559238 env[1470]: 2025-08-13 00:05:47.537 [INFO][4567] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6vrt" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"0fe71868-7b1a-4e41-a3bb-561f2af259b6", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 4, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c", Pod:"coredns-674b8bbfcf-n6vrt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.21.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic42a923a7b5", MAC:"c6:b2:cb:4e:c2:b9", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:47.559238 env[1470]: 2025-08-13 00:05:47.555 [INFO][4567] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c" Namespace="kube-system" Pod="coredns-674b8bbfcf-n6vrt" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:47.567000 audit[4663]: NETFILTER_CFG table=filter:117 family=2 entries=60 op=nft_register_chain pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:47.567000 audit[4663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29916 a0=3 a1=ffffdcc87c40 a2=0 a3=ffff93930fa8 items=0 ppid=3805 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.567000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:47.570793 env[1470]: time="2025-08-13T00:05:47.570700537Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:47.570793 env[1470]: time="2025-08-13T00:05:47.570765897Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:47.570972 env[1470]: time="2025-08-13T00:05:47.570776538Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:47.571367 env[1470]: time="2025-08-13T00:05:47.571317704Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355 pid=4670 runtime=io.containerd.runc.v2 Aug 13 00:05:47.600420 env[1470]: time="2025-08-13T00:05:47.600340139Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:47.600606 env[1470]: time="2025-08-13T00:05:47.600580302Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:47.600700 env[1470]: time="2025-08-13T00:05:47.600678383Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:47.600899 env[1470]: time="2025-08-13T00:05:47.600870545Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c pid=4697 runtime=io.containerd.runc.v2 Aug 13 00:05:47.604621 env[1470]: time="2025-08-13T00:05:47.604586271Z" level=info msg="StopPodSandbox for \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\"" Aug 13 00:05:47.628704 env[1470]: time="2025-08-13T00:05:47.628668685Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-689f76fcb5-r25jb,Uid:3fc74946-2172-4092-b038-3fbf914f9ea0,Namespace:calico-system,Attempt:1,} returns sandbox id \"8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142\"" Aug 13 00:05:47.645000 audit[4726]: NETFILTER_CFG table=filter:118 family=2 entries=52 op=nft_register_chain pid=4726 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:47.645000 audit[4726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23892 a0=3 a1=ffffc41c3fa0 a2=0 a3=ffff8d46cfa8 items=0 ppid=3805 pid=4726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.645000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:47.646818 systemd[1]: Started cri-containerd-e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355.scope. Aug 13 00:05:47.655482 systemd[1]: Started cri-containerd-276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c.scope. Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.682000 audit: BPF prog-id=194 op=LOAD Aug 13 00:05:47.683000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.683000 audit[4682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4670 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536316439376165646230333435323438363565363062353831646236 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4670 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536316439376165646230333435323438363565363062353831646236 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.684000 audit: BPF prog-id=195 op=LOAD Aug 13 00:05:47.684000 audit[4682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4670 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536316439376165646230333435323438363565363062353831646236 Aug 13 00:05:47.685000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.685000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.685000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.685000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.685000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.685000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.685000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.685000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.685000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.685000 audit: BPF prog-id=196 op=LOAD Aug 13 00:05:47.685000 audit[4682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4670 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536316439376165646230333435323438363565363062353831646236 Aug 13 00:05:47.686000 audit: BPF prog-id=196 op=UNLOAD Aug 13 00:05:47.686000 audit: BPF prog-id=195 op=UNLOAD Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { perfmon } for pid=4682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit[4682]: AVC avc: denied { bpf } for pid=4682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.686000 audit: BPF prog-id=197 op=LOAD Aug 13 00:05:47.686000 audit[4682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4670 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536316439376165646230333435323438363565363062353831646236 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.697000 audit: BPF prog-id=198 op=LOAD Aug 13 00:05:47.698000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.698000 audit[4722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4697 pid=4722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363433323138346365366635396437333634343332343633383238 Aug 13 00:05:47.698000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.698000 audit[4722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4697 pid=4722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363433323138346365366635396437333634343332343633383238 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit: BPF prog-id=199 op=LOAD Aug 13 00:05:47.699000 audit[4722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4697 pid=4722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363433323138346365366635396437333634343332343633383238 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.699000 audit: BPF prog-id=200 op=LOAD Aug 13 00:05:47.699000 audit[4722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4697 pid=4722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363433323138346365366635396437333634343332343633383238 Aug 13 00:05:47.700000 audit: BPF prog-id=200 op=UNLOAD Aug 13 00:05:47.700000 audit: BPF prog-id=199 op=UNLOAD Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { perfmon } for pid=4722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit[4722]: AVC avc: denied { bpf } for pid=4722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.700000 audit: BPF prog-id=201 op=LOAD Aug 13 00:05:47.700000 audit[4722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4697 pid=4722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237363433323138346365366635396437333634343332343633383238 Aug 13 00:05:47.745876 env[1470]: time="2025-08-13T00:05:47.745824956Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-hslpg,Uid:feacf951-12e6-4ab1-a3db-59528fac3a21,Namespace:calico-system,Attempt:1,} returns sandbox id \"e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355\"" Aug 13 00:05:47.748990 env[1470]: time="2025-08-13T00:05:47.748955354Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-n6vrt,Uid:0fe71868-7b1a-4e41-a3bb-561f2af259b6,Namespace:kube-system,Attempt:1,} returns sandbox id \"276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c\"" Aug 13 00:05:47.763860 env[1470]: time="2025-08-13T00:05:47.763823336Z" level=info msg="CreateContainer within sandbox \"276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.732 [INFO][4739] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.732 [INFO][4739] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" iface="eth0" netns="/var/run/netns/cni-00476376-a6bf-1eaf-b678-8259be6228b6" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.732 [INFO][4739] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" iface="eth0" netns="/var/run/netns/cni-00476376-a6bf-1eaf-b678-8259be6228b6" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.732 [INFO][4739] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" iface="eth0" netns="/var/run/netns/cni-00476376-a6bf-1eaf-b678-8259be6228b6" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.733 [INFO][4739] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.733 [INFO][4739] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.776 [INFO][4772] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" HandleID="k8s-pod-network.016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.776 [INFO][4772] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.777 [INFO][4772] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.787 [WARNING][4772] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" HandleID="k8s-pod-network.016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.788 [INFO][4772] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" HandleID="k8s-pod-network.016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.789 [INFO][4772] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:47.798143 env[1470]: 2025-08-13 00:05:47.790 [INFO][4739] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:47.799233 env[1470]: time="2025-08-13T00:05:47.799195888Z" level=info msg="TearDown network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\" successfully" Aug 13 00:05:47.799233 env[1470]: time="2025-08-13T00:05:47.799228328Z" level=info msg="StopPodSandbox for \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\" returns successfully" Aug 13 00:05:47.800195 env[1470]: time="2025-08-13T00:05:47.800169539Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-db67c69c4-9hpz2,Uid:6681f5a2-e210-41c8-bad6-4e82c91ad26f,Namespace:calico-apiserver,Attempt:1,}" Aug 13 00:05:47.876635 env[1470]: time="2025-08-13T00:05:47.876587153Z" level=info msg="CreateContainer within sandbox \"276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"64f6ca317a93dad24ba03911a9472e0569b35dd2bb1cb5a507d5cca46a8cd85a\"" Aug 13 00:05:47.877330 env[1470]: time="2025-08-13T00:05:47.877295522Z" level=info msg="StartContainer for \"64f6ca317a93dad24ba03911a9472e0569b35dd2bb1cb5a507d5cca46a8cd85a\"" Aug 13 00:05:47.919703 systemd[1]: Started cri-containerd-64f6ca317a93dad24ba03911a9472e0569b35dd2bb1cb5a507d5cca46a8cd85a.scope. Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.938000 audit: BPF prog-id=202 op=LOAD Aug 13 00:05:47.939000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.939000 audit[4787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4697 pid=4787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634663663613331376139336461643234626130333931316139343732 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4697 pid=4787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634663663613331376139336461643234626130333931316139343732 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit: BPF prog-id=203 op=LOAD Aug 13 00:05:47.940000 audit[4787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4697 pid=4787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634663663613331376139336461643234626130333931316139343732 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.940000 audit: BPF prog-id=204 op=LOAD Aug 13 00:05:47.940000 audit[4787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4697 pid=4787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634663663613331376139336461643234626130333931316139343732 Aug 13 00:05:47.941000 audit: BPF prog-id=204 op=UNLOAD Aug 13 00:05:47.941000 audit: BPF prog-id=203 op=UNLOAD Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { perfmon } for pid=4787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit[4787]: AVC avc: denied { bpf } for pid=4787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:47.941000 audit: BPF prog-id=205 op=LOAD Aug 13 00:05:47.941000 audit[4787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4697 pid=4787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:47.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634663663613331376139336461643234626130333931316139343732 Aug 13 00:05:47.995927 env[1470]: time="2025-08-13T00:05:47.995853490Z" level=info msg="StartContainer for \"64f6ca317a93dad24ba03911a9472e0569b35dd2bb1cb5a507d5cca46a8cd85a\" returns successfully" Aug 13 00:05:47.997000 audit[4797]: AVC avc: denied { getattr } for pid=4797 comm="coredns" path="cgroup:[4026532746]" dev="nsfs" ino=4026532746 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c845 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Aug 13 00:05:47.997000 audit[4797]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40000567f8 a2=400014c578 a3=0 items=0 ppid=4697 pid=4797 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c845 key=(null) Aug 13 00:05:47.997000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Aug 13 00:05:48.026024 systemd[1]: run-netns-cni\x2d00476376\x2da6bf\x2d1eaf\x2db678\x2d8259be6228b6.mount: Deactivated successfully. Aug 13 00:05:48.094395 systemd-networkd[1624]: cali9b72a076d11: Link UP Aug 13 00:05:48.097621 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9b72a076d11: link becomes ready Aug 13 00:05:48.097324 systemd-networkd[1624]: cali9b72a076d11: Gained carrier Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:47.978 [INFO][4802] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0 calico-apiserver-db67c69c4- calico-apiserver 6681f5a2-e210-41c8-bad6-4e82c91ad26f 1016 0 2025-08-13 00:05:11 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:db67c69c4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab calico-apiserver-db67c69c4-9hpz2 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali9b72a076d11 [] [] }} ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-9hpz2" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:47.978 [INFO][4802] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-9hpz2" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.041 [INFO][4823] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.041 [INFO][4823] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024b610), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"calico-apiserver-db67c69c4-9hpz2", "timestamp":"2025-08-13 00:05:48.041693843 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.041 [INFO][4823] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.042 [INFO][4823] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.042 [INFO][4823] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.056 [INFO][4823] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.061 [INFO][4823] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.065 [INFO][4823] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.067 [INFO][4823] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.069 [INFO][4823] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.069 [INFO][4823] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.072 [INFO][4823] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75 Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.077 [INFO][4823] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.085 [INFO][4823] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.137/26] block=192.168.21.128/26 handle="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.085 [INFO][4823] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.137/26] handle="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.085 [INFO][4823] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:48.114208 env[1470]: 2025-08-13 00:05:48.085 [INFO][4823] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.137/26] IPv6=[] ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:48.114748 env[1470]: 2025-08-13 00:05:48.087 [INFO][4802] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-9hpz2" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0", GenerateName:"calico-apiserver-db67c69c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"6681f5a2-e210-41c8-bad6-4e82c91ad26f", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"db67c69c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"calico-apiserver-db67c69c4-9hpz2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9b72a076d11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:48.114748 env[1470]: 2025-08-13 00:05:48.087 [INFO][4802] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.137/32] ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-9hpz2" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:48.114748 env[1470]: 2025-08-13 00:05:48.087 [INFO][4802] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9b72a076d11 ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-9hpz2" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:48.114748 env[1470]: 2025-08-13 00:05:48.097 [INFO][4802] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-9hpz2" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:48.114748 env[1470]: 2025-08-13 00:05:48.097 [INFO][4802] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-9hpz2" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0", GenerateName:"calico-apiserver-db67c69c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"6681f5a2-e210-41c8-bad6-4e82c91ad26f", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"db67c69c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75", Pod:"calico-apiserver-db67c69c4-9hpz2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9b72a076d11", MAC:"b2:04:26:db:da:9b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:48.114748 env[1470]: 2025-08-13 00:05:48.112 [INFO][4802] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Namespace="calico-apiserver" Pod="calico-apiserver-db67c69c4-9hpz2" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:48.143000 audit[4842]: NETFILTER_CFG table=filter:119 family=2 entries=61 op=nft_register_chain pid=4842 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:05:48.143000 audit[4842]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29000 a0=3 a1=ffffe94606f0 a2=0 a3=ffff98430fa8 items=0 ppid=3805 pid=4842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.143000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:05:48.160655 env[1470]: time="2025-08-13T00:05:48.160594397Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:05:48.160763 env[1470]: time="2025-08-13T00:05:48.160634637Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:05:48.160763 env[1470]: time="2025-08-13T00:05:48.160644838Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:05:48.160763 env[1470]: time="2025-08-13T00:05:48.160743519Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75 pid=4851 runtime=io.containerd.runc.v2 Aug 13 00:05:48.191238 systemd[1]: run-containerd-runc-k8s.io-c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75-runc.Sbp8kk.mount: Deactivated successfully. Aug 13 00:05:48.202643 systemd[1]: Started cri-containerd-c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75.scope. Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.225000 audit: BPF prog-id=206 op=LOAD Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4851 pid=4862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613064663331656231303930663939626638353837343432623638 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4851 pid=4862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613064663331656231303930663939626638353837343432623638 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.231000 audit: BPF prog-id=207 op=LOAD Aug 13 00:05:48.231000 audit[4862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4851 pid=4862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613064663331656231303930663939626638353837343432623638 Aug 13 00:05:48.232000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.232000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.232000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.232000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.232000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.232000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.232000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.232000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.232000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.232000 audit: BPF prog-id=208 op=LOAD Aug 13 00:05:48.232000 audit[4862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4851 pid=4862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613064663331656231303930663939626638353837343432623638 Aug 13 00:05:48.233000 audit: BPF prog-id=208 op=UNLOAD Aug 13 00:05:48.233000 audit: BPF prog-id=207 op=UNLOAD Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { perfmon } for pid=4862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit[4862]: AVC avc: denied { bpf } for pid=4862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.233000 audit: BPF prog-id=209 op=LOAD Aug 13 00:05:48.233000 audit[4862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4851 pid=4862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613064663331656231303930663939626638353837343432623638 Aug 13 00:05:48.260040 env[1470]: time="2025-08-13T00:05:48.259994716Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-db67c69c4-9hpz2,Uid:6681f5a2-e210-41c8-bad6-4e82c91ad26f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\"" Aug 13 00:05:48.488283 env[1470]: time="2025-08-13T00:05:48.486638608Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:48.512079 env[1470]: time="2025-08-13T00:05:48.512042955Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:48.518402 systemd-networkd[1624]: calid4d3dde5e95: Gained IPv6LL Aug 13 00:05:48.518660 systemd-networkd[1624]: cali67e22204118: Gained IPv6LL Aug 13 00:05:48.523835 env[1470]: time="2025-08-13T00:05:48.523809737Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:48.538815 env[1470]: time="2025-08-13T00:05:48.538774717Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:48.539391 env[1470]: time="2025-08-13T00:05:48.539363724Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Aug 13 00:05:48.541586 env[1470]: time="2025-08-13T00:05:48.541560071Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Aug 13 00:05:48.554833 env[1470]: time="2025-08-13T00:05:48.554791310Z" level=info msg="CreateContainer within sandbox \"a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 00:05:48.685850 env[1470]: time="2025-08-13T00:05:48.685796090Z" level=info msg="CreateContainer within sandbox \"a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"bf04b4aad348fcac0d616c99b13884cbed1959c903f7ff803618b0afa7032978\"" Aug 13 00:05:48.686994 env[1470]: time="2025-08-13T00:05:48.686972584Z" level=info msg="StartContainer for \"bf04b4aad348fcac0d616c99b13884cbed1959c903f7ff803618b0afa7032978\"" Aug 13 00:05:48.704201 systemd[1]: Started cri-containerd-bf04b4aad348fcac0d616c99b13884cbed1959c903f7ff803618b0afa7032978.scope. Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.722000 audit: BPF prog-id=210 op=LOAD Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4085 pid=4893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303462346161643334386663616330643631366339396231333838 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4085 pid=4893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303462346161643334386663616330643631366339396231333838 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit: BPF prog-id=211 op=LOAD Aug 13 00:05:48.723000 audit[4893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4085 pid=4893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303462346161643334386663616330643631366339396231333838 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit: BPF prog-id=212 op=LOAD Aug 13 00:05:48.723000 audit[4893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4085 pid=4893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303462346161643334386663616330643631366339396231333838 Aug 13 00:05:48.723000 audit: BPF prog-id=212 op=UNLOAD Aug 13 00:05:48.723000 audit: BPF prog-id=211 op=UNLOAD Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { perfmon } for pid=4893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit[4893]: AVC avc: denied { bpf } for pid=4893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:48.723000 audit: BPF prog-id=213 op=LOAD Aug 13 00:05:48.723000 audit[4893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4085 pid=4893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303462346161643334386663616330643631366339396231333838 Aug 13 00:05:48.775172 env[1470]: time="2025-08-13T00:05:48.775132287Z" level=info msg="StartContainer for \"bf04b4aad348fcac0d616c99b13884cbed1959c903f7ff803618b0afa7032978\" returns successfully" Aug 13 00:05:48.835744 kubelet[2482]: I0813 00:05:48.835633 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-n6vrt" podStartSLOduration=53.835605776 podStartE2EDuration="53.835605776s" podCreationTimestamp="2025-08-13 00:04:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:05:48.83508049 +0000 UTC m=+59.344227556" watchObservedRunningTime="2025-08-13 00:05:48.835605776 +0000 UTC m=+59.344752842" Aug 13 00:05:48.863586 kubelet[2482]: I0813 00:05:48.863530 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5bbbfc55d5-c5zbr" podStartSLOduration=30.410644145 podStartE2EDuration="35.863515073s" podCreationTimestamp="2025-08-13 00:05:13 +0000 UTC" firstStartedPulling="2025-08-13 00:05:43.087961134 +0000 UTC m=+53.597108200" lastFinishedPulling="2025-08-13 00:05:48.540832062 +0000 UTC m=+59.049979128" observedRunningTime="2025-08-13 00:05:48.850316434 +0000 UTC m=+59.359463500" watchObservedRunningTime="2025-08-13 00:05:48.863515073 +0000 UTC m=+59.372662139" Aug 13 00:05:48.887000 audit[4926]: NETFILTER_CFG table=filter:120 family=2 entries=14 op=nft_register_rule pid=4926 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:48.887000 audit[4926]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc5cc2e90 a2=0 a3=1 items=0 ppid=2589 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.887000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:48.892000 audit[4926]: NETFILTER_CFG table=nat:121 family=2 entries=44 op=nft_register_rule pid=4926 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:48.892000 audit[4926]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffc5cc2e90 a2=0 a3=1 items=0 ppid=2589 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.892000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:48.920000 audit[4929]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=4929 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:48.920000 audit[4929]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff6763d10 a2=0 a3=1 items=0 ppid=2589 pid=4929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.920000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:48.947000 audit[4929]: NETFILTER_CFG table=nat:123 family=2 entries=56 op=nft_register_chain pid=4929 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:48.947000 audit[4929]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=fffff6763d10 a2=0 a3=1 items=0 ppid=2589 pid=4929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:48.947000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:49.414355 systemd-networkd[1624]: calic42a923a7b5: Gained IPv6LL Aug 13 00:05:49.594564 env[1470]: time="2025-08-13T00:05:49.594526477Z" level=info msg="StopPodSandbox for \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\"" Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.646 [WARNING][4939] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0", GenerateName:"calico-apiserver-db67c69c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1dd3d88d-3f62-4e35-8832-966cbdf918e8", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"db67c69c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37", Pod:"calico-apiserver-db67c69c4-f8bkz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali075463155a8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.647 [INFO][4939] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.647 [INFO][4939] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" iface="eth0" netns="" Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.647 [INFO][4939] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.647 [INFO][4939] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.682 [INFO][4948] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" HandleID="k8s-pod-network.bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.682 [INFO][4948] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.682 [INFO][4948] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.692 [WARNING][4948] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" HandleID="k8s-pod-network.bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.692 [INFO][4948] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" HandleID="k8s-pod-network.bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.694 [INFO][4948] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:49.696990 env[1470]: 2025-08-13 00:05:49.695 [INFO][4939] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:49.696990 env[1470]: time="2025-08-13T00:05:49.696950377Z" level=info msg="TearDown network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\" successfully" Aug 13 00:05:49.696990 env[1470]: time="2025-08-13T00:05:49.696984737Z" level=info msg="StopPodSandbox for \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\" returns successfully" Aug 13 00:05:49.697643 env[1470]: time="2025-08-13T00:05:49.697478663Z" level=info msg="RemovePodSandbox for \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\"" Aug 13 00:05:49.697643 env[1470]: time="2025-08-13T00:05:49.697507784Z" level=info msg="Forcibly stopping sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\"" Aug 13 00:05:49.812503 kubelet[2482]: I0813 00:05:49.812472 2482 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.755 [WARNING][4964] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0", GenerateName:"calico-apiserver-db67c69c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1dd3d88d-3f62-4e35-8832-966cbdf918e8", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"db67c69c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37", Pod:"calico-apiserver-db67c69c4-f8bkz", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali075463155a8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.815 [INFO][4964] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.815 [INFO][4964] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" iface="eth0" netns="" Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.815 [INFO][4964] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.815 [INFO][4964] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.838 [INFO][4971] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" HandleID="k8s-pod-network.bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.838 [INFO][4971] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.838 [INFO][4971] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.848 [WARNING][4971] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" HandleID="k8s-pod-network.bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.848 [INFO][4971] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" HandleID="k8s-pod-network.bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.849 [INFO][4971] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:49.851899 env[1470]: 2025-08-13 00:05:49.850 [INFO][4964] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00" Aug 13 00:05:49.852379 env[1470]: time="2025-08-13T00:05:49.851929182Z" level=info msg="TearDown network for sandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\" successfully" Aug 13 00:05:49.926364 systemd-networkd[1624]: cali9b72a076d11: Gained IPv6LL Aug 13 00:05:49.928653 env[1470]: time="2025-08-13T00:05:49.928607735Z" level=info msg="RemovePodSandbox \"bcfa88bf455df5134bdb635d1945d7c01d798992e7d6eae41dca470027847d00\" returns successfully" Aug 13 00:05:49.929138 env[1470]: time="2025-08-13T00:05:49.929110861Z" level=info msg="StopPodSandbox for \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\"" Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:49.973 [WARNING][4985] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"155955ac-e694-496e-8435-16aca9011621", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783", Pod:"csi-node-driver-5s8h8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.21.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8baaad35256", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:49.973 [INFO][4985] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:49.973 [INFO][4985] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" iface="eth0" netns="" Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:49.973 [INFO][4985] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:49.973 [INFO][4985] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:50.001 [INFO][4992] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" HandleID="k8s-pod-network.a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:50.001 [INFO][4992] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:50.001 [INFO][4992] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:50.009 [WARNING][4992] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" HandleID="k8s-pod-network.a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:50.009 [INFO][4992] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" HandleID="k8s-pod-network.a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:50.011 [INFO][4992] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:50.013952 env[1470]: 2025-08-13 00:05:50.012 [INFO][4985] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:50.013952 env[1470]: time="2025-08-13T00:05:50.013919629Z" level=info msg="TearDown network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\" successfully" Aug 13 00:05:50.014408 env[1470]: time="2025-08-13T00:05:50.013956349Z" level=info msg="StopPodSandbox for \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\" returns successfully" Aug 13 00:05:50.019267 env[1470]: time="2025-08-13T00:05:50.015495727Z" level=info msg="RemovePodSandbox for \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\"" Aug 13 00:05:50.019267 env[1470]: time="2025-08-13T00:05:50.015532248Z" level=info msg="Forcibly stopping sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\"" Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.051 [WARNING][5008] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"155955ac-e694-496e-8435-16aca9011621", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783", Pod:"csi-node-driver-5s8h8", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.21.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali8baaad35256", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.051 [INFO][5008] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.051 [INFO][5008] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" iface="eth0" netns="" Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.051 [INFO][5008] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.051 [INFO][5008] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.074 [INFO][5015] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" HandleID="k8s-pod-network.a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.074 [INFO][5015] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.075 [INFO][5015] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.083 [WARNING][5015] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" HandleID="k8s-pod-network.a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.083 [INFO][5015] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" HandleID="k8s-pod-network.a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Workload="ci--3510.3.8--a--c7286a0eab-k8s-csi--node--driver--5s8h8-eth0" Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.084 [INFO][5015] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:50.087516 env[1470]: 2025-08-13 00:05:50.086 [INFO][5008] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2" Aug 13 00:05:50.087928 env[1470]: time="2025-08-13T00:05:50.087539655Z" level=info msg="TearDown network for sandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\" successfully" Aug 13 00:05:50.111640 env[1470]: time="2025-08-13T00:05:50.111601578Z" level=info msg="RemovePodSandbox \"a277c858d430cfd9de868643b450674486b86b6421b96ed3f5ae9c55b433ccf2\" returns successfully" Aug 13 00:05:50.112132 env[1470]: time="2025-08-13T00:05:50.112104624Z" level=info msg="StopPodSandbox for \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\"" Aug 13 00:05:50.134000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:50.140293 kernel: kauditd_printk_skb: 575 callbacks suppressed Aug 13 00:05:50.140360 kernel: audit: type=1400 audit(1755043550.134:1392): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:50.165283 kernel: audit: type=1300 audit(1755043550.134:1392): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b80400 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:05:50.134000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b80400 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:05:50.134000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:50.217887 kernel: audit: type=1327 audit(1755043550.134:1392): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:50.161000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:50.239504 kernel: audit: type=1400 audit(1755043550.161:1393): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:50.161000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b805a0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:05:50.269259 kernel: audit: type=1300 audit(1755043550.161:1393): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b805a0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:05:50.161000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:50.292245 kernel: audit: type=1327 audit(1755043550.161:1393): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:50.161000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:50.313826 kernel: audit: type=1400 audit(1755043550.161:1394): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:50.161000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b805c0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:05:50.341866 kernel: audit: type=1300 audit(1755043550.161:1394): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b805c0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:05:50.161000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:50.365346 kernel: audit: type=1327 audit(1755043550.161:1394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:50.161000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:50.386699 kernel: audit: type=1400 audit(1755043550.161:1395): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:05:50.161000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b805e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:05:50.161000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.342 [WARNING][5029] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.342 [INFO][5029] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.342 [INFO][5029] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" iface="eth0" netns="" Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.342 [INFO][5029] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.342 [INFO][5029] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.368 [INFO][5036] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" HandleID="k8s-pod-network.0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.368 [INFO][5036] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.368 [INFO][5036] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.377 [WARNING][5036] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" HandleID="k8s-pod-network.0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.377 [INFO][5036] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" HandleID="k8s-pod-network.0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.378 [INFO][5036] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:50.389730 env[1470]: 2025-08-13 00:05:50.388 [INFO][5029] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:50.390190 env[1470]: time="2025-08-13T00:05:50.390152653Z" level=info msg="TearDown network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\" successfully" Aug 13 00:05:50.390285 env[1470]: time="2025-08-13T00:05:50.390243694Z" level=info msg="StopPodSandbox for \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\" returns successfully" Aug 13 00:05:50.391312 env[1470]: time="2025-08-13T00:05:50.390766541Z" level=info msg="RemovePodSandbox for \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\"" Aug 13 00:05:50.391312 env[1470]: time="2025-08-13T00:05:50.390801261Z" level=info msg="Forcibly stopping sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\"" Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.437 [WARNING][5051] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.437 [INFO][5051] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.437 [INFO][5051] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" iface="eth0" netns="" Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.437 [INFO][5051] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.438 [INFO][5051] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.460 [INFO][5058] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" HandleID="k8s-pod-network.0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.461 [INFO][5058] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.461 [INFO][5058] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.470 [WARNING][5058] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" HandleID="k8s-pod-network.0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.471 [INFO][5058] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" HandleID="k8s-pod-network.0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Workload="ci--3510.3.8--a--c7286a0eab-k8s-whisker--558cbf8d66--ksrqt-eth0" Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.472 [INFO][5058] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:50.475891 env[1470]: 2025-08-13 00:05:50.474 [INFO][5051] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54" Aug 13 00:05:50.476331 env[1470]: time="2025-08-13T00:05:50.475906662Z" level=info msg="TearDown network for sandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\" successfully" Aug 13 00:05:50.503770 env[1470]: time="2025-08-13T00:05:50.503721749Z" level=info msg="RemovePodSandbox \"0f25e82220602e1ea3f181ffa0ffd02915d2dd860f2e1626a16970ae0ca2bb54\" returns successfully" Aug 13 00:05:50.504296 env[1470]: time="2025-08-13T00:05:50.504245275Z" level=info msg="StopPodSandbox for \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\"" Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.555 [WARNING][5073] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0", GenerateName:"calico-apiserver-5bbbfc55d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"03d26822-c6e0-4d53-995b-0c48022b6e2b", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5bbbfc55d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2", Pod:"calico-apiserver-5bbbfc55d5-c5zbr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali823512fb2c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.555 [INFO][5073] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.555 [INFO][5073] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" iface="eth0" netns="" Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.555 [INFO][5073] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.555 [INFO][5073] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.585 [INFO][5080] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" HandleID="k8s-pod-network.0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.585 [INFO][5080] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.586 [INFO][5080] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.594 [WARNING][5080] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" HandleID="k8s-pod-network.0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.594 [INFO][5080] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" HandleID="k8s-pod-network.0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.597 [INFO][5080] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:50.599574 env[1470]: 2025-08-13 00:05:50.598 [INFO][5073] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:50.600054 env[1470]: time="2025-08-13T00:05:50.600022201Z" level=info msg="TearDown network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\" successfully" Aug 13 00:05:50.600122 env[1470]: time="2025-08-13T00:05:50.600104922Z" level=info msg="StopPodSandbox for \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\" returns successfully" Aug 13 00:05:50.600598 env[1470]: time="2025-08-13T00:05:50.600575288Z" level=info msg="RemovePodSandbox for \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\"" Aug 13 00:05:50.600732 env[1470]: time="2025-08-13T00:05:50.600694329Z" level=info msg="Forcibly stopping sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\"" Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.647 [WARNING][5095] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0", GenerateName:"calico-apiserver-5bbbfc55d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"03d26822-c6e0-4d53-995b-0c48022b6e2b", ResourceVersion:"1036", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5bbbfc55d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"a777c7b854aba31ccbb98000d3a12643e2dbb1bbb3218c64c4cc35a1b36162c2", Pod:"calico-apiserver-5bbbfc55d5-c5zbr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali823512fb2c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.647 [INFO][5095] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.647 [INFO][5095] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" iface="eth0" netns="" Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.647 [INFO][5095] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.647 [INFO][5095] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.685 [INFO][5102] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" HandleID="k8s-pod-network.0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.686 [INFO][5102] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.687 [INFO][5102] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.698 [WARNING][5102] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" HandleID="k8s-pod-network.0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.698 [INFO][5102] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" HandleID="k8s-pod-network.0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--c5zbr-eth0" Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.701 [INFO][5102] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:50.706971 env[1470]: 2025-08-13 00:05:50.704 [INFO][5095] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba" Aug 13 00:05:50.707583 env[1470]: time="2025-08-13T00:05:50.707118181Z" level=info msg="TearDown network for sandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\" successfully" Aug 13 00:05:50.734452 env[1470]: time="2025-08-13T00:05:50.734401702Z" level=info msg="RemovePodSandbox \"0161073c477d51ac159392d92cd1e2366694ed8a45c72f4c2c5ba4b54908e8ba\" returns successfully" Aug 13 00:05:50.734991 env[1470]: time="2025-08-13T00:05:50.734960468Z" level=info msg="StopPodSandbox for \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\"" Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.785 [WARNING][5117] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"0fe71868-7b1a-4e41-a3bb-561f2af259b6", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 4, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c", Pod:"coredns-674b8bbfcf-n6vrt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.21.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic42a923a7b5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.786 [INFO][5117] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.786 [INFO][5117] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" iface="eth0" netns="" Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.786 [INFO][5117] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.786 [INFO][5117] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.835 [INFO][5124] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" HandleID="k8s-pod-network.096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.835 [INFO][5124] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.835 [INFO][5124] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.845 [WARNING][5124] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" HandleID="k8s-pod-network.096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.845 [INFO][5124] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" HandleID="k8s-pod-network.096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.847 [INFO][5124] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:50.849458 env[1470]: 2025-08-13 00:05:50.848 [INFO][5117] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:50.851008 env[1470]: time="2025-08-13T00:05:50.849934340Z" level=info msg="TearDown network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\" successfully" Aug 13 00:05:50.851120 env[1470]: time="2025-08-13T00:05:50.851097554Z" level=info msg="StopPodSandbox for \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\" returns successfully" Aug 13 00:05:50.851688 env[1470]: time="2025-08-13T00:05:50.851666641Z" level=info msg="RemovePodSandbox for \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\"" Aug 13 00:05:50.851826 env[1470]: time="2025-08-13T00:05:50.851788722Z" level=info msg="Forcibly stopping sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\"" Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.895 [WARNING][5138] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"0fe71868-7b1a-4e41-a3bb-561f2af259b6", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 4, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"276432184ce6f59d7364432463828810db32393dff5fc1e1eaa4507b7a2ee16c", Pod:"coredns-674b8bbfcf-n6vrt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.21.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic42a923a7b5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.895 [INFO][5138] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.895 [INFO][5138] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" iface="eth0" netns="" Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.895 [INFO][5138] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.895 [INFO][5138] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.931 [INFO][5146] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" HandleID="k8s-pod-network.096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.931 [INFO][5146] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.931 [INFO][5146] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.941 [WARNING][5146] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" HandleID="k8s-pod-network.096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.941 [INFO][5146] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" HandleID="k8s-pod-network.096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--n6vrt-eth0" Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.942 [INFO][5146] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:50.944835 env[1470]: 2025-08-13 00:05:50.943 [INFO][5138] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b" Aug 13 00:05:50.945427 env[1470]: time="2025-08-13T00:05:50.945386023Z" level=info msg="TearDown network for sandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\" successfully" Aug 13 00:05:51.013833 env[1470]: time="2025-08-13T00:05:51.013783625Z" level=info msg="RemovePodSandbox \"096283d916045dfaec03161f09cdd57fe0ec94b844224fe3dcefe48f31f5909b\" returns successfully" Aug 13 00:05:51.014271 env[1470]: time="2025-08-13T00:05:51.014228110Z" level=info msg="StopPodSandbox for \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\"" Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.091 [WARNING][5160] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"feacf951-12e6-4ab1-a3db-59528fac3a21", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355", Pod:"goldmane-768f4c5c69-hslpg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.21.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali67e22204118", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.091 [INFO][5160] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.091 [INFO][5160] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" iface="eth0" netns="" Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.091 [INFO][5160] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.091 [INFO][5160] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.165 [INFO][5167] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" HandleID="k8s-pod-network.10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.165 [INFO][5167] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.165 [INFO][5167] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.174 [WARNING][5167] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" HandleID="k8s-pod-network.10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.174 [INFO][5167] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" HandleID="k8s-pod-network.10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.175 [INFO][5167] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:51.179212 env[1470]: 2025-08-13 00:05:51.177 [INFO][5160] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:51.179212 env[1470]: time="2025-08-13T00:05:51.178407018Z" level=info msg="TearDown network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\" successfully" Aug 13 00:05:51.179212 env[1470]: time="2025-08-13T00:05:51.178437378Z" level=info msg="StopPodSandbox for \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\" returns successfully" Aug 13 00:05:51.180432 env[1470]: time="2025-08-13T00:05:51.180406641Z" level=info msg="RemovePodSandbox for \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\"" Aug 13 00:05:51.180599 env[1470]: time="2025-08-13T00:05:51.180534723Z" level=info msg="Forcibly stopping sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\"" Aug 13 00:05:51.196000 audit[4904]: AVC avc: denied { watch } for pid=4904 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_05_30.812021549/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c30,c278 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c30,c278 tclass=file permissive=0 Aug 13 00:05:51.196000 audit[4904]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001014cc0 a2=fc6 a3=0 items=0 ppid=4085 pid=4904 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c30,c278 key=(null) Aug 13 00:05:51.196000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.248 [WARNING][5182] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"feacf951-12e6-4ab1-a3db-59528fac3a21", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355", Pod:"goldmane-768f4c5c69-hslpg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.21.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali67e22204118", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.248 [INFO][5182] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.248 [INFO][5182] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" iface="eth0" netns="" Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.248 [INFO][5182] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.248 [INFO][5182] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.272 [INFO][5189] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" HandleID="k8s-pod-network.10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.273 [INFO][5189] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.273 [INFO][5189] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.281 [WARNING][5189] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" HandleID="k8s-pod-network.10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.281 [INFO][5189] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" HandleID="k8s-pod-network.10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Workload="ci--3510.3.8--a--c7286a0eab-k8s-goldmane--768f4c5c69--hslpg-eth0" Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.282 [INFO][5189] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:51.285652 env[1470]: 2025-08-13 00:05:51.284 [INFO][5182] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501" Aug 13 00:05:51.286211 env[1470]: time="2025-08-13T00:05:51.285684864Z" level=info msg="TearDown network for sandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\" successfully" Aug 13 00:05:51.472426 env[1470]: time="2025-08-13T00:05:51.471077778Z" level=info msg="RemovePodSandbox \"10aea326dcff05ff020ffbb7464c30bca608d96bc2088b8f64cf9fecb9eac501\" returns successfully" Aug 13 00:05:51.472426 env[1470]: time="2025-08-13T00:05:51.471573344Z" level=info msg="StopPodSandbox for \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\"" Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.520 [WARNING][5205] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0", GenerateName:"calico-apiserver-db67c69c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"6681f5a2-e210-41c8-bad6-4e82c91ad26f", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"db67c69c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75", Pod:"calico-apiserver-db67c69c4-9hpz2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9b72a076d11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.520 [INFO][5205] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.520 [INFO][5205] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" iface="eth0" netns="" Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.520 [INFO][5205] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.520 [INFO][5205] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.552 [INFO][5213] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" HandleID="k8s-pod-network.016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.552 [INFO][5213] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.553 [INFO][5213] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.561 [WARNING][5213] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" HandleID="k8s-pod-network.016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.561 [INFO][5213] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" HandleID="k8s-pod-network.016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.563 [INFO][5213] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:51.565619 env[1470]: 2025-08-13 00:05:51.564 [INFO][5205] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:51.566057 env[1470]: time="2025-08-13T00:05:51.565644557Z" level=info msg="TearDown network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\" successfully" Aug 13 00:05:51.566057 env[1470]: time="2025-08-13T00:05:51.565674157Z" level=info msg="StopPodSandbox for \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\" returns successfully" Aug 13 00:05:51.566531 env[1470]: time="2025-08-13T00:05:51.566502047Z" level=info msg="RemovePodSandbox for \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\"" Aug 13 00:05:51.566593 env[1470]: time="2025-08-13T00:05:51.566537727Z" level=info msg="Forcibly stopping sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\"" Aug 13 00:05:51.656767 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount800321675.mount: Deactivated successfully. Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.622 [WARNING][5229] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0", GenerateName:"calico-apiserver-db67c69c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"6681f5a2-e210-41c8-bad6-4e82c91ad26f", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"db67c69c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75", Pod:"calico-apiserver-db67c69c4-9hpz2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9b72a076d11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.622 [INFO][5229] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.622 [INFO][5229] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" iface="eth0" netns="" Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.622 [INFO][5229] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.622 [INFO][5229] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.664 [INFO][5236] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" HandleID="k8s-pod-network.016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.664 [INFO][5236] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.664 [INFO][5236] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.672 [WARNING][5236] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" HandleID="k8s-pod-network.016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.672 [INFO][5236] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" HandleID="k8s-pod-network.016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.673 [INFO][5236] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:51.676760 env[1470]: 2025-08-13 00:05:51.675 [INFO][5229] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302" Aug 13 00:05:51.677294 env[1470]: time="2025-08-13T00:05:51.677233533Z" level=info msg="TearDown network for sandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\" successfully" Aug 13 00:05:51.737705 env[1470]: time="2025-08-13T00:05:51.736363100Z" level=info msg="RemovePodSandbox \"016f45051767bdbbad9de0dafd3c7d7d86a8886d56784291ec430348760be302\" returns successfully" Aug 13 00:05:51.737705 env[1470]: time="2025-08-13T00:05:51.736896506Z" level=info msg="StopPodSandbox for \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\"" Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.769 [WARNING][5251] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"201b1d82-04f8-4f80-9cbd-95654fdd542e", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 4, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d", Pod:"coredns-674b8bbfcf-9zbtc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.21.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali49540aaddd0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.769 [INFO][5251] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.769 [INFO][5251] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" iface="eth0" netns="" Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.769 [INFO][5251] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.769 [INFO][5251] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.789 [INFO][5259] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" HandleID="k8s-pod-network.a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.789 [INFO][5259] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.789 [INFO][5259] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.798 [WARNING][5259] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" HandleID="k8s-pod-network.a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.798 [INFO][5259] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" HandleID="k8s-pod-network.a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.800 [INFO][5259] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:51.802788 env[1470]: 2025-08-13 00:05:51.801 [INFO][5251] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:51.807659 env[1470]: time="2025-08-13T00:05:51.802988474Z" level=info msg="TearDown network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\" successfully" Aug 13 00:05:51.807659 env[1470]: time="2025-08-13T00:05:51.803027234Z" level=info msg="StopPodSandbox for \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\" returns successfully" Aug 13 00:05:51.807659 env[1470]: time="2025-08-13T00:05:51.803476800Z" level=info msg="RemovePodSandbox for \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\"" Aug 13 00:05:51.807659 env[1470]: time="2025-08-13T00:05:51.803509360Z" level=info msg="Forcibly stopping sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\"" Aug 13 00:05:51.872953 env[1470]: time="2025-08-13T00:05:51.872897126Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.846 [WARNING][5273] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"201b1d82-04f8-4f80-9cbd-95654fdd542e", ResourceVersion:"982", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 4, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"d6749b5f9bd8eb8d114ecd75afad401799ca4ab066e0200d5a2147e14cdd559d", Pod:"coredns-674b8bbfcf-9zbtc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.21.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali49540aaddd0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.846 [INFO][5273] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.846 [INFO][5273] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" iface="eth0" netns="" Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.846 [INFO][5273] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.847 [INFO][5273] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.865 [INFO][5280] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" HandleID="k8s-pod-network.a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.865 [INFO][5280] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.866 [INFO][5280] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.875 [WARNING][5280] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" HandleID="k8s-pod-network.a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.875 [INFO][5280] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" HandleID="k8s-pod-network.a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Workload="ci--3510.3.8--a--c7286a0eab-k8s-coredns--674b8bbfcf--9zbtc-eth0" Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.876 [INFO][5280] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:51.879572 env[1470]: 2025-08-13 00:05:51.878 [INFO][5273] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124" Aug 13 00:05:51.879947 env[1470]: time="2025-08-13T00:05:51.879588404Z" level=info msg="TearDown network for sandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\" successfully" Aug 13 00:05:51.911305 env[1470]: time="2025-08-13T00:05:51.911278292Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:51.922103 env[1470]: time="2025-08-13T00:05:51.922063337Z" level=info msg="RemovePodSandbox \"a04770375c79298001570c91d4453fae2740d98ffcf7bd2c4a96da63f37b3124\" returns successfully" Aug 13 00:05:51.922599 env[1470]: time="2025-08-13T00:05:51.922561103Z" level=info msg="StopPodSandbox for \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\"" Aug 13 00:05:51.939553 env[1470]: time="2025-08-13T00:05:51.939516380Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:51.951627 env[1470]: time="2025-08-13T00:05:51.951587360Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:51.952461 env[1470]: time="2025-08-13T00:05:51.952430210Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Aug 13 00:05:51.956791 env[1470]: time="2025-08-13T00:05:51.956764660Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 00:05:51.969350 env[1470]: time="2025-08-13T00:05:51.969315126Z" level=info msg="CreateContainer within sandbox \"17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:51.974 [WARNING][5294] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0", GenerateName:"calico-kube-controllers-689f76fcb5-", Namespace:"calico-system", SelfLink:"", UID:"3fc74946-2172-4092-b038-3fbf914f9ea0", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"689f76fcb5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142", Pod:"calico-kube-controllers-689f76fcb5-r25jb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.21.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid4d3dde5e95", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:51.975 [INFO][5294] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:51.975 [INFO][5294] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" iface="eth0" netns="" Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:51.975 [INFO][5294] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:51.975 [INFO][5294] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:51.995 [INFO][5303] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" HandleID="k8s-pod-network.62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:51.995 [INFO][5303] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:51.995 [INFO][5303] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:52.004 [WARNING][5303] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" HandleID="k8s-pod-network.62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:52.004 [INFO][5303] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" HandleID="k8s-pod-network.62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:52.006 [INFO][5303] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:52.009505 env[1470]: 2025-08-13 00:05:52.007 [INFO][5294] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:52.009505 env[1470]: time="2025-08-13T00:05:52.008697743Z" level=info msg="TearDown network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\" successfully" Aug 13 00:05:52.009505 env[1470]: time="2025-08-13T00:05:52.008725303Z" level=info msg="StopPodSandbox for \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\" returns successfully" Aug 13 00:05:52.010864 env[1470]: time="2025-08-13T00:05:52.010833487Z" level=info msg="RemovePodSandbox for \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\"" Aug 13 00:05:52.010946 env[1470]: time="2025-08-13T00:05:52.010869448Z" level=info msg="Forcibly stopping sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\"" Aug 13 00:05:52.049276 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2804240901.mount: Deactivated successfully. Aug 13 00:05:52.098481 env[1470]: time="2025-08-13T00:05:52.098421293Z" level=info msg="CreateContainer within sandbox \"17c2fdbbc0e9e5768b5399c93b73433a0d9321e665bffd02a929de92842ae0a6\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"5a8829aec64bbe53f5e1a29f9428cd3f581bbd065ec4364cf9365944d93ba0ef\"" Aug 13 00:05:52.101161 env[1470]: time="2025-08-13T00:05:52.099166981Z" level=info msg="StartContainer for \"5a8829aec64bbe53f5e1a29f9428cd3f581bbd065ec4364cf9365944d93ba0ef\"" Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.063 [WARNING][5318] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0", GenerateName:"calico-kube-controllers-689f76fcb5-", Namespace:"calico-system", SelfLink:"", UID:"3fc74946-2172-4092-b038-3fbf914f9ea0", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 5, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"689f76fcb5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142", Pod:"calico-kube-controllers-689f76fcb5-r25jb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.21.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid4d3dde5e95", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.063 [INFO][5318] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.063 [INFO][5318] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" iface="eth0" netns="" Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.063 [INFO][5318] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.063 [INFO][5318] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.082 [INFO][5325] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" HandleID="k8s-pod-network.62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.082 [INFO][5325] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.082 [INFO][5325] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.090 [WARNING][5325] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" HandleID="k8s-pod-network.62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.094 [INFO][5325] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" HandleID="k8s-pod-network.62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--kube--controllers--689f76fcb5--r25jb-eth0" Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.096 [INFO][5325] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:05:52.102336 env[1470]: 2025-08-13 00:05:52.097 [INFO][5318] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81" Aug 13 00:05:52.102800 env[1470]: time="2025-08-13T00:05:52.102776343Z" level=info msg="TearDown network for sandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\" successfully" Aug 13 00:05:52.127758 systemd[1]: run-containerd-runc-k8s.io-5a8829aec64bbe53f5e1a29f9428cd3f581bbd065ec4364cf9365944d93ba0ef-runc.mZlk7u.mount: Deactivated successfully. Aug 13 00:05:52.129264 systemd[1]: Started cri-containerd-5a8829aec64bbe53f5e1a29f9428cd3f581bbd065ec4364cf9365944d93ba0ef.scope. Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.140000 audit: BPF prog-id=214 op=LOAD Aug 13 00:05:52.147716 env[1470]: time="2025-08-13T00:05:52.140020050Z" level=info msg="RemovePodSandbox \"62a1fc687e546cb39cea0b39843d788868b3ba94e9d76bb5702346bc76646f81\" returns successfully" Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3928 pid=5339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383832396165633634626265353366356531613239663934323863 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3928 pid=5339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383832396165633634626265353366356531613239663934323863 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit: BPF prog-id=215 op=LOAD Aug 13 00:05:52.148000 audit[5339]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3928 pid=5339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383832396165633634626265353366356531613239663934323863 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit: BPF prog-id=216 op=LOAD Aug 13 00:05:52.148000 audit[5339]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3928 pid=5339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383832396165633634626265353366356531613239663934323863 Aug 13 00:05:52.148000 audit: BPF prog-id=216 op=UNLOAD Aug 13 00:05:52.148000 audit: BPF prog-id=215 op=UNLOAD Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { perfmon } for pid=5339 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit[5339]: AVC avc: denied { bpf } for pid=5339 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.148000 audit: BPF prog-id=217 op=LOAD Aug 13 00:05:52.148000 audit[5339]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3928 pid=5339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561383832396165633634626265353366356531613239663934323863 Aug 13 00:05:52.181552 env[1470]: time="2025-08-13T00:05:52.181511447Z" level=info msg="StartContainer for \"5a8829aec64bbe53f5e1a29f9428cd3f581bbd065ec4364cf9365944d93ba0ef\" returns successfully" Aug 13 00:05:52.346745 env[1470]: time="2025-08-13T00:05:52.346698823Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:52.370348 env[1470]: time="2025-08-13T00:05:52.370305494Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:52.387614 env[1470]: time="2025-08-13T00:05:52.387587412Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:52.399309 env[1470]: time="2025-08-13T00:05:52.399246906Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:52.399888 env[1470]: time="2025-08-13T00:05:52.399859913Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Aug 13 00:05:52.401283 env[1470]: time="2025-08-13T00:05:52.401225169Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Aug 13 00:05:52.413983 env[1470]: time="2025-08-13T00:05:52.413949555Z" level=info msg="CreateContainer within sandbox \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 00:05:52.528830 env[1470]: time="2025-08-13T00:05:52.528772753Z" level=info msg="CreateContainer within sandbox \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\"" Aug 13 00:05:52.529440 env[1470]: time="2025-08-13T00:05:52.529405760Z" level=info msg="StartContainer for \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\"" Aug 13 00:05:52.543349 systemd[1]: Started cri-containerd-3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0.scope. Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.558000 audit: BPF prog-id=218 op=LOAD Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4391 pid=5381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366383661393735666164396431393139313063306437656665636265 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4391 pid=5381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366383661393735666164396431393139313063306437656665636265 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.559000 audit: BPF prog-id=219 op=LOAD Aug 13 00:05:52.559000 audit[5381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4391 pid=5381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366383661393735666164396431393139313063306437656665636265 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit: BPF prog-id=220 op=LOAD Aug 13 00:05:52.560000 audit[5381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4391 pid=5381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366383661393735666164396431393139313063306437656665636265 Aug 13 00:05:52.560000 audit: BPF prog-id=220 op=UNLOAD Aug 13 00:05:52.560000 audit: BPF prog-id=219 op=UNLOAD Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { perfmon } for pid=5381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit[5381]: AVC avc: denied { bpf } for pid=5381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:52.560000 audit: BPF prog-id=221 op=LOAD Aug 13 00:05:52.560000 audit[5381]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4391 pid=5381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366383661393735666164396431393139313063306437656665636265 Aug 13 00:05:52.592405 env[1470]: time="2025-08-13T00:05:52.592351883Z" level=info msg="StartContainer for \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\" returns successfully" Aug 13 00:05:52.853667 kubelet[2482]: I0813 00:05:52.853085 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-565d5d6578-ctqdx" podStartSLOduration=2.865540569 podStartE2EDuration="12.853070716s" podCreationTimestamp="2025-08-13 00:05:40 +0000 UTC" firstStartedPulling="2025-08-13 00:05:41.967482013 +0000 UTC m=+52.476629039" lastFinishedPulling="2025-08-13 00:05:51.95501212 +0000 UTC m=+62.464159186" observedRunningTime="2025-08-13 00:05:52.852063464 +0000 UTC m=+63.361210530" watchObservedRunningTime="2025-08-13 00:05:52.853070716 +0000 UTC m=+63.362217782" Aug 13 00:05:52.889000 audit[5414]: NETFILTER_CFG table=filter:124 family=2 entries=13 op=nft_register_rule pid=5414 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:52.889000 audit[5414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe64f4420 a2=0 a3=1 items=0 ppid=2589 pid=5414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.889000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:52.894000 audit[5414]: NETFILTER_CFG table=nat:125 family=2 entries=27 op=nft_register_chain pid=5414 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:52.894000 audit[5414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffe64f4420 a2=0 a3=1 items=0 ppid=2589 pid=5414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.894000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:52.906000 audit[5416]: NETFILTER_CFG table=filter:126 family=2 entries=12 op=nft_register_rule pid=5416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:52.906000 audit[5416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe68ae260 a2=0 a3=1 items=0 ppid=2589 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.906000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:52.910000 audit[5416]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=5416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:05:52.910000 audit[5416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe68ae260 a2=0 a3=1 items=0 ppid=2589 pid=5416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:52.910000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:05:53.845780 kubelet[2482]: I0813 00:05:53.845750 2482 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:05:54.184000 audit[5392]: AVC avc: denied { watch } for pid=5392 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_05_30.2565598375/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c511,c806 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c511,c806 tclass=file permissive=0 Aug 13 00:05:54.184000 audit[5392]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f88c60 a2=fc6 a3=0 items=0 ppid=4391 pid=5392 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c511,c806 key=(null) Aug 13 00:05:54.184000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:05:54.384839 env[1470]: time="2025-08-13T00:05:54.384799426Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:54.403276 env[1470]: time="2025-08-13T00:05:54.403219552Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:54.416267 env[1470]: time="2025-08-13T00:05:54.416213978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:54.429716 env[1470]: time="2025-08-13T00:05:54.429674489Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Aug 13 00:05:54.431535 env[1470]: time="2025-08-13T00:05:54.431505910Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Aug 13 00:05:54.431823 env[1470]: time="2025-08-13T00:05:54.431798153Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:54.444105 env[1470]: time="2025-08-13T00:05:54.444029130Z" level=info msg="CreateContainer within sandbox \"4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Aug 13 00:05:54.513368 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2790218208.mount: Deactivated successfully. Aug 13 00:05:54.546605 env[1470]: time="2025-08-13T00:05:54.546566640Z" level=info msg="CreateContainer within sandbox \"4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"af91e86fd3a8ac6e80786bffe8aa69bd0ea5ec2c7c2bc25164d97bda85758d6e\"" Aug 13 00:05:54.548896 env[1470]: time="2025-08-13T00:05:54.547459690Z" level=info msg="StartContainer for \"af91e86fd3a8ac6e80786bffe8aa69bd0ea5ec2c7c2bc25164d97bda85758d6e\"" Aug 13 00:05:54.578893 systemd[1]: Started cri-containerd-af91e86fd3a8ac6e80786bffe8aa69bd0ea5ec2c7c2bc25164d97bda85758d6e.scope. Aug 13 00:05:54.590000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.590000 audit[5427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4439 pid=5427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:54.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166393165383666643361386163366538303738366266666538616136 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit: BPF prog-id=222 op=LOAD Aug 13 00:05:54.591000 audit[5427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4439 pid=5427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:54.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166393165383666643361386163366538303738366266666538616136 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit: BPF prog-id=223 op=LOAD Aug 13 00:05:54.591000 audit[5427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4439 pid=5427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:54.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166393165383666643361386163366538303738366266666538616136 Aug 13 00:05:54.591000 audit: BPF prog-id=223 op=UNLOAD Aug 13 00:05:54.591000 audit: BPF prog-id=222 op=UNLOAD Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { perfmon } for pid=5427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit[5427]: AVC avc: denied { bpf } for pid=5427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:54.591000 audit: BPF prog-id=224 op=LOAD Aug 13 00:05:54.591000 audit[5427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4439 pid=5427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:54.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166393165383666643361386163366538303738366266666538616136 Aug 13 00:05:54.614469 env[1470]: time="2025-08-13T00:05:54.614421881Z" level=info msg="StartContainer for \"af91e86fd3a8ac6e80786bffe8aa69bd0ea5ec2c7c2bc25164d97bda85758d6e\" returns successfully" Aug 13 00:05:55.507377 systemd[1]: run-containerd-runc-k8s.io-af91e86fd3a8ac6e80786bffe8aa69bd0ea5ec2c7c2bc25164d97bda85758d6e-runc.Jv7B8x.mount: Deactivated successfully. Aug 13 00:05:57.694120 env[1470]: time="2025-08-13T00:05:57.694083362Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:57.720917 env[1470]: time="2025-08-13T00:05:57.720868733Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:57.732789 env[1470]: time="2025-08-13T00:05:57.732752582Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:57.744925 env[1470]: time="2025-08-13T00:05:57.744899314Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:05:57.745456 env[1470]: time="2025-08-13T00:05:57.745433000Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Aug 13 00:05:57.749287 env[1470]: time="2025-08-13T00:05:57.747725865Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Aug 13 00:05:57.775040 env[1470]: time="2025-08-13T00:05:57.775002201Z" level=info msg="CreateContainer within sandbox \"8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Aug 13 00:05:57.830415 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3251053693.mount: Deactivated successfully. Aug 13 00:05:57.862611 env[1470]: time="2025-08-13T00:05:57.862566551Z" level=info msg="CreateContainer within sandbox \"8f700e181fab1aa0ca28d4459c3c85b715413d71160e34350a4884576c6ae142\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874\"" Aug 13 00:05:57.863063 env[1470]: time="2025-08-13T00:05:57.863041076Z" level=info msg="StartContainer for \"cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874\"" Aug 13 00:05:57.882895 systemd[1]: Started cri-containerd-cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874.scope. Aug 13 00:05:57.906282 kernel: kauditd_printk_skb: 177 callbacks suppressed Aug 13 00:05:57.906380 kernel: audit: type=1400 audit(1755043557.900:1444): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.937574 kernel: audit: type=1400 audit(1755043557.900:1445): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.978465 kernel: audit: type=1400 audit(1755043557.900:1446): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.978562 kernel: audit: type=1400 audit(1755043557.900:1447): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.995608 kernel: audit: type=1400 audit(1755043557.900:1448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:58.012630 kernel: audit: type=1400 audit(1755043557.900:1449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:58.029301 kernel: audit: type=1400 audit(1755043557.900:1450): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:58.029387 env[1470]: time="2025-08-13T00:05:58.013171144Z" level=info msg="StartContainer for \"cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874\" returns successfully" Aug 13 00:05:57.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:58.046475 kernel: audit: type=1400 audit(1755043557.900:1451): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:58.064059 kernel: audit: type=1400 audit(1755043557.900:1452): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.904000 audit: BPF prog-id=225 op=LOAD Aug 13 00:05:57.920000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.920000 audit[5465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4614 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:57.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633733396230616466653330306563626335613735316534316563 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4614 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:57.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633733396230616466653330306563626335613735316534316563 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:58.082271 kernel: audit: type=1400 audit(1755043557.904:1453): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit: BPF prog-id=226 op=LOAD Aug 13 00:05:57.921000 audit[5465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4614 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:57.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633733396230616466653330306563626335613735316534316563 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit: BPF prog-id=227 op=LOAD Aug 13 00:05:57.921000 audit[5465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4614 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:57.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633733396230616466653330306563626335613735316534316563 Aug 13 00:05:57.921000 audit: BPF prog-id=227 op=UNLOAD Aug 13 00:05:57.921000 audit: BPF prog-id=226 op=UNLOAD Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { perfmon } for pid=5465 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit[5465]: AVC avc: denied { bpf } for pid=5465 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:05:57.921000 audit: BPF prog-id=228 op=LOAD Aug 13 00:05:57.921000 audit[5465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4614 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:05:57.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361633733396230616466653330306563626335613735316534316563 Aug 13 00:05:58.876639 kubelet[2482]: I0813 00:05:58.875882 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-db67c69c4-f8bkz" podStartSLOduration=40.816771539 podStartE2EDuration="47.875860609s" podCreationTimestamp="2025-08-13 00:05:11 +0000 UTC" firstStartedPulling="2025-08-13 00:05:45.342003337 +0000 UTC m=+55.851150363" lastFinishedPulling="2025-08-13 00:05:52.401092367 +0000 UTC m=+62.910239433" observedRunningTime="2025-08-13 00:05:52.872673621 +0000 UTC m=+63.381820687" watchObservedRunningTime="2025-08-13 00:05:58.875860609 +0000 UTC m=+69.385007675" Aug 13 00:05:58.883411 systemd[1]: run-containerd-runc-k8s.io-cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874-runc.ygDEXA.mount: Deactivated successfully. Aug 13 00:05:58.924282 kubelet[2482]: I0813 00:05:58.923586 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-689f76fcb5-r25jb" podStartSLOduration=33.80706553 podStartE2EDuration="43.923570041s" podCreationTimestamp="2025-08-13 00:05:15 +0000 UTC" firstStartedPulling="2025-08-13 00:05:47.630112462 +0000 UTC m=+58.139259528" lastFinishedPulling="2025-08-13 00:05:57.746616973 +0000 UTC m=+68.255764039" observedRunningTime="2025-08-13 00:05:58.876443295 +0000 UTC m=+69.385590361" watchObservedRunningTime="2025-08-13 00:05:58.923570041 +0000 UTC m=+69.432717107" Aug 13 00:06:08.955080 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1584505045.mount: Deactivated successfully. Aug 13 00:06:10.149748 env[1470]: time="2025-08-13T00:06:10.149706784Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:10.172630 env[1470]: time="2025-08-13T00:06:10.172581445Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:10.185143 env[1470]: time="2025-08-13T00:06:10.185112285Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:10.200531 env[1470]: time="2025-08-13T00:06:10.200503873Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:10.201904 env[1470]: time="2025-08-13T00:06:10.201878286Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Aug 13 00:06:10.204422 env[1470]: time="2025-08-13T00:06:10.203909506Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Aug 13 00:06:10.217093 env[1470]: time="2025-08-13T00:06:10.217053192Z" level=info msg="CreateContainer within sandbox \"e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Aug 13 00:06:10.317047 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2542444938.mount: Deactivated successfully. Aug 13 00:06:10.384228 env[1470]: time="2025-08-13T00:06:10.384183400Z" level=info msg="CreateContainer within sandbox \"e61d97aedb034524865e60b581db64073eab465ef3a38c6ea04399842f7a0355\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac\"" Aug 13 00:06:10.385076 env[1470]: time="2025-08-13T00:06:10.385050609Z" level=info msg="StartContainer for \"2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac\"" Aug 13 00:06:10.415306 systemd[1]: run-containerd-runc-k8s.io-2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac-runc.rRmMcp.mount: Deactivated successfully. Aug 13 00:06:10.419349 systemd[1]: Started cri-containerd-2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac.scope. Aug 13 00:06:10.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.435615 kernel: kauditd_printk_skb: 47 callbacks suppressed Aug 13 00:06:10.435702 kernel: audit: type=1400 audit(1755043570.430:1462): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469332 kernel: audit: type=1400 audit(1755043570.437:1463): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.486663 kernel: audit: type=1400 audit(1755043570.437:1464): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.543198 kernel: audit: type=1400 audit(1755043570.437:1465): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.543309 kernel: audit: type=1400 audit(1755043570.437:1466): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.561394 kernel: audit: type=1400 audit(1755043570.437:1467): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.574013 env[1470]: time="2025-08-13T00:06:10.573970466Z" level=info msg="StartContainer for \"2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac\" returns successfully" Aug 13 00:06:10.579101 kernel: audit: type=1400 audit(1755043570.437:1468): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.597824 kernel: audit: type=1400 audit(1755043570.437:1469): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.603780 kernel: audit: type=1400 audit(1755043570.437:1470): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.635330 kernel: audit: type=1400 audit(1755043570.452:1471): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.452000 audit: BPF prog-id=229 op=LOAD Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4670 pid=5542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:10.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264326161343335653330316465313337393165653138393835613331 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4670 pid=5542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:10.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264326161343335653330316465313337393165653138393835613331 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.453000 audit: BPF prog-id=230 op=LOAD Aug 13 00:06:10.453000 audit[5542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4670 pid=5542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:10.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264326161343335653330316465313337393165653138393835613331 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit: BPF prog-id=231 op=LOAD Aug 13 00:06:10.469000 audit[5542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4670 pid=5542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:10.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264326161343335653330316465313337393165653138393835613331 Aug 13 00:06:10.469000 audit: BPF prog-id=231 op=UNLOAD Aug 13 00:06:10.469000 audit: BPF prog-id=230 op=UNLOAD Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { perfmon } for pid=5542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit[5542]: AVC avc: denied { bpf } for pid=5542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:10.469000 audit: BPF prog-id=232 op=LOAD Aug 13 00:06:10.469000 audit[5542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4670 pid=5542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:10.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264326161343335653330316465313337393165653138393835613331 Aug 13 00:06:10.683779 env[1470]: time="2025-08-13T00:06:10.683684642Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:10.702435 env[1470]: time="2025-08-13T00:06:10.702390862Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:10.713900 env[1470]: time="2025-08-13T00:06:10.713873052Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:10.721662 env[1470]: time="2025-08-13T00:06:10.721623407Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:10.722210 env[1470]: time="2025-08-13T00:06:10.722178292Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Aug 13 00:06:10.723794 env[1470]: time="2025-08-13T00:06:10.723400584Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Aug 13 00:06:10.737011 env[1470]: time="2025-08-13T00:06:10.736977115Z" level=info msg="CreateContainer within sandbox \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 00:06:10.898769 kubelet[2482]: I0813 00:06:10.898149 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-hslpg" podStartSLOduration=33.442116098 podStartE2EDuration="55.898132945s" podCreationTimestamp="2025-08-13 00:05:15 +0000 UTC" firstStartedPulling="2025-08-13 00:05:47.747124732 +0000 UTC m=+58.256271798" lastFinishedPulling="2025-08-13 00:06:10.203141579 +0000 UTC m=+80.712288645" observedRunningTime="2025-08-13 00:06:10.897707341 +0000 UTC m=+81.406854407" watchObservedRunningTime="2025-08-13 00:06:10.898132945 +0000 UTC m=+81.407280011" Aug 13 00:06:10.913000 audit[5608]: NETFILTER_CFG table=filter:128 family=2 entries=12 op=nft_register_rule pid=5608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:10.913000 audit[5608]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffce73f140 a2=0 a3=1 items=0 ppid=2589 pid=5608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:10.913000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:10.917000 audit[5608]: NETFILTER_CFG table=nat:129 family=2 entries=22 op=nft_register_rule pid=5608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:10.917000 audit[5608]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffce73f140 a2=0 a3=1 items=0 ppid=2589 pid=5608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:10.917000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:10.975237 env[1470]: time="2025-08-13T00:06:10.975139606Z" level=info msg="CreateContainer within sandbox \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846\"" Aug 13 00:06:10.976143 env[1470]: time="2025-08-13T00:06:10.975999214Z" level=info msg="StartContainer for \"1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846\"" Aug 13 00:06:10.990839 systemd[1]: Started cri-containerd-1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846.scope. Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.006000 audit: BPF prog-id=233 op=LOAD Aug 13 00:06:11.007000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.007000 audit[5620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4851 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:11.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166393061323035396236306165623566666334333536313663393335 Aug 13 00:06:11.007000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.007000 audit[5620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4851 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:11.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166393061323035396236306165623566666334333536313663393335 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.008000 audit: BPF prog-id=234 op=LOAD Aug 13 00:06:11.008000 audit[5620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4851 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:11.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166393061323035396236306165623566666334333536313663393335 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit: BPF prog-id=235 op=LOAD Aug 13 00:06:11.009000 audit[5620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4851 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:11.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166393061323035396236306165623566666334333536313663393335 Aug 13 00:06:11.009000 audit: BPF prog-id=235 op=UNLOAD Aug 13 00:06:11.009000 audit: BPF prog-id=234 op=UNLOAD Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { perfmon } for pid=5620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit[5620]: AVC avc: denied { bpf } for pid=5620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:11.009000 audit: BPF prog-id=236 op=LOAD Aug 13 00:06:11.009000 audit[5620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4851 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:11.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166393061323035396236306165623566666334333536313663393335 Aug 13 00:06:11.045128 env[1470]: time="2025-08-13T00:06:11.045067876Z" level=info msg="StartContainer for \"1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846\" returns successfully" Aug 13 00:06:11.910886 systemd[1]: run-containerd-runc-k8s.io-2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac-runc.SUQP85.mount: Deactivated successfully. Aug 13 00:06:11.914055 kubelet[2482]: I0813 00:06:11.913537 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-db67c69c4-9hpz2" podStartSLOduration=38.451970238 podStartE2EDuration="1m0.913521006s" podCreationTimestamp="2025-08-13 00:05:11 +0000 UTC" firstStartedPulling="2025-08-13 00:05:48.261476573 +0000 UTC m=+58.770623639" lastFinishedPulling="2025-08-13 00:06:10.723027341 +0000 UTC m=+81.232174407" observedRunningTime="2025-08-13 00:06:11.902954185 +0000 UTC m=+82.412101251" watchObservedRunningTime="2025-08-13 00:06:11.913521006 +0000 UTC m=+82.422668072" Aug 13 00:06:11.938000 audit[5673]: NETFILTER_CFG table=filter:130 family=2 entries=12 op=nft_register_rule pid=5673 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:11.938000 audit[5673]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe7b99630 a2=0 a3=1 items=0 ppid=2589 pid=5673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:11.938000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:11.944000 audit[5673]: NETFILTER_CFG table=nat:131 family=2 entries=22 op=nft_register_rule pid=5673 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:11.944000 audit[5673]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe7b99630 a2=0 a3=1 items=0 ppid=2589 pid=5673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:11.944000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:12.488018 env[1470]: time="2025-08-13T00:06:12.487973054Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:12.520939 env[1470]: time="2025-08-13T00:06:12.520876766Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:12.538824 env[1470]: time="2025-08-13T00:06:12.538782175Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:12.550494 env[1470]: time="2025-08-13T00:06:12.550453046Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Aug 13 00:06:12.550925 env[1470]: time="2025-08-13T00:06:12.550890890Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Aug 13 00:06:12.565608 env[1470]: time="2025-08-13T00:06:12.565570629Z" level=info msg="CreateContainer within sandbox \"4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Aug 13 00:06:12.703562 env[1470]: time="2025-08-13T00:06:12.703508536Z" level=info msg="CreateContainer within sandbox \"4fa5229fb3d2a344fdc202acb9fcdb86611f8c124c678dcb6a2a770934d52783\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"3caf65e701c1b3dfc58abbdeec2e09489870d910a4109edc270184608808a8d0\"" Aug 13 00:06:12.704405 env[1470]: time="2025-08-13T00:06:12.704370344Z" level=info msg="StartContainer for \"3caf65e701c1b3dfc58abbdeec2e09489870d910a4109edc270184608808a8d0\"" Aug 13 00:06:12.729049 systemd[1]: Started cri-containerd-3caf65e701c1b3dfc58abbdeec2e09489870d910a4109edc270184608808a8d0.scope. Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4439 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:12.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363616636356537303163316233646663353861626264656563326530 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit: BPF prog-id=237 op=LOAD Aug 13 00:06:12.763000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4439 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:12.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363616636356537303163316233646663353861626264656563326530 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit: BPF prog-id=238 op=LOAD Aug 13 00:06:12.763000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4439 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:12.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363616636356537303163316233646663353861626264656563326530 Aug 13 00:06:12.763000 audit: BPF prog-id=238 op=UNLOAD Aug 13 00:06:12.763000 audit: BPF prog-id=237 op=UNLOAD Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:12.763000 audit: BPF prog-id=239 op=LOAD Aug 13 00:06:12.763000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4439 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:12.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363616636356537303163316233646663353861626264656563326530 Aug 13 00:06:12.794566 kubelet[2482]: I0813 00:06:12.794266 2482 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:06:12.798950 env[1470]: time="2025-08-13T00:06:12.798915039Z" level=info msg="StartContainer for \"3caf65e701c1b3dfc58abbdeec2e09489870d910a4109edc270184608808a8d0\" returns successfully" Aug 13 00:06:12.847000 audit[5716]: NETFILTER_CFG table=filter:132 family=2 entries=11 op=nft_register_rule pid=5716 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:12.847000 audit[5716]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd95c3c90 a2=0 a3=1 items=0 ppid=2589 pid=5716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:12.847000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:12.851000 audit[5716]: NETFILTER_CFG table=nat:133 family=2 entries=29 op=nft_register_chain pid=5716 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:12.851000 audit[5716]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd95c3c90 a2=0 a3=1 items=0 ppid=2589 pid=5716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:12.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:12.934993 kubelet[2482]: I0813 00:06:12.934922 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-5s8h8" podStartSLOduration=30.769362001 podStartE2EDuration="57.934904768s" podCreationTimestamp="2025-08-13 00:05:15 +0000 UTC" firstStartedPulling="2025-08-13 00:05:45.386292892 +0000 UTC m=+55.895439958" lastFinishedPulling="2025-08-13 00:06:12.551835659 +0000 UTC m=+83.060982725" observedRunningTime="2025-08-13 00:06:12.934023239 +0000 UTC m=+83.443170305" watchObservedRunningTime="2025-08-13 00:06:12.934904768 +0000 UTC m=+83.444051794" Aug 13 00:06:13.140000 audit[5631]: AVC avc: denied { watch } for pid=5631 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_05_30.3307548769/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c640,c903 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c640,c903 tclass=file permissive=0 Aug 13 00:06:13.140000 audit[5631]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000fa1960 a2=fc6 a3=0 items=0 ppid=4851 pid=5631 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c640,c903 key=(null) Aug 13 00:06:13.140000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:06:13.184000 audit[5738]: NETFILTER_CFG table=filter:134 family=2 entries=10 op=nft_register_rule pid=5738 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:13.184000 audit[5738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff641e060 a2=0 a3=1 items=0 ppid=2589 pid=5738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:13.184000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:13.189000 audit[5738]: NETFILTER_CFG table=nat:135 family=2 entries=36 op=nft_register_chain pid=5738 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:13.189000 audit[5738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff641e060 a2=0 a3=1 items=0 ppid=2589 pid=5738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:13.189000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:13.659324 systemd[1]: run-containerd-runc-k8s.io-3caf65e701c1b3dfc58abbdeec2e09489870d910a4109edc270184608808a8d0-runc.un43EC.mount: Deactivated successfully. Aug 13 00:06:13.696181 kubelet[2482]: I0813 00:06:13.696153 2482 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Aug 13 00:06:13.697137 kubelet[2482]: I0813 00:06:13.697120 2482 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Aug 13 00:06:23.020822 kubelet[2482]: I0813 00:06:23.020737 2482 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Aug 13 00:06:23.086156 env[1470]: time="2025-08-13T00:06:23.086108567Z" level=info msg="StopContainer for \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\" with timeout 30 (s)" Aug 13 00:06:23.086826 env[1470]: time="2025-08-13T00:06:23.086791653Z" level=info msg="Stop container \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\" with signal terminated" Aug 13 00:06:23.135685 kernel: kauditd_printk_skb: 174 callbacks suppressed Aug 13 00:06:23.135820 kernel: audit: type=1325 audit(1755043583.116:1513): table=filter:136 family=2 entries=10 op=nft_register_rule pid=5757 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:23.116000 audit[5757]: NETFILTER_CFG table=filter:136 family=2 entries=10 op=nft_register_rule pid=5757 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:23.137886 systemd[1]: cri-containerd-3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0.scope: Deactivated successfully. Aug 13 00:06:23.138212 systemd[1]: cri-containerd-3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0.scope: Consumed 1.271s CPU time. Aug 13 00:06:23.116000 audit[5757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffde610280 a2=0 a3=1 items=0 ppid=2589 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.169244 kernel: audit: type=1300 audit(1755043583.116:1513): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffde610280 a2=0 a3=1 items=0 ppid=2589 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.116000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:23.185907 kernel: audit: type=1327 audit(1755043583.116:1513): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:23.136000 audit: BPF prog-id=218 op=UNLOAD Aug 13 00:06:23.192841 kernel: audit: type=1334 audit(1755043583.136:1514): prog-id=218 op=UNLOAD Aug 13 00:06:23.140000 audit: BPF prog-id=221 op=UNLOAD Aug 13 00:06:23.199508 kernel: audit: type=1334 audit(1755043583.140:1515): prog-id=221 op=UNLOAD Aug 13 00:06:23.166000 audit[5757]: NETFILTER_CFG table=nat:137 family=2 entries=42 op=nft_register_chain pid=5757 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:23.213222 kernel: audit: type=1325 audit(1755043583.166:1516): table=nat:137 family=2 entries=42 op=nft_register_chain pid=5757 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:23.166000 audit[5757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13892 a0=3 a1=ffffde610280 a2=0 a3=1 items=0 ppid=2589 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.239605 kernel: audit: type=1300 audit(1755043583.166:1516): arch=c00000b7 syscall=211 success=yes exit=13892 a0=3 a1=ffffde610280 a2=0 a3=1 items=0 ppid=2589 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.245335 systemd[1]: Created slice kubepods-besteffort-pod569439dc_7c8c_4845_8efb_d88fed0052d6.slice. Aug 13 00:06:23.166000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:23.260276 kernel: audit: type=1327 audit(1755043583.166:1516): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:23.264887 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0-rootfs.mount: Deactivated successfully. Aug 13 00:06:23.265673 env[1470]: time="2025-08-13T00:06:23.265453666Z" level=info msg="shim disconnected" id=3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0 Aug 13 00:06:23.265673 env[1470]: time="2025-08-13T00:06:23.265505186Z" level=warning msg="cleaning up after shim disconnected" id=3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0 namespace=k8s.io Aug 13 00:06:23.265673 env[1470]: time="2025-08-13T00:06:23.265514067Z" level=info msg="cleaning up dead shim" Aug 13 00:06:23.271806 kubelet[2482]: I0813 00:06:23.271711 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/569439dc-7c8c-4845-8efb-d88fed0052d6-calico-apiserver-certs\") pod \"calico-apiserver-5bbbfc55d5-mljcx\" (UID: \"569439dc-7c8c-4845-8efb-d88fed0052d6\") " pod="calico-apiserver/calico-apiserver-5bbbfc55d5-mljcx" Aug 13 00:06:23.271965 kubelet[2482]: I0813 00:06:23.271948 2482 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qf944\" (UniqueName: \"kubernetes.io/projected/569439dc-7c8c-4845-8efb-d88fed0052d6-kube-api-access-qf944\") pod \"calico-apiserver-5bbbfc55d5-mljcx\" (UID: \"569439dc-7c8c-4845-8efb-d88fed0052d6\") " pod="calico-apiserver/calico-apiserver-5bbbfc55d5-mljcx" Aug 13 00:06:23.276000 audit[5778]: NETFILTER_CFG table=filter:138 family=2 entries=10 op=nft_register_rule pid=5778 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:23.291225 env[1470]: time="2025-08-13T00:06:23.279391789Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:06:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5771 runtime=io.containerd.runc.v2\n" Aug 13 00:06:23.276000 audit[5778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe21efb40 a2=0 a3=1 items=0 ppid=2589 pid=5778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.317388 kernel: audit: type=1325 audit(1755043583.276:1517): table=filter:138 family=2 entries=10 op=nft_register_rule pid=5778 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:23.317477 kernel: audit: type=1300 audit(1755043583.276:1517): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe21efb40 a2=0 a3=1 items=0 ppid=2589 pid=5778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.276000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:23.320000 audit[5778]: NETFILTER_CFG table=nat:139 family=2 entries=42 op=nft_unregister_chain pid=5778 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:23.320000 audit[5778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12132 a0=3 a1=ffffe21efb40 a2=0 a3=1 items=0 ppid=2589 pid=5778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.320000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:23.424222 env[1470]: time="2025-08-13T00:06:23.424168824Z" level=info msg="StopContainer for \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\" returns successfully" Aug 13 00:06:23.424842 env[1470]: time="2025-08-13T00:06:23.424806869Z" level=info msg="StopPodSandbox for \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\"" Aug 13 00:06:23.424922 env[1470]: time="2025-08-13T00:06:23.424878030Z" level=info msg="Container to stop \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Aug 13 00:06:23.427664 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37-shm.mount: Deactivated successfully. Aug 13 00:06:23.433000 audit: BPF prog-id=182 op=UNLOAD Aug 13 00:06:23.434278 systemd[1]: cri-containerd-3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37.scope: Deactivated successfully. Aug 13 00:06:23.437000 audit: BPF prog-id=185 op=UNLOAD Aug 13 00:06:23.455467 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37-rootfs.mount: Deactivated successfully. Aug 13 00:06:23.458673 env[1470]: time="2025-08-13T00:06:23.458634047Z" level=info msg="shim disconnected" id=3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37 Aug 13 00:06:23.458860 env[1470]: time="2025-08-13T00:06:23.458832809Z" level=warning msg="cleaning up after shim disconnected" id=3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37 namespace=k8s.io Aug 13 00:06:23.458946 env[1470]: time="2025-08-13T00:06:23.458932170Z" level=info msg="cleaning up dead shim" Aug 13 00:06:23.474968 env[1470]: time="2025-08-13T00:06:23.474933431Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:06:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5807 runtime=io.containerd.runc.v2\n" Aug 13 00:06:23.562210 env[1470]: time="2025-08-13T00:06:23.562107398Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5bbbfc55d5-mljcx,Uid:569439dc-7c8c-4845-8efb-d88fed0052d6,Namespace:calico-apiserver,Attempt:0,}" Aug 13 00:06:23.575979 systemd-networkd[1624]: cali075463155a8: Link DOWN Aug 13 00:06:23.575985 systemd-networkd[1624]: cali075463155a8: Lost carrier Aug 13 00:06:23.611000 audit[5848]: NETFILTER_CFG table=filter:140 family=2 entries=59 op=nft_register_rule pid=5848 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:06:23.611000 audit[5848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10132 a0=3 a1=fffff142add0 a2=0 a3=ffff86a5cfa8 items=0 ppid=3805 pid=5848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.611000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:06:23.612000 audit[5848]: NETFILTER_CFG table=filter:141 family=2 entries=2 op=nft_unregister_chain pid=5848 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:06:23.612000 audit[5848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff142add0 a2=0 a3=ffff86a5cfa8 items=0 ppid=3805 pid=5848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.612000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.575 [INFO][5831] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.575 [INFO][5831] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" iface="eth0" netns="/var/run/netns/cni-91685b3b-b7e3-63ed-402c-df643b17cd83" Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.575 [INFO][5831] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" iface="eth0" netns="/var/run/netns/cni-91685b3b-b7e3-63ed-402c-df643b17cd83" Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.587 [INFO][5831] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" after=12.48915ms iface="eth0" netns="/var/run/netns/cni-91685b3b-b7e3-63ed-402c-df643b17cd83" Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.587 [INFO][5831] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.587 [INFO][5831] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.631 [INFO][5840] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.632 [INFO][5840] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.632 [INFO][5840] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.696 [INFO][5840] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.696 [INFO][5840] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.699 [INFO][5840] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:06:23.703374 env[1470]: 2025-08-13 00:06:23.702 [INFO][5831] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:23.704083 env[1470]: time="2025-08-13T00:06:23.704046768Z" level=info msg="TearDown network for sandbox \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\" successfully" Aug 13 00:06:23.704177 env[1470]: time="2025-08-13T00:06:23.704159969Z" level=info msg="StopPodSandbox for \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\" returns successfully" Aug 13 00:06:23.775158 kubelet[2482]: I0813 00:06:23.775117 2482 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-zhsrz\" (UniqueName: \"kubernetes.io/projected/1dd3d88d-3f62-4e35-8832-966cbdf918e8-kube-api-access-zhsrz\") pod \"1dd3d88d-3f62-4e35-8832-966cbdf918e8\" (UID: \"1dd3d88d-3f62-4e35-8832-966cbdf918e8\") " Aug 13 00:06:23.775158 kubelet[2482]: I0813 00:06:23.775163 2482 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1dd3d88d-3f62-4e35-8832-966cbdf918e8-calico-apiserver-certs\") pod \"1dd3d88d-3f62-4e35-8832-966cbdf918e8\" (UID: \"1dd3d88d-3f62-4e35-8832-966cbdf918e8\") " Aug 13 00:06:23.778112 kubelet[2482]: I0813 00:06:23.778079 2482 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1dd3d88d-3f62-4e35-8832-966cbdf918e8-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "1dd3d88d-3f62-4e35-8832-966cbdf918e8" (UID: "1dd3d88d-3f62-4e35-8832-966cbdf918e8"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Aug 13 00:06:23.780624 kubelet[2482]: I0813 00:06:23.780599 2482 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1dd3d88d-3f62-4e35-8832-966cbdf918e8-kube-api-access-zhsrz" (OuterVolumeSpecName: "kube-api-access-zhsrz") pod "1dd3d88d-3f62-4e35-8832-966cbdf918e8" (UID: "1dd3d88d-3f62-4e35-8832-966cbdf918e8"). InnerVolumeSpecName "kube-api-access-zhsrz". PluginName "kubernetes.io/projected", VolumeGIDValue "" Aug 13 00:06:23.868409 systemd-networkd[1624]: calif4e459f05d2: Link UP Aug 13 00:06:23.876425 kubelet[2482]: I0813 00:06:23.876379 2482 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-zhsrz\" (UniqueName: \"kubernetes.io/projected/1dd3d88d-3f62-4e35-8832-966cbdf918e8-kube-api-access-zhsrz\") on node \"ci-3510.3.8-a-c7286a0eab\" DevicePath \"\"" Aug 13 00:06:23.876425 kubelet[2482]: I0813 00:06:23.876411 2482 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1dd3d88d-3f62-4e35-8832-966cbdf918e8-calico-apiserver-certs\") on node \"ci-3510.3.8-a-c7286a0eab\" DevicePath \"\"" Aug 13 00:06:23.878456 systemd-networkd[1624]: calif4e459f05d2: Gained carrier Aug 13 00:06:23.879316 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif4e459f05d2: link becomes ready Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.750 [INFO][5851] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0 calico-apiserver-5bbbfc55d5- calico-apiserver 569439dc-7c8c-4845-8efb-d88fed0052d6 1215 0 2025-08-13 00:06:23 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5bbbfc55d5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-a-c7286a0eab calico-apiserver-5bbbfc55d5-mljcx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif4e459f05d2 [] [] }} ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-mljcx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.750 [INFO][5851] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-mljcx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.783 [INFO][5864] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" HandleID="k8s-pod-network.f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.783 [INFO][5864] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" HandleID="k8s-pod-network.f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab530), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-a-c7286a0eab", "pod":"calico-apiserver-5bbbfc55d5-mljcx", "timestamp":"2025-08-13 00:06:23.783096744 +0000 UTC"}, Hostname:"ci-3510.3.8-a-c7286a0eab", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.783 [INFO][5864] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.783 [INFO][5864] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.783 [INFO][5864] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-a-c7286a0eab' Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.806 [INFO][5864] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.810 [INFO][5864] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.814 [INFO][5864] ipam/ipam.go 511: Trying affinity for 192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.822 [INFO][5864] ipam/ipam.go 158: Attempting to load block cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.825 [INFO][5864] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.21.128/26 host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.825 [INFO][5864] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.21.128/26 handle="k8s-pod-network.f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.826 [INFO][5864] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.833 [INFO][5864] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.21.128/26 handle="k8s-pod-network.f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.853 [INFO][5864] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.21.138/26] block=192.168.21.128/26 handle="k8s-pod-network.f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.853 [INFO][5864] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.21.138/26] handle="k8s-pod-network.f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" host="ci-3510.3.8-a-c7286a0eab" Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.853 [INFO][5864] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:06:23.898625 env[1470]: 2025-08-13 00:06:23.853 [INFO][5864] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.21.138/26] IPv6=[] ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" HandleID="k8s-pod-network.f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" Aug 13 00:06:23.899236 env[1470]: 2025-08-13 00:06:23.855 [INFO][5851] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-mljcx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0", GenerateName:"calico-apiserver-5bbbfc55d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"569439dc-7c8c-4845-8efb-d88fed0052d6", ResourceVersion:"1215", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 6, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5bbbfc55d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"", Pod:"calico-apiserver-5bbbfc55d5-mljcx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif4e459f05d2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:06:23.899236 env[1470]: 2025-08-13 00:06:23.855 [INFO][5851] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.21.138/32] ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-mljcx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" Aug 13 00:06:23.899236 env[1470]: 2025-08-13 00:06:23.855 [INFO][5851] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif4e459f05d2 ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-mljcx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" Aug 13 00:06:23.899236 env[1470]: 2025-08-13 00:06:23.869 [INFO][5851] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-mljcx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" Aug 13 00:06:23.899236 env[1470]: 2025-08-13 00:06:23.878 [INFO][5851] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-mljcx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0", GenerateName:"calico-apiserver-5bbbfc55d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"569439dc-7c8c-4845-8efb-d88fed0052d6", ResourceVersion:"1215", Generation:0, CreationTimestamp:time.Date(2025, time.August, 13, 0, 6, 23, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5bbbfc55d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-a-c7286a0eab", ContainerID:"f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a", Pod:"calico-apiserver-5bbbfc55d5-mljcx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.21.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif4e459f05d2", MAC:"26:ce:21:d4:ec:9f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Aug 13 00:06:23.899236 env[1470]: 2025-08-13 00:06:23.897 [INFO][5851] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a" Namespace="calico-apiserver" Pod="calico-apiserver-5bbbfc55d5-mljcx" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--5bbbfc55d5--mljcx-eth0" Aug 13 00:06:23.920948 kubelet[2482]: I0813 00:06:23.919825 2482 scope.go:117] "RemoveContainer" containerID="3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0" Aug 13 00:06:23.921070 env[1470]: time="2025-08-13T00:06:23.921045239Z" level=info msg="RemoveContainer for \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\"" Aug 13 00:06:23.921944 systemd[1]: Removed slice kubepods-besteffort-pod1dd3d88d_3f62_4e35_8832_966cbdf918e8.slice. Aug 13 00:06:23.922037 systemd[1]: kubepods-besteffort-pod1dd3d88d_3f62_4e35_8832_966cbdf918e8.slice: Consumed 1.293s CPU time. Aug 13 00:06:23.927460 env[1470]: time="2025-08-13T00:06:23.927395975Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Aug 13 00:06:23.927563 env[1470]: time="2025-08-13T00:06:23.927481056Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Aug 13 00:06:23.927563 env[1470]: time="2025-08-13T00:06:23.927506736Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Aug 13 00:06:23.928132 env[1470]: time="2025-08-13T00:06:23.927748378Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a pid=5887 runtime=io.containerd.runc.v2 Aug 13 00:06:23.937559 systemd[1]: Started cri-containerd-f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a.scope. Aug 13 00:06:23.970103 env[1470]: time="2025-08-13T00:06:23.970054391Z" level=info msg="RemoveContainer for \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\" returns successfully" Aug 13 00:06:23.970367 kubelet[2482]: I0813 00:06:23.970343 2482 scope.go:117] "RemoveContainer" containerID="3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0" Aug 13 00:06:23.970726 env[1470]: time="2025-08-13T00:06:23.970598716Z" level=error msg="ContainerStatus for \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\": not found" Aug 13 00:06:23.970936 kubelet[2482]: E0813 00:06:23.970909 2482 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\": not found" containerID="3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0" Aug 13 00:06:23.971014 kubelet[2482]: I0813 00:06:23.970941 2482 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0"} err="failed to get container status \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\": rpc error: code = NotFound desc = an error occurred when try to find container \"3f86a975fad9d191910c0d7efecbe7b9a3cfd576447bedbb702d434bf10849c0\": not found" Aug 13 00:06:23.971000 audit[5914]: NETFILTER_CFG table=filter:142 family=2 entries=67 op=nft_register_chain pid=5914 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:06:23.971000 audit[5914]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=31852 a0=3 a1=ffffc8fa8020 a2=0 a3=ffff84937fa8 items=0 ppid=3805 pid=5914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.971000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.978000 audit: BPF prog-id=240 op=LOAD Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5887 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653263666234386335666162396435643466623163626365623936 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5887 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653263666234386335666162396435643466623163626365623936 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit: BPF prog-id=241 op=LOAD Aug 13 00:06:23.979000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5887 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653263666234386335666162396435643466623163626365623936 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit: BPF prog-id=242 op=LOAD Aug 13 00:06:23.979000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5887 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653263666234386335666162396435643466623163626365623936 Aug 13 00:06:23.979000 audit: BPF prog-id=242 op=UNLOAD Aug 13 00:06:23.979000 audit: BPF prog-id=241 op=UNLOAD Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:23.979000 audit: BPF prog-id=243 op=LOAD Aug 13 00:06:23.979000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5887 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:23.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653263666234386335666162396435643466623163626365623936 Aug 13 00:06:24.010260 env[1470]: time="2025-08-13T00:06:24.010208184Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5bbbfc55d5-mljcx,Uid:569439dc-7c8c-4845-8efb-d88fed0052d6,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a\"" Aug 13 00:06:24.032916 env[1470]: time="2025-08-13T00:06:24.032861582Z" level=info msg="CreateContainer within sandbox \"f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Aug 13 00:06:24.133691 env[1470]: time="2025-08-13T00:06:24.133596504Z" level=info msg="CreateContainer within sandbox \"f3e2cfb48c5fab9d5d4fb1cbceb969d963ddbc7348f5ca0064effb8f121d0a4a\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"9c5c7e484650189fb2db7c27e1ab5cc518c21c1ba8c4a85702c67efeeb165061\"" Aug 13 00:06:24.136639 env[1470]: time="2025-08-13T00:06:24.136610091Z" level=info msg="StartContainer for \"9c5c7e484650189fb2db7c27e1ab5cc518c21c1ba8c4a85702c67efeeb165061\"" Aug 13 00:06:24.154721 systemd[1]: Started cri-containerd-9c5c7e484650189fb2db7c27e1ab5cc518c21c1ba8c4a85702c67efeeb165061.scope. Aug 13 00:06:24.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.188000 audit: BPF prog-id=244 op=LOAD Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=5887 pid=5929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:24.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963356337653438343635303138396662326462376332376531616235 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=5887 pid=5929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:24.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963356337653438343635303138396662326462376332376531616235 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit: BPF prog-id=245 op=LOAD Aug 13 00:06:24.189000 audit[5929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=5887 pid=5929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:24.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963356337653438343635303138396662326462376332376531616235 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit: BPF prog-id=246 op=LOAD Aug 13 00:06:24.189000 audit[5929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=5887 pid=5929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:24.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963356337653438343635303138396662326462376332376531616235 Aug 13 00:06:24.189000 audit: BPF prog-id=246 op=UNLOAD Aug 13 00:06:24.189000 audit: BPF prog-id=245 op=UNLOAD Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { perfmon } for pid=5929 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit[5929]: AVC avc: denied { bpf } for pid=5929 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Aug 13 00:06:24.189000 audit: BPF prog-id=247 op=LOAD Aug 13 00:06:24.189000 audit[5929]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=5887 pid=5929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:24.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963356337653438343635303138396662326462376332376531616235 Aug 13 00:06:24.237286 env[1470]: time="2025-08-13T00:06:24.237207052Z" level=info msg="StartContainer for \"9c5c7e484650189fb2db7c27e1ab5cc518c21c1ba8c4a85702c67efeeb165061\" returns successfully" Aug 13 00:06:24.267112 systemd[1]: run-netns-cni\x2d91685b3b\x2db7e3\x2d63ed\x2d402c\x2ddf643b17cd83.mount: Deactivated successfully. Aug 13 00:06:24.267400 systemd[1]: var-lib-kubelet-pods-1dd3d88d\x2d3f62\x2d4e35\x2d8832\x2d966cbdf918e8-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dzhsrz.mount: Deactivated successfully. Aug 13 00:06:24.267542 systemd[1]: var-lib-kubelet-pods-1dd3d88d\x2d3f62\x2d4e35\x2d8832\x2d966cbdf918e8-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Aug 13 00:06:24.461000 audit[5963]: NETFILTER_CFG table=filter:143 family=2 entries=10 op=nft_register_rule pid=5963 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:24.461000 audit[5963]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffef720df0 a2=0 a3=1 items=0 ppid=2589 pid=5963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:24.461000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:24.490000 audit[5963]: NETFILTER_CFG table=nat:144 family=2 entries=38 op=nft_register_rule pid=5963 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:24.490000 audit[5963]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffef720df0 a2=0 a3=1 items=0 ppid=2589 pid=5963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:24.490000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:25.529000 audit[5965]: NETFILTER_CFG table=filter:145 family=2 entries=10 op=nft_register_rule pid=5965 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:25.529000 audit[5965]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff0ca2c20 a2=0 a3=1 items=0 ppid=2589 pid=5965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:25.529000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:25.538000 audit[5965]: NETFILTER_CFG table=nat:146 family=2 entries=38 op=nft_register_rule pid=5965 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:25.538000 audit[5965]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff0ca2c20 a2=0 a3=1 items=0 ppid=2589 pid=5965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:25.538000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:25.599077 kubelet[2482]: I0813 00:06:25.599037 2482 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="1dd3d88d-3f62-4e35-8832-966cbdf918e8" path="/var/lib/kubelet/pods/1dd3d88d-3f62-4e35-8832-966cbdf918e8/volumes" Aug 13 00:06:25.702374 systemd-networkd[1624]: calif4e459f05d2: Gained IPv6LL Aug 13 00:06:26.479000 audit[5940]: AVC avc: denied { watch } for pid=5940 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_06_23.3508000892/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c560 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c76,c560 tclass=file permissive=0 Aug 13 00:06:26.479000 audit[5940]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000ac0680 a2=fc6 a3=0 items=0 ppid=5887 pid=5940 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c560 key=(null) Aug 13 00:06:26.479000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:06:26.522759 kubelet[2482]: I0813 00:06:26.522699 2482 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5bbbfc55d5-mljcx" podStartSLOduration=3.522682525 podStartE2EDuration="3.522682525s" podCreationTimestamp="2025-08-13 00:06:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-08-13 00:06:24.943654557 +0000 UTC m=+95.452801623" watchObservedRunningTime="2025-08-13 00:06:26.522682525 +0000 UTC m=+97.031829591" Aug 13 00:06:26.542000 audit[5970]: NETFILTER_CFG table=filter:147 family=2 entries=10 op=nft_register_rule pid=5970 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:26.542000 audit[5970]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffa06d730 a2=0 a3=1 items=0 ppid=2589 pid=5970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:26.542000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:26.548000 audit[5970]: NETFILTER_CFG table=nat:148 family=2 entries=42 op=nft_register_chain pid=5970 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:26.548000 audit[5970]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13892 a0=3 a1=fffffa06d730 a2=0 a3=1 items=0 ppid=2589 pid=5970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:26.548000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:26.561280 env[1470]: time="2025-08-13T00:06:26.561237059Z" level=info msg="StopContainer for \"1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846\" with timeout 30 (s)" Aug 13 00:06:26.562000 env[1470]: time="2025-08-13T00:06:26.561974186Z" level=info msg="Stop container \"1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846\" with signal terminated" Aug 13 00:06:26.591000 audit: BPF prog-id=233 op=UNLOAD Aug 13 00:06:26.592029 systemd[1]: cri-containerd-1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846.scope: Deactivated successfully. Aug 13 00:06:26.592371 systemd[1]: cri-containerd-1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846.scope: Consumed 1.681s CPU time. Aug 13 00:06:26.594000 audit: BPF prog-id=236 op=UNLOAD Aug 13 00:06:26.615091 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846-rootfs.mount: Deactivated successfully. Aug 13 00:06:26.778381 env[1470]: time="2025-08-13T00:06:26.778338740Z" level=info msg="shim disconnected" id=1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846 Aug 13 00:06:26.778641 env[1470]: time="2025-08-13T00:06:26.778622502Z" level=warning msg="cleaning up after shim disconnected" id=1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846 namespace=k8s.io Aug 13 00:06:26.778739 env[1470]: time="2025-08-13T00:06:26.778724503Z" level=info msg="cleaning up dead shim" Aug 13 00:06:26.786746 env[1470]: time="2025-08-13T00:06:26.786704732Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:06:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5988 runtime=io.containerd.runc.v2\n" Aug 13 00:06:26.798483 env[1470]: time="2025-08-13T00:06:26.798414154Z" level=info msg="StopContainer for \"1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846\" returns successfully" Aug 13 00:06:26.799062 env[1470]: time="2025-08-13T00:06:26.799041039Z" level=info msg="StopPodSandbox for \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\"" Aug 13 00:06:26.799277 env[1470]: time="2025-08-13T00:06:26.799239521Z" level=info msg="Container to stop \"1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Aug 13 00:06:26.802161 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75-shm.mount: Deactivated successfully. Aug 13 00:06:26.810000 audit: BPF prog-id=206 op=UNLOAD Aug 13 00:06:26.811997 systemd[1]: cri-containerd-c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75.scope: Deactivated successfully. Aug 13 00:06:26.814000 audit: BPF prog-id=209 op=UNLOAD Aug 13 00:06:26.844345 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75-rootfs.mount: Deactivated successfully. Aug 13 00:06:26.845358 env[1470]: time="2025-08-13T00:06:26.845315600Z" level=info msg="shim disconnected" id=c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75 Aug 13 00:06:26.845508 env[1470]: time="2025-08-13T00:06:26.845490841Z" level=warning msg="cleaning up after shim disconnected" id=c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75 namespace=k8s.io Aug 13 00:06:26.845595 env[1470]: time="2025-08-13T00:06:26.845581722Z" level=info msg="cleaning up dead shim" Aug 13 00:06:26.852806 env[1470]: time="2025-08-13T00:06:26.852776104Z" level=warning msg="cleanup warnings time=\"2025-08-13T00:06:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6021 runtime=io.containerd.runc.v2\n" Aug 13 00:06:26.926583 kubelet[2482]: I0813 00:06:26.926535 2482 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:26.958832 systemd-networkd[1624]: cali9b72a076d11: Link DOWN Aug 13 00:06:26.958838 systemd-networkd[1624]: cali9b72a076d11: Lost carrier Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:26.955 [INFO][6044] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:26.958 [INFO][6044] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" iface="eth0" netns="/var/run/netns/cni-0c5ca275-91d7-f83d-60d9-e93e57150acb" Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:26.958 [INFO][6044] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" iface="eth0" netns="/var/run/netns/cni-0c5ca275-91d7-f83d-60d9-e93e57150acb" Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:26.969 [INFO][6044] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" after=11.246577ms iface="eth0" netns="/var/run/netns/cni-0c5ca275-91d7-f83d-60d9-e93e57150acb" Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:26.969 [INFO][6044] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:26.969 [INFO][6044] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:26.992 [INFO][6053] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:26.992 [INFO][6053] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:26.992 [INFO][6053] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:27.074 [INFO][6053] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:27.074 [INFO][6053] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:27.076 [INFO][6053] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:06:27.078645 env[1470]: 2025-08-13 00:06:27.077 [INFO][6044] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:27.081976 systemd[1]: run-netns-cni\x2d0c5ca275\x2d91d7\x2df83d\x2d60d9\x2de93e57150acb.mount: Deactivated successfully. Aug 13 00:06:27.084276 env[1470]: time="2025-08-13T00:06:27.084199145Z" level=info msg="TearDown network for sandbox \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\" successfully" Aug 13 00:06:27.084276 env[1470]: time="2025-08-13T00:06:27.084245865Z" level=info msg="StopPodSandbox for \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\" returns successfully" Aug 13 00:06:27.100117 kubelet[2482]: I0813 00:06:27.100075 2482 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-4xwgs\" (UniqueName: \"kubernetes.io/projected/6681f5a2-e210-41c8-bad6-4e82c91ad26f-kube-api-access-4xwgs\") pod \"6681f5a2-e210-41c8-bad6-4e82c91ad26f\" (UID: \"6681f5a2-e210-41c8-bad6-4e82c91ad26f\") " Aug 13 00:06:27.100117 kubelet[2482]: I0813 00:06:27.100118 2482 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6681f5a2-e210-41c8-bad6-4e82c91ad26f-calico-apiserver-certs\") pod \"6681f5a2-e210-41c8-bad6-4e82c91ad26f\" (UID: \"6681f5a2-e210-41c8-bad6-4e82c91ad26f\") " Aug 13 00:06:27.105706 systemd[1]: var-lib-kubelet-pods-6681f5a2\x2de210\x2d41c8\x2dbad6\x2d4e82c91ad26f-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Aug 13 00:06:27.107178 kubelet[2482]: I0813 00:06:27.107154 2482 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6681f5a2-e210-41c8-bad6-4e82c91ad26f-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "6681f5a2-e210-41c8-bad6-4e82c91ad26f" (UID: "6681f5a2-e210-41c8-bad6-4e82c91ad26f"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Aug 13 00:06:27.109490 kubelet[2482]: I0813 00:06:27.109455 2482 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6681f5a2-e210-41c8-bad6-4e82c91ad26f-kube-api-access-4xwgs" (OuterVolumeSpecName: "kube-api-access-4xwgs") pod "6681f5a2-e210-41c8-bad6-4e82c91ad26f" (UID: "6681f5a2-e210-41c8-bad6-4e82c91ad26f"). InnerVolumeSpecName "kube-api-access-4xwgs". PluginName "kubernetes.io/projected", VolumeGIDValue "" Aug 13 00:06:27.157000 audit[6067]: NETFILTER_CFG table=filter:149 family=2 entries=55 op=nft_register_rule pid=6067 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:06:27.157000 audit[6067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8928 a0=3 a1=fffffa785a70 a2=0 a3=ffff8a8edfa8 items=0 ppid=3805 pid=6067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:27.157000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:06:27.157000 audit[6067]: NETFILTER_CFG table=filter:150 family=2 entries=2 op=nft_unregister_chain pid=6067 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Aug 13 00:06:27.157000 audit[6067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffa785a70 a2=0 a3=ffff8a8edfa8 items=0 ppid=3805 pid=6067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:27.157000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Aug 13 00:06:27.172000 audit[6068]: NETFILTER_CFG table=filter:151 family=2 entries=10 op=nft_register_rule pid=6068 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:27.172000 audit[6068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc49426a0 a2=0 a3=1 items=0 ppid=2589 pid=6068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:27.172000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:27.177000 audit[6068]: NETFILTER_CFG table=nat:152 family=2 entries=42 op=nft_unregister_chain pid=6068 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:27.177000 audit[6068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12132 a0=3 a1=ffffc49426a0 a2=0 a3=1 items=0 ppid=2589 pid=6068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:27.177000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:27.200573 kubelet[2482]: I0813 00:06:27.200526 2482 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-4xwgs\" (UniqueName: \"kubernetes.io/projected/6681f5a2-e210-41c8-bad6-4e82c91ad26f-kube-api-access-4xwgs\") on node \"ci-3510.3.8-a-c7286a0eab\" DevicePath \"\"" Aug 13 00:06:27.200573 kubelet[2482]: I0813 00:06:27.200559 2482 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6681f5a2-e210-41c8-bad6-4e82c91ad26f-calico-apiserver-certs\") on node \"ci-3510.3.8-a-c7286a0eab\" DevicePath \"\"" Aug 13 00:06:27.602405 systemd[1]: Removed slice kubepods-besteffort-pod6681f5a2_e210_41c8_bad6_4e82c91ad26f.slice. Aug 13 00:06:27.602492 systemd[1]: kubepods-besteffort-pod6681f5a2_e210_41c8_bad6_4e82c91ad26f.slice: Consumed 1.699s CPU time. Aug 13 00:06:27.615037 systemd[1]: var-lib-kubelet-pods-6681f5a2\x2de210\x2d41c8\x2dbad6\x2d4e82c91ad26f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d4xwgs.mount: Deactivated successfully. Aug 13 00:06:28.879006 systemd[1]: run-containerd-runc-k8s.io-cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874-runc.lWBfNZ.mount: Deactivated successfully. Aug 13 00:06:29.598738 kubelet[2482]: I0813 00:06:29.598705 2482 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="6681f5a2-e210-41c8-bad6-4e82c91ad26f" path="/var/lib/kubelet/pods/6681f5a2-e210-41c8-bad6-4e82c91ad26f/volumes" Aug 13 00:06:33.704507 systemd[1]: run-containerd-runc-k8s.io-cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874-runc.5QylkN.mount: Deactivated successfully. Aug 13 00:06:40.781137 systemd[1]: run-containerd-runc-k8s.io-86d10437454c36779544774608103d6b17358379ce82bda0627f6e5f64b1023a-runc.qmoIPc.mount: Deactivated successfully. Aug 13 00:06:42.918361 systemd[1]: run-containerd-runc-k8s.io-2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac-runc.mxhoQ2.mount: Deactivated successfully. Aug 13 00:06:43.025000 audit[6159]: NETFILTER_CFG table=filter:153 family=2 entries=9 op=nft_register_rule pid=6159 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:43.032028 kernel: kauditd_printk_skb: 166 callbacks suppressed Aug 13 00:06:43.032111 kernel: audit: type=1325 audit(1755043603.025:1575): table=filter:153 family=2 entries=9 op=nft_register_rule pid=6159 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:43.025000 audit[6159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffec52e4b0 a2=0 a3=1 items=0 ppid=2589 pid=6159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:43.072769 kernel: audit: type=1300 audit(1755043603.025:1575): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffec52e4b0 a2=0 a3=1 items=0 ppid=2589 pid=6159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:43.025000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:43.086164 kernel: audit: type=1327 audit(1755043603.025:1575): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:43.086000 audit[6159]: NETFILTER_CFG table=nat:154 family=2 entries=31 op=nft_register_chain pid=6159 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:43.086000 audit[6159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffec52e4b0 a2=0 a3=1 items=0 ppid=2589 pid=6159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:43.127966 kernel: audit: type=1325 audit(1755043603.086:1576): table=nat:154 family=2 entries=31 op=nft_register_chain pid=6159 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:06:43.128057 kernel: audit: type=1300 audit(1755043603.086:1576): arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffec52e4b0 a2=0 a3=1 items=0 ppid=2589 pid=6159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:06:43.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:43.141030 kernel: audit: type=1327 audit(1755043603.086:1576): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:06:44.329490 update_engine[1460]: I0813 00:06:44.329447 1460 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Aug 13 00:06:44.329490 update_engine[1460]: I0813 00:06:44.329485 1460 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Aug 13 00:06:44.330549 update_engine[1460]: I0813 00:06:44.330524 1460 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Aug 13 00:06:44.331204 update_engine[1460]: I0813 00:06:44.331182 1460 omaha_request_params.cc:62] Current group set to lts Aug 13 00:06:44.331316 update_engine[1460]: I0813 00:06:44.331298 1460 update_attempter.cc:499] Already updated boot flags. Skipping. Aug 13 00:06:44.331316 update_engine[1460]: I0813 00:06:44.331310 1460 update_attempter.cc:643] Scheduling an action processor start. Aug 13 00:06:44.331403 update_engine[1460]: I0813 00:06:44.331326 1460 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Aug 13 00:06:44.331772 update_engine[1460]: I0813 00:06:44.331750 1460 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Aug 13 00:06:44.332164 update_engine[1460]: I0813 00:06:44.332137 1460 omaha_request_action.cc:270] Posting an Omaha request to disabled Aug 13 00:06:44.332164 update_engine[1460]: I0813 00:06:44.332154 1460 omaha_request_action.cc:271] Request: Aug 13 00:06:44.332164 update_engine[1460]: Aug 13 00:06:44.332164 update_engine[1460]: Aug 13 00:06:44.332164 update_engine[1460]: Aug 13 00:06:44.332164 update_engine[1460]: Aug 13 00:06:44.332164 update_engine[1460]: Aug 13 00:06:44.332164 update_engine[1460]: Aug 13 00:06:44.332164 update_engine[1460]: Aug 13 00:06:44.332164 update_engine[1460]: Aug 13 00:06:44.332164 update_engine[1460]: I0813 00:06:44.332160 1460 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Aug 13 00:06:44.333890 locksmithd[1547]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Aug 13 00:06:44.459865 update_engine[1460]: I0813 00:06:44.459817 1460 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Aug 13 00:06:44.460118 update_engine[1460]: I0813 00:06:44.460090 1460 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Aug 13 00:06:44.500668 update_engine[1460]: E0813 00:06:44.500628 1460 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Aug 13 00:06:44.500824 update_engine[1460]: I0813 00:06:44.500741 1460 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Aug 13 00:06:46.301000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.301000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.346595 kernel: audit: type=1400 audit(1755043606.301:1578): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.346709 kernel: audit: type=1400 audit(1755043606.301:1577): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.301000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002253cc0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:46.374785 kernel: audit: type=1300 audit(1755043606.301:1578): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002253cc0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:46.301000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:46.398528 kernel: audit: type=1327 audit(1755043606.301:1578): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:46.301000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a9a9f0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:46.301000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:46.452000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522483 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.452000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=400a8107b0 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:06:46.452000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:06:46.452000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.452000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=400a1b2210 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:06:46.452000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:06:46.458000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522489 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.458000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.458000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=400a1b3c20 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:06:46.458000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:06:46.458000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=401263de00 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:06:46.458000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:06:46.459000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.459000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=40113a3a60 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:06:46.459000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:06:46.460000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:46.460000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=75 a1=400a1b3ce0 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:06:46.460000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:06:48.616067 systemd[1]: run-containerd-runc-k8s.io-2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac-runc.CK1xtb.mount: Deactivated successfully. Aug 13 00:06:50.134000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:50.140397 kernel: kauditd_printk_skb: 20 callbacks suppressed Aug 13 00:06:50.140484 kernel: audit: type=1400 audit(1755043610.134:1585): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:50.134000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002253f60 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:50.189782 kernel: audit: type=1300 audit(1755043610.134:1585): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002253f60 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:50.134000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:50.213150 kernel: audit: type=1327 audit(1755043610.134:1585): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:50.161000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:50.234750 kernel: audit: type=1400 audit(1755043610.161:1586): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:50.161000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002253f80 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:50.263824 kernel: audit: type=1300 audit(1755043610.161:1586): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002253f80 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:50.161000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:50.288010 kernel: audit: type=1327 audit(1755043610.161:1586): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:50.161000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:50.310676 kernel: audit: type=1400 audit(1755043610.161:1587): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:50.161000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b79400 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:50.339702 kernel: audit: type=1300 audit(1755043610.161:1587): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b79400 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:50.161000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:50.363808 kernel: audit: type=1327 audit(1755043610.161:1587): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:50.161000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:50.161000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b79420 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:06:50.386807 kernel: audit: type=1400 audit(1755043610.161:1588): avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:06:50.161000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:06:51.195000 audit[4904]: AVC avc: denied { watch } for pid=4904 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_05_30.812021549/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c30,c278 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c30,c278 tclass=file permissive=0 Aug 13 00:06:51.195000 audit[4904]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000870320 a2=fc6 a3=0 items=0 ppid=4085 pid=4904 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c30,c278 key=(null) Aug 13 00:06:51.195000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:06:52.151548 kubelet[2482]: I0813 00:06:52.151510 2482 scope.go:117] "RemoveContainer" containerID="1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846" Aug 13 00:06:52.153247 env[1470]: time="2025-08-13T00:06:52.153134465Z" level=info msg="RemoveContainer for \"1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846\"" Aug 13 00:06:52.174227 env[1470]: time="2025-08-13T00:06:52.174192658Z" level=info msg="RemoveContainer for \"1f90a2059b60aeb5ffc435616c935f1e200a8935141698005fff1a612af86846\" returns successfully" Aug 13 00:06:52.175626 env[1470]: time="2025-08-13T00:06:52.175584082Z" level=info msg="StopPodSandbox for \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\"" Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.219 [WARNING][6194] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.219 [INFO][6194] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.219 [INFO][6194] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" iface="eth0" netns="" Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.219 [INFO][6194] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.219 [INFO][6194] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.243 [INFO][6201] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.243 [INFO][6201] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.243 [INFO][6201] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.253 [WARNING][6201] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.253 [INFO][6201] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.254 [INFO][6201] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:06:52.258414 env[1470]: 2025-08-13 00:06:52.255 [INFO][6194] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:52.258876 env[1470]: time="2025-08-13T00:06:52.258841188Z" level=info msg="TearDown network for sandbox \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\" successfully" Aug 13 00:06:52.258940 env[1470]: time="2025-08-13T00:06:52.258925027Z" level=info msg="StopPodSandbox for \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\" returns successfully" Aug 13 00:06:52.259557 env[1470]: time="2025-08-13T00:06:52.259517340Z" level=info msg="RemovePodSandbox for \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\"" Aug 13 00:06:52.259638 env[1470]: time="2025-08-13T00:06:52.259554019Z" level=info msg="Forcibly stopping sandbox \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\"" Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.292 [WARNING][6216] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.292 [INFO][6216] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.292 [INFO][6216] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" iface="eth0" netns="" Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.292 [INFO][6216] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.293 [INFO][6216] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.310 [INFO][6224] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.311 [INFO][6224] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.311 [INFO][6224] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.320 [WARNING][6224] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.320 [INFO][6224] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" HandleID="k8s-pod-network.c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--9hpz2-eth0" Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.321 [INFO][6224] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:06:52.324127 env[1470]: 2025-08-13 00:06:52.322 [INFO][6216] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75" Aug 13 00:06:52.324536 env[1470]: time="2025-08-13T00:06:52.324164783Z" level=info msg="TearDown network for sandbox \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\" successfully" Aug 13 00:06:52.347551 env[1470]: time="2025-08-13T00:06:52.347500150Z" level=info msg="RemovePodSandbox \"c6a0df31eb1090f99bf8587442b68c30bf1b512297a99fa0340657c80b430f75\" returns successfully" Aug 13 00:06:52.348115 env[1470]: time="2025-08-13T00:06:52.348077703Z" level=info msg="StopPodSandbox for \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\"" Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.398 [WARNING][6238] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.398 [INFO][6238] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.398 [INFO][6238] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" iface="eth0" netns="" Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.398 [INFO][6238] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.398 [INFO][6238] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.429 [INFO][6245] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.430 [INFO][6245] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.430 [INFO][6245] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.446 [WARNING][6245] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.446 [INFO][6245] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.448 [INFO][6245] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:06:52.451188 env[1470]: 2025-08-13 00:06:52.449 [INFO][6238] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:52.451643 env[1470]: time="2025-08-13T00:06:52.451613091Z" level=info msg="TearDown network for sandbox \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\" successfully" Aug 13 00:06:52.451707 env[1470]: time="2025-08-13T00:06:52.451692411Z" level=info msg="StopPodSandbox for \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\" returns successfully" Aug 13 00:06:52.453501 env[1470]: time="2025-08-13T00:06:52.453451150Z" level=info msg="RemovePodSandbox for \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\"" Aug 13 00:06:52.453569 env[1470]: time="2025-08-13T00:06:52.453501829Z" level=info msg="Forcibly stopping sandbox \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\"" Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.533 [WARNING][6260] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" WorkloadEndpoint="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.533 [INFO][6260] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.533 [INFO][6260] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" iface="eth0" netns="" Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.533 [INFO][6260] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.533 [INFO][6260] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.560 [INFO][6268] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.560 [INFO][6268] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.560 [INFO][6268] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.584 [WARNING][6268] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.584 [INFO][6268] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" HandleID="k8s-pod-network.3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Workload="ci--3510.3.8--a--c7286a0eab-k8s-calico--apiserver--db67c69c4--f8bkz-eth0" Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.585 [INFO][6268] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Aug 13 00:06:52.588157 env[1470]: 2025-08-13 00:06:52.586 [INFO][6260] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37" Aug 13 00:06:52.588573 env[1470]: time="2025-08-13T00:06:52.588186093Z" level=info msg="TearDown network for sandbox \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\" successfully" Aug 13 00:06:52.608652 env[1470]: time="2025-08-13T00:06:52.608598814Z" level=info msg="RemovePodSandbox \"3541cf826752e03d086ba817242c23dc04934e9fc359d372aa4757b6de6dcb37\" returns successfully" Aug 13 00:06:54.321708 update_engine[1460]: I0813 00:06:54.321301 1460 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Aug 13 00:06:54.321708 update_engine[1460]: I0813 00:06:54.321499 1460 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Aug 13 00:06:54.321708 update_engine[1460]: I0813 00:06:54.321673 1460 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Aug 13 00:06:54.334073 update_engine[1460]: E0813 00:06:54.333957 1460 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Aug 13 00:06:54.334073 update_engine[1460]: I0813 00:06:54.334048 1460 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Aug 13 00:06:58.879678 systemd[1]: run-containerd-runc-k8s.io-cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874-runc.dhR64X.mount: Deactivated successfully. Aug 13 00:07:04.322110 update_engine[1460]: I0813 00:07:04.321921 1460 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Aug 13 00:07:04.322548 update_engine[1460]: I0813 00:07:04.322139 1460 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Aug 13 00:07:04.322548 update_engine[1460]: I0813 00:07:04.322338 1460 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Aug 13 00:07:04.360779 update_engine[1460]: E0813 00:07:04.360742 1460 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Aug 13 00:07:04.360877 update_engine[1460]: I0813 00:07:04.360852 1460 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Aug 13 00:07:09.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.20:22-10.200.16.10:42166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:09.743130 systemd[1]: Started sshd@7-10.200.20.20:22-10.200.16.10:42166.service. Aug 13 00:07:09.748105 kernel: kauditd_printk_skb: 5 callbacks suppressed Aug 13 00:07:09.748204 kernel: audit: type=1130 audit(1755043629.743:1590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.20:22-10.200.16.10:42166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:10.227000 audit[6309]: USER_ACCT pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.228082 sshd[6309]: Accepted publickey for core from 10.200.16.10 port 42166 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:10.250974 sshd[6309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:10.251328 kernel: audit: type=1101 audit(1755043630.227:1591): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.251389 kernel: audit: type=1103 audit(1755043630.250:1592): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.250000 audit[6309]: CRED_ACQ pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.256081 systemd[1]: Started session-10.scope. Aug 13 00:07:10.257396 systemd-logind[1458]: New session 10 of user core. Aug 13 00:07:10.284773 kernel: audit: type=1006 audit(1755043630.250:1593): pid=6309 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Aug 13 00:07:10.250000 audit[6309]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdca00090 a2=3 a3=1 items=0 ppid=1 pid=6309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:10.307436 kernel: audit: type=1300 audit(1755043630.250:1593): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdca00090 a2=3 a3=1 items=0 ppid=1 pid=6309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:10.250000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:10.315313 kernel: audit: type=1327 audit(1755043630.250:1593): proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:10.261000 audit[6309]: USER_START pid=6309 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.338982 kernel: audit: type=1105 audit(1755043630.261:1594): pid=6309 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.263000 audit[6311]: CRED_ACQ pid=6311 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.358741 kernel: audit: type=1103 audit(1755043630.263:1595): pid=6311 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.704834 sshd[6309]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:10.705000 audit[6309]: USER_END pid=6309 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.707510 systemd-logind[1458]: Session 10 logged out. Waiting for processes to exit. Aug 13 00:07:10.708715 systemd[1]: session-10.scope: Deactivated successfully. Aug 13 00:07:10.709957 systemd-logind[1458]: Removed session 10. Aug 13 00:07:10.710636 systemd[1]: sshd@7-10.200.20.20:22-10.200.16.10:42166.service: Deactivated successfully. Aug 13 00:07:10.705000 audit[6309]: CRED_DISP pid=6309 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.750618 kernel: audit: type=1106 audit(1755043630.705:1596): pid=6309 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.750693 kernel: audit: type=1104 audit(1755043630.705:1597): pid=6309 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:10.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.20:22-10.200.16.10:42166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:14.315338 update_engine[1460]: I0813 00:07:14.315291 1460 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Aug 13 00:07:14.315647 update_engine[1460]: I0813 00:07:14.315485 1460 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Aug 13 00:07:14.315676 update_engine[1460]: I0813 00:07:14.315655 1460 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Aug 13 00:07:14.329185 update_engine[1460]: E0813 00:07:14.329152 1460 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Aug 13 00:07:14.329333 update_engine[1460]: I0813 00:07:14.329243 1460 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Aug 13 00:07:14.329333 update_engine[1460]: I0813 00:07:14.329272 1460 omaha_request_action.cc:621] Omaha request response: Aug 13 00:07:14.329396 update_engine[1460]: E0813 00:07:14.329346 1460 omaha_request_action.cc:640] Omaha request network transfer failed. Aug 13 00:07:14.329396 update_engine[1460]: I0813 00:07:14.329357 1460 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Aug 13 00:07:14.329396 update_engine[1460]: I0813 00:07:14.329361 1460 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Aug 13 00:07:14.329396 update_engine[1460]: I0813 00:07:14.329363 1460 update_attempter.cc:306] Processing Done. Aug 13 00:07:14.329396 update_engine[1460]: E0813 00:07:14.329383 1460 update_attempter.cc:619] Update failed. Aug 13 00:07:14.329396 update_engine[1460]: I0813 00:07:14.329386 1460 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Aug 13 00:07:14.329396 update_engine[1460]: I0813 00:07:14.329389 1460 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Aug 13 00:07:14.329396 update_engine[1460]: I0813 00:07:14.329393 1460 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Aug 13 00:07:14.329614 update_engine[1460]: I0813 00:07:14.329454 1460 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Aug 13 00:07:14.329614 update_engine[1460]: I0813 00:07:14.329473 1460 omaha_request_action.cc:270] Posting an Omaha request to disabled Aug 13 00:07:14.329614 update_engine[1460]: I0813 00:07:14.329475 1460 omaha_request_action.cc:271] Request: Aug 13 00:07:14.329614 update_engine[1460]: Aug 13 00:07:14.329614 update_engine[1460]: Aug 13 00:07:14.329614 update_engine[1460]: Aug 13 00:07:14.329614 update_engine[1460]: Aug 13 00:07:14.329614 update_engine[1460]: Aug 13 00:07:14.329614 update_engine[1460]: Aug 13 00:07:14.329614 update_engine[1460]: I0813 00:07:14.329479 1460 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Aug 13 00:07:14.329614 update_engine[1460]: I0813 00:07:14.329589 1460 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Aug 13 00:07:14.329825 update_engine[1460]: I0813 00:07:14.329730 1460 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Aug 13 00:07:14.330134 locksmithd[1547]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Aug 13 00:07:14.340622 update_engine[1460]: E0813 00:07:14.340592 1460 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Aug 13 00:07:14.340729 update_engine[1460]: I0813 00:07:14.340673 1460 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Aug 13 00:07:14.340729 update_engine[1460]: I0813 00:07:14.340679 1460 omaha_request_action.cc:621] Omaha request response: Aug 13 00:07:14.340729 update_engine[1460]: I0813 00:07:14.340683 1460 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Aug 13 00:07:14.340729 update_engine[1460]: I0813 00:07:14.340687 1460 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Aug 13 00:07:14.340729 update_engine[1460]: I0813 00:07:14.340689 1460 update_attempter.cc:306] Processing Done. Aug 13 00:07:14.340729 update_engine[1460]: I0813 00:07:14.340693 1460 update_attempter.cc:310] Error event sent. Aug 13 00:07:14.340729 update_engine[1460]: I0813 00:07:14.340700 1460 update_check_scheduler.cc:74] Next update check in 43m28s Aug 13 00:07:14.341147 locksmithd[1547]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Aug 13 00:07:15.785861 systemd[1]: Started sshd@8-10.200.20.20:22-10.200.16.10:41518.service. Aug 13 00:07:15.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.20:22-10.200.16.10:41518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:15.791195 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:07:15.791271 kernel: audit: type=1130 audit(1755043635.785:1599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.20:22-10.200.16.10:41518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:16.301822 sshd[6364]: Accepted publickey for core from 10.200.16.10 port 41518 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:16.301000 audit[6364]: USER_ACCT pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.325753 sshd[6364]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:16.330388 systemd[1]: Started session-11.scope. Aug 13 00:07:16.331527 systemd-logind[1458]: New session 11 of user core. Aug 13 00:07:16.325000 audit[6364]: CRED_ACQ pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.356481 kernel: audit: type=1101 audit(1755043636.301:1600): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.356556 kernel: audit: type=1103 audit(1755043636.325:1601): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.379398 kernel: audit: type=1006 audit(1755043636.325:1602): pid=6364 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Aug 13 00:07:16.325000 audit[6364]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc19be8a0 a2=3 a3=1 items=0 ppid=1 pid=6364 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:16.402131 kernel: audit: type=1300 audit(1755043636.325:1602): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc19be8a0 a2=3 a3=1 items=0 ppid=1 pid=6364 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:16.325000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:16.409829 kernel: audit: type=1327 audit(1755043636.325:1602): proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:16.409915 kernel: audit: type=1105 audit(1755043636.356:1603): pid=6364 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.356000 audit[6364]: USER_START pid=6364 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.357000 audit[6366]: CRED_ACQ pid=6366 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.455326 kernel: audit: type=1103 audit(1755043636.357:1604): pid=6366 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.729474 sshd[6364]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:16.731000 audit[6364]: USER_END pid=6364 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.733200 systemd-logind[1458]: Session 11 logged out. Waiting for processes to exit. Aug 13 00:07:16.734325 systemd[1]: session-11.scope: Deactivated successfully. Aug 13 00:07:16.735460 systemd-logind[1458]: Removed session 11. Aug 13 00:07:16.736047 systemd[1]: sshd@8-10.200.20.20:22-10.200.16.10:41518.service: Deactivated successfully. Aug 13 00:07:16.731000 audit[6364]: CRED_DISP pid=6364 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.776362 kernel: audit: type=1106 audit(1755043636.731:1605): pid=6364 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.776486 kernel: audit: type=1104 audit(1755043636.731:1606): pid=6364 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:16.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.20:22-10.200.16.10:41518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:21.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.20:22-10.200.16.10:38994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:21.805680 systemd[1]: Started sshd@9-10.200.20.20:22-10.200.16.10:38994.service. Aug 13 00:07:21.810951 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:07:21.811049 kernel: audit: type=1130 audit(1755043641.805:1608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.20:22-10.200.16.10:38994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:22.265000 audit[6398]: USER_ACCT pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.272416 systemd[1]: Started session-12.scope. Aug 13 00:07:22.267597 sshd[6398]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:22.280581 sshd[6398]: Accepted publickey for core from 10.200.16.10 port 38994 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:22.273299 systemd-logind[1458]: New session 12 of user core. Aug 13 00:07:22.266000 audit[6398]: CRED_ACQ pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.309144 kernel: audit: type=1101 audit(1755043642.265:1609): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.309242 kernel: audit: type=1103 audit(1755043642.266:1610): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.322062 kernel: audit: type=1006 audit(1755043642.267:1611): pid=6398 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Aug 13 00:07:22.322139 kernel: audit: type=1300 audit(1755043642.267:1611): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe73e4d50 a2=3 a3=1 items=0 ppid=1 pid=6398 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:22.267000 audit[6398]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe73e4d50 a2=3 a3=1 items=0 ppid=1 pid=6398 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:22.267000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:22.351388 kernel: audit: type=1327 audit(1755043642.267:1611): proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:22.351491 kernel: audit: type=1105 audit(1755043642.277:1612): pid=6398 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.277000 audit[6398]: USER_START pid=6398 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.279000 audit[6400]: CRED_ACQ pid=6400 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.394849 kernel: audit: type=1103 audit(1755043642.279:1613): pid=6400 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.672280 sshd[6398]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:22.673000 audit[6398]: USER_END pid=6398 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.675432 systemd-logind[1458]: Session 12 logged out. Waiting for processes to exit. Aug 13 00:07:22.676732 systemd[1]: session-12.scope: Deactivated successfully. Aug 13 00:07:22.678004 systemd-logind[1458]: Removed session 12. Aug 13 00:07:22.678695 systemd[1]: sshd@9-10.200.20.20:22-10.200.16.10:38994.service: Deactivated successfully. Aug 13 00:07:22.673000 audit[6398]: CRED_DISP pid=6398 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.717572 kernel: audit: type=1106 audit(1755043642.673:1614): pid=6398 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.717649 kernel: audit: type=1104 audit(1755043642.673:1615): pid=6398 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:22.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.20:22-10.200.16.10:38994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:26.483000 audit[5940]: AVC avc: denied { watch } for pid=5940 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_06_23.3508000892/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c560 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c76,c560 tclass=file permissive=0 Aug 13 00:07:26.483000 audit[5940]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40006dee60 a2=fc6 a3=0 items=0 ppid=5887 pid=5940 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c560 key=(null) Aug 13 00:07:26.483000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:07:27.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.20:22-10.200.16.10:39006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:27.746137 systemd[1]: Started sshd@10-10.200.20.20:22-10.200.16.10:39006.service. Aug 13 00:07:27.750975 kernel: kauditd_printk_skb: 4 callbacks suppressed Aug 13 00:07:27.751061 kernel: audit: type=1130 audit(1755043647.746:1618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.20:22-10.200.16.10:39006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:28.196000 audit[6413]: USER_ACCT pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.196945 sshd[6413]: Accepted publickey for core from 10.200.16.10 port 39006 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:28.198650 sshd[6413]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:28.198000 audit[6413]: CRED_ACQ pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.242012 kernel: audit: type=1101 audit(1755043648.196:1619): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.242150 kernel: audit: type=1103 audit(1755043648.198:1620): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.246610 systemd-logind[1458]: New session 13 of user core. Aug 13 00:07:28.247209 systemd[1]: Started session-13.scope. Aug 13 00:07:28.256525 kernel: audit: type=1006 audit(1755043648.198:1621): pid=6413 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Aug 13 00:07:28.198000 audit[6413]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7fb5fa0 a2=3 a3=1 items=0 ppid=1 pid=6413 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:28.279953 kernel: audit: type=1300 audit(1755043648.198:1621): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7fb5fa0 a2=3 a3=1 items=0 ppid=1 pid=6413 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:28.198000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:28.288037 kernel: audit: type=1327 audit(1755043648.198:1621): proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:28.288123 kernel: audit: type=1105 audit(1755043648.252:1622): pid=6413 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.252000 audit[6413]: USER_START pid=6413 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.254000 audit[6415]: CRED_ACQ pid=6415 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.333288 kernel: audit: type=1103 audit(1755043648.254:1623): pid=6415 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.601444 sshd[6413]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:28.602000 audit[6413]: USER_END pid=6413 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.604240 systemd-logind[1458]: Session 13 logged out. Waiting for processes to exit. Aug 13 00:07:28.605632 systemd[1]: session-13.scope: Deactivated successfully. Aug 13 00:07:28.607473 systemd-logind[1458]: Removed session 13. Aug 13 00:07:28.608130 systemd[1]: sshd@10-10.200.20.20:22-10.200.16.10:39006.service: Deactivated successfully. Aug 13 00:07:28.602000 audit[6413]: CRED_DISP pid=6413 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.648183 kernel: audit: type=1106 audit(1755043648.602:1624): pid=6413 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.648290 kernel: audit: type=1104 audit(1755043648.602:1625): pid=6413 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:28.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.20:22-10.200.16.10:39006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:28.676147 systemd[1]: Started sshd@11-10.200.20.20:22-10.200.16.10:39008.service. Aug 13 00:07:28.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.20:22-10.200.16.10:39008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:29.127000 audit[6425]: USER_ACCT pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:29.127854 sshd[6425]: Accepted publickey for core from 10.200.16.10 port 39008 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:29.128000 audit[6425]: CRED_ACQ pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:29.128000 audit[6425]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9900000 a2=3 a3=1 items=0 ppid=1 pid=6425 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:29.128000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:29.129474 sshd[6425]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:29.133671 systemd[1]: Started session-14.scope. Aug 13 00:07:29.134313 systemd-logind[1458]: New session 14 of user core. Aug 13 00:07:29.138000 audit[6425]: USER_START pid=6425 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:29.139000 audit[6449]: CRED_ACQ pid=6449 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:29.574509 sshd[6425]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:29.575000 audit[6425]: USER_END pid=6425 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:29.575000 audit[6425]: CRED_DISP pid=6425 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:29.577090 systemd[1]: sshd@11-10.200.20.20:22-10.200.16.10:39008.service: Deactivated successfully. Aug 13 00:07:29.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.20:22-10.200.16.10:39008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:29.577893 systemd[1]: session-14.scope: Deactivated successfully. Aug 13 00:07:29.578438 systemd-logind[1458]: Session 14 logged out. Waiting for processes to exit. Aug 13 00:07:29.579105 systemd-logind[1458]: Removed session 14. Aug 13 00:07:29.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.20:22-10.200.16.10:39024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:29.656982 systemd[1]: Started sshd@12-10.200.20.20:22-10.200.16.10:39024.service. Aug 13 00:07:30.148504 sshd[6458]: Accepted publickey for core from 10.200.16.10 port 39024 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:30.148000 audit[6458]: USER_ACCT pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:30.149000 audit[6458]: CRED_ACQ pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:30.149000 audit[6458]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd68b2e40 a2=3 a3=1 items=0 ppid=1 pid=6458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:30.149000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:30.150129 sshd[6458]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:30.154659 systemd[1]: Started session-15.scope. Aug 13 00:07:30.155862 systemd-logind[1458]: New session 15 of user core. Aug 13 00:07:30.159000 audit[6458]: USER_START pid=6458 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:30.161000 audit[6460]: CRED_ACQ pid=6460 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:30.558200 sshd[6458]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:30.558000 audit[6458]: USER_END pid=6458 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:30.559000 audit[6458]: CRED_DISP pid=6458 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:30.561075 systemd[1]: sshd@12-10.200.20.20:22-10.200.16.10:39024.service: Deactivated successfully. Aug 13 00:07:30.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.20:22-10.200.16.10:39024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:30.561871 systemd[1]: session-15.scope: Deactivated successfully. Aug 13 00:07:30.562791 systemd-logind[1458]: Session 15 logged out. Waiting for processes to exit. Aug 13 00:07:30.563657 systemd-logind[1458]: Removed session 15. Aug 13 00:07:33.698061 systemd[1]: run-containerd-runc-k8s.io-cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874-runc.2s4xbu.mount: Deactivated successfully. Aug 13 00:07:35.637041 systemd[1]: Started sshd@13-10.200.20.20:22-10.200.16.10:34354.service. Aug 13 00:07:35.649814 kernel: kauditd_printk_skb: 23 callbacks suppressed Aug 13 00:07:35.649972 kernel: audit: type=1130 audit(1755043655.635:1645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.20:22-10.200.16.10:34354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:35.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.20:22-10.200.16.10:34354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:36.114000 audit[6494]: USER_ACCT pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.115789 sshd[6494]: Accepted publickey for core from 10.200.16.10 port 34354 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:36.137000 audit[6494]: CRED_ACQ pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.139770 sshd[6494]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:36.161402 kernel: audit: type=1101 audit(1755043656.114:1646): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.161582 kernel: audit: type=1103 audit(1755043656.137:1647): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.164918 systemd[1]: Started session-16.scope. Aug 13 00:07:36.166231 systemd-logind[1458]: New session 16 of user core. Aug 13 00:07:36.176718 kernel: audit: type=1006 audit(1755043656.138:1648): pid=6494 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Aug 13 00:07:36.138000 audit[6494]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe05a5ae0 a2=3 a3=1 items=0 ppid=1 pid=6494 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:36.200231 kernel: audit: type=1300 audit(1755043656.138:1648): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe05a5ae0 a2=3 a3=1 items=0 ppid=1 pid=6494 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:36.138000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:36.209029 kernel: audit: type=1327 audit(1755043656.138:1648): proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:36.169000 audit[6494]: USER_START pid=6494 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.238377 kernel: audit: type=1105 audit(1755043656.169:1649): pid=6494 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.170000 audit[6496]: CRED_ACQ pid=6496 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.260835 kernel: audit: type=1103 audit(1755043656.170:1650): pid=6496 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.554569 sshd[6494]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:36.554000 audit[6494]: USER_END pid=6494 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.580484 systemd[1]: sshd@13-10.200.20.20:22-10.200.16.10:34354.service: Deactivated successfully. Aug 13 00:07:36.554000 audit[6494]: CRED_DISP pid=6494 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.600944 kernel: audit: type=1106 audit(1755043656.554:1651): pid=6494 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.601037 kernel: audit: type=1104 audit(1755043656.554:1652): pid=6494 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:36.581294 systemd[1]: session-16.scope: Deactivated successfully. Aug 13 00:07:36.601269 systemd-logind[1458]: Session 16 logged out. Waiting for processes to exit. Aug 13 00:07:36.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.20:22-10.200.16.10:34354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:36.602320 systemd-logind[1458]: Removed session 16. Aug 13 00:07:41.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.20:22-10.200.16.10:52004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:41.630769 systemd[1]: Started sshd@14-10.200.20.20:22-10.200.16.10:52004.service. Aug 13 00:07:41.635753 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:07:41.635839 kernel: audit: type=1130 audit(1755043661.629:1654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.20:22-10.200.16.10:52004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:42.112000 audit[6526]: USER_ACCT pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.114864 sshd[6526]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:42.115415 sshd[6526]: Accepted publickey for core from 10.200.16.10 port 52004 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:42.113000 audit[6526]: CRED_ACQ pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.159014 kernel: audit: type=1101 audit(1755043662.112:1655): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.159126 kernel: audit: type=1103 audit(1755043662.113:1656): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.162778 systemd-logind[1458]: New session 17 of user core. Aug 13 00:07:42.163716 systemd[1]: Started session-17.scope. Aug 13 00:07:42.173029 kernel: audit: type=1006 audit(1755043662.113:1657): pid=6526 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Aug 13 00:07:42.113000 audit[6526]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc24bab40 a2=3 a3=1 items=0 ppid=1 pid=6526 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:42.196028 kernel: audit: type=1300 audit(1755043662.113:1657): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc24bab40 a2=3 a3=1 items=0 ppid=1 pid=6526 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:42.113000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:42.209670 kernel: audit: type=1327 audit(1755043662.113:1657): proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:42.172000 audit[6526]: USER_START pid=6526 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.234091 kernel: audit: type=1105 audit(1755043662.172:1658): pid=6526 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.174000 audit[6528]: CRED_ACQ pid=6528 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.255072 kernel: audit: type=1103 audit(1755043662.174:1659): pid=6528 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.541305 sshd[6526]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:42.541000 audit[6526]: USER_END pid=6526 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.544983 systemd-logind[1458]: Session 17 logged out. Waiting for processes to exit. Aug 13 00:07:42.546242 systemd[1]: session-17.scope: Deactivated successfully. Aug 13 00:07:42.547460 systemd-logind[1458]: Removed session 17. Aug 13 00:07:42.548097 systemd[1]: sshd@14-10.200.20.20:22-10.200.16.10:52004.service: Deactivated successfully. Aug 13 00:07:42.542000 audit[6526]: CRED_DISP pid=6526 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.588799 kernel: audit: type=1106 audit(1755043662.541:1660): pid=6526 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.588893 kernel: audit: type=1104 audit(1755043662.542:1661): pid=6526 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:42.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.20:22-10.200.16.10:52004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:42.909728 systemd[1]: run-containerd-runc-k8s.io-2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac-runc.GqwzVr.mount: Deactivated successfully. Aug 13 00:07:46.301000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:46.301000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002f40bc0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:07:46.301000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:07:46.306000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:46.306000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400279dfb0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:07:46.306000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:07:46.453000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:46.453000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400a0e6f60 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:07:46.453000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:07:46.453000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522483 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:46.453000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400a0e7200 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:07:46.453000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:07:46.459000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:46.459000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400aa0c860 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:07:46.459000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:07:46.460000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522489 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:46.460000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400a0e7d70 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:07:46.460000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:07:46.460000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:46.460000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400a0e7da0 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:07:46.460000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:07:46.460000 audit[2340]: AVC avc: denied { watch } for pid=2340 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:46.460000 audit[2340]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400aa0c8a0 a2=fc6 a3=0 items=0 ppid=2179 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c255,c363 key=(null) Aug 13 00:07:46.460000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Aug 13 00:07:47.623317 systemd[1]: Started sshd@15-10.200.20.20:22-10.200.16.10:52012.service. Aug 13 00:07:47.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.20:22-10.200.16.10:52012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:47.629514 kernel: kauditd_printk_skb: 25 callbacks suppressed Aug 13 00:07:47.629574 kernel: audit: type=1130 audit(1755043667.622:1671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.20:22-10.200.16.10:52012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:48.146243 sshd[6560]: Accepted publickey for core from 10.200.16.10 port 52012 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:48.144000 audit[6560]: USER_ACCT pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.169388 sshd[6560]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:48.167000 audit[6560]: CRED_ACQ pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.192128 kernel: audit: type=1101 audit(1755043668.144:1672): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.192218 kernel: audit: type=1103 audit(1755043668.167:1673): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.205673 kernel: audit: type=1006 audit(1755043668.167:1674): pid=6560 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Aug 13 00:07:48.211477 systemd-logind[1458]: New session 18 of user core. Aug 13 00:07:48.212165 systemd[1]: Started session-18.scope. Aug 13 00:07:48.167000 audit[6560]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffbe25d0 a2=3 a3=1 items=0 ppid=1 pid=6560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:48.240747 kernel: audit: type=1300 audit(1755043668.167:1674): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffbe25d0 a2=3 a3=1 items=0 ppid=1 pid=6560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:48.167000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:48.249318 kernel: audit: type=1327 audit(1755043668.167:1674): proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:48.240000 audit[6560]: USER_START pid=6560 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.274638 kernel: audit: type=1105 audit(1755043668.240:1675): pid=6560 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.248000 audit[6562]: CRED_ACQ pid=6562 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.295774 kernel: audit: type=1103 audit(1755043668.248:1676): pid=6562 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.623040 systemd[1]: run-containerd-runc-k8s.io-2d2aa435e301de13791ee18985a31637247eb29b06448247e5e81beffdb797ac-runc.xsUjWs.mount: Deactivated successfully. Aug 13 00:07:48.636848 sshd[6560]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:48.636000 audit[6560]: USER_END pid=6560 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.639289 systemd[1]: sshd@15-10.200.20.20:22-10.200.16.10:52012.service: Deactivated successfully. Aug 13 00:07:48.640000 systemd[1]: session-18.scope: Deactivated successfully. Aug 13 00:07:48.663079 systemd-logind[1458]: Session 18 logged out. Waiting for processes to exit. Aug 13 00:07:48.665615 systemd-logind[1458]: Removed session 18. Aug 13 00:07:48.636000 audit[6560]: CRED_DISP pid=6560 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.696285 kernel: audit: type=1106 audit(1755043668.636:1677): pid=6560 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.696394 kernel: audit: type=1104 audit(1755043668.636:1678): pid=6560 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:48.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.20:22-10.200.16.10:52012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:50.135000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:50.135000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002ec3a60 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:07:50.135000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:07:50.162000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:50.162000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002ec3a80 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:07:50.162000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:07:50.163000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:50.163000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002f411e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:07:50.163000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:07:50.163000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522481 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Aug 13 00:07:50.163000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002f41200 a2=fc6 a3=0 items=0 ppid=2155 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c804 key=(null) Aug 13 00:07:50.163000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Aug 13 00:07:51.197000 audit[4904]: AVC avc: denied { watch } for pid=4904 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_05_30.812021549/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c30,c278 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c30,c278 tclass=file permissive=0 Aug 13 00:07:51.197000 audit[4904]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001d9ab80 a2=fc6 a3=0 items=0 ppid=4085 pid=4904 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c30,c278 key=(null) Aug 13 00:07:51.197000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:07:53.711116 systemd[1]: Started sshd@16-10.200.20.20:22-10.200.16.10:42334.service. Aug 13 00:07:53.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.20:22-10.200.16.10:42334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:53.716443 kernel: kauditd_printk_skb: 16 callbacks suppressed Aug 13 00:07:53.716534 kernel: audit: type=1130 audit(1755043673.710:1685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.20:22-10.200.16.10:42334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:54.184268 sshd[6593]: Accepted publickey for core from 10.200.16.10 port 42334 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:54.182000 audit[6593]: USER_ACCT pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.207470 sshd[6593]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:54.205000 audit[6593]: CRED_ACQ pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.231227 kernel: audit: type=1101 audit(1755043674.182:1686): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.231333 kernel: audit: type=1103 audit(1755043674.205:1687): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.244942 kernel: audit: type=1006 audit(1755043674.205:1688): pid=6593 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Aug 13 00:07:54.205000 audit[6593]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcde8c00 a2=3 a3=1 items=0 ppid=1 pid=6593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:54.267223 kernel: audit: type=1300 audit(1755043674.205:1688): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcde8c00 a2=3 a3=1 items=0 ppid=1 pid=6593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:54.205000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:54.274815 kernel: audit: type=1327 audit(1755043674.205:1688): proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:54.275147 systemd-logind[1458]: New session 19 of user core. Aug 13 00:07:54.275588 systemd[1]: Started session-19.scope. Aug 13 00:07:54.278000 audit[6593]: USER_START pid=6593 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.303000 audit[6595]: CRED_ACQ pid=6595 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.324846 kernel: audit: type=1105 audit(1755043674.278:1689): pid=6593 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.324923 kernel: audit: type=1103 audit(1755043674.303:1690): pid=6595 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.639310 sshd[6593]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:54.639000 audit[6593]: USER_END pid=6593 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.643778 systemd[1]: session-19.scope: Deactivated successfully. Aug 13 00:07:54.644672 systemd[1]: sshd@16-10.200.20.20:22-10.200.16.10:42334.service: Deactivated successfully. Aug 13 00:07:54.641000 audit[6593]: CRED_DISP pid=6593 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.685373 kernel: audit: type=1106 audit(1755043674.639:1691): pid=6593 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.685451 kernel: audit: type=1104 audit(1755043674.641:1692): pid=6593 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:54.685625 systemd-logind[1458]: Session 19 logged out. Waiting for processes to exit. Aug 13 00:07:54.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.20:22-10.200.16.10:42334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:54.686510 systemd-logind[1458]: Removed session 19. Aug 13 00:07:54.717790 systemd[1]: Started sshd@17-10.200.20.20:22-10.200.16.10:42344.service. Aug 13 00:07:54.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.20:22-10.200.16.10:42344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:55.208000 audit[6604]: USER_ACCT pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:55.209711 sshd[6604]: Accepted publickey for core from 10.200.16.10 port 42344 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:55.209000 audit[6604]: CRED_ACQ pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:55.209000 audit[6604]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebc14ca0 a2=3 a3=1 items=0 ppid=1 pid=6604 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:55.209000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:55.211353 sshd[6604]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:55.215336 systemd-logind[1458]: New session 20 of user core. Aug 13 00:07:55.215837 systemd[1]: Started session-20.scope. Aug 13 00:07:55.218000 audit[6604]: USER_START pid=6604 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:55.220000 audit[6606]: CRED_ACQ pid=6606 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:55.724145 sshd[6604]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:55.724000 audit[6604]: USER_END pid=6604 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:55.724000 audit[6604]: CRED_DISP pid=6604 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:55.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.20:22-10.200.16.10:42344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:55.727344 systemd-logind[1458]: Session 20 logged out. Waiting for processes to exit. Aug 13 00:07:55.727613 systemd[1]: sshd@17-10.200.20.20:22-10.200.16.10:42344.service: Deactivated successfully. Aug 13 00:07:55.728387 systemd[1]: session-20.scope: Deactivated successfully. Aug 13 00:07:55.729637 systemd-logind[1458]: Removed session 20. Aug 13 00:07:55.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.20:22-10.200.16.10:42360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:55.806220 systemd[1]: Started sshd@18-10.200.20.20:22-10.200.16.10:42360.service. Aug 13 00:07:56.259000 audit[6614]: USER_ACCT pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:56.261403 sshd[6614]: Accepted publickey for core from 10.200.16.10 port 42360 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:56.261000 audit[6614]: CRED_ACQ pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:56.261000 audit[6614]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6d439d0 a2=3 a3=1 items=0 ppid=1 pid=6614 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:56.261000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:56.263017 sshd[6614]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:56.266849 systemd-logind[1458]: New session 21 of user core. Aug 13 00:07:56.267382 systemd[1]: Started session-21.scope. Aug 13 00:07:56.270000 audit[6614]: USER_START pid=6614 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:56.271000 audit[6618]: CRED_ACQ pid=6618 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:57.068000 audit[6628]: NETFILTER_CFG table=filter:155 family=2 entries=20 op=nft_register_rule pid=6628 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:07:57.068000 audit[6628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd9ee0b10 a2=0 a3=1 items=0 ppid=2589 pid=6628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:57.068000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:07:57.075000 audit[6628]: NETFILTER_CFG table=nat:156 family=2 entries=26 op=nft_register_rule pid=6628 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:07:57.075000 audit[6628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffd9ee0b10 a2=0 a3=1 items=0 ppid=2589 pid=6628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:57.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:07:57.095000 audit[6630]: NETFILTER_CFG table=filter:157 family=2 entries=32 op=nft_register_rule pid=6630 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:07:57.095000 audit[6630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd3497000 a2=0 a3=1 items=0 ppid=2589 pid=6630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:57.095000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:07:57.101000 audit[6630]: NETFILTER_CFG table=nat:158 family=2 entries=26 op=nft_register_rule pid=6630 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:07:57.101000 audit[6630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffd3497000 a2=0 a3=1 items=0 ppid=2589 pid=6630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:57.101000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:07:57.150451 sshd[6614]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:57.150000 audit[6614]: USER_END pid=6614 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:57.150000 audit[6614]: CRED_DISP pid=6614 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:57.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.20:22-10.200.16.10:42360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:57.153007 systemd-logind[1458]: Session 21 logged out. Waiting for processes to exit. Aug 13 00:07:57.153287 systemd[1]: sshd@18-10.200.20.20:22-10.200.16.10:42360.service: Deactivated successfully. Aug 13 00:07:57.154042 systemd[1]: session-21.scope: Deactivated successfully. Aug 13 00:07:57.155139 systemd-logind[1458]: Removed session 21. Aug 13 00:07:57.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.20:22-10.200.16.10:42366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:57.230054 systemd[1]: Started sshd@19-10.200.20.20:22-10.200.16.10:42366.service. Aug 13 00:07:57.706000 audit[6633]: USER_ACCT pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:57.707730 sshd[6633]: Accepted publickey for core from 10.200.16.10 port 42366 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:57.707000 audit[6633]: CRED_ACQ pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:57.707000 audit[6633]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4bb7700 a2=3 a3=1 items=0 ppid=1 pid=6633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:57.707000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:57.709387 sshd[6633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:57.713221 systemd-logind[1458]: New session 22 of user core. Aug 13 00:07:57.713751 systemd[1]: Started session-22.scope. Aug 13 00:07:57.716000 audit[6633]: USER_START pid=6633 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:57.718000 audit[6635]: CRED_ACQ pid=6635 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.261287 sshd[6633]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:58.260000 audit[6633]: USER_END pid=6633 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.261000 audit[6633]: CRED_DISP pid=6633 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.263861 systemd[1]: sshd@19-10.200.20.20:22-10.200.16.10:42366.service: Deactivated successfully. Aug 13 00:07:58.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.20:22-10.200.16.10:42366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:58.264717 systemd[1]: session-22.scope: Deactivated successfully. Aug 13 00:07:58.265303 systemd-logind[1458]: Session 22 logged out. Waiting for processes to exit. Aug 13 00:07:58.266298 systemd-logind[1458]: Removed session 22. Aug 13 00:07:58.342603 systemd[1]: Started sshd@20-10.200.20.20:22-10.200.16.10:42376.service. Aug 13 00:07:58.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.20:22-10.200.16.10:42376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:58.834022 sshd[6642]: Accepted publickey for core from 10.200.16.10 port 42376 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:07:58.832000 audit[6642]: USER_ACCT pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.838820 kernel: kauditd_printk_skb: 47 callbacks suppressed Aug 13 00:07:58.838921 kernel: audit: type=1101 audit(1755043678.832:1726): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.839839 sshd[6642]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:07:58.837000 audit[6642]: CRED_ACQ pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.864463 systemd[1]: Started session-23.scope. Aug 13 00:07:58.865722 systemd-logind[1458]: New session 23 of user core. Aug 13 00:07:58.882179 kernel: audit: type=1103 audit(1755043678.837:1727): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.895955 kernel: audit: type=1006 audit(1755043678.837:1728): pid=6642 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Aug 13 00:07:58.837000 audit[6642]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc83bf4d0 a2=3 a3=1 items=0 ppid=1 pid=6642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:58.919319 kernel: audit: type=1300 audit(1755043678.837:1728): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc83bf4d0 a2=3 a3=1 items=0 ppid=1 pid=6642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:07:58.919413 kernel: audit: type=1327 audit(1755043678.837:1728): proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:58.837000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:07:58.881000 audit[6642]: USER_START pid=6642 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.931733 systemd[1]: run-containerd-runc-k8s.io-cac739b0adfe300ecbc5a751e41ec45141cd8a1d0f690837372339cac08cb874-runc.4RdImm.mount: Deactivated successfully. Aug 13 00:07:58.952762 kernel: audit: type=1105 audit(1755043678.881:1729): pid=6642 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.881000 audit[6644]: CRED_ACQ pid=6644 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:58.973360 kernel: audit: type=1103 audit(1755043678.881:1730): pid=6644 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:59.245476 sshd[6642]: pam_unix(sshd:session): session closed for user core Aug 13 00:07:59.245000 audit[6642]: USER_END pid=6642 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:59.248865 systemd-logind[1458]: Session 23 logged out. Waiting for processes to exit. Aug 13 00:07:59.253595 systemd[1]: sshd@20-10.200.20.20:22-10.200.16.10:42376.service: Deactivated successfully. Aug 13 00:07:59.254368 systemd[1]: session-23.scope: Deactivated successfully. Aug 13 00:07:59.255671 systemd-logind[1458]: Removed session 23. Aug 13 00:07:59.245000 audit[6642]: CRED_DISP pid=6642 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:59.293471 kernel: audit: type=1106 audit(1755043679.245:1731): pid=6642 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:59.293580 kernel: audit: type=1104 audit(1755043679.245:1732): pid=6642 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:07:59.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.20:22-10.200.16.10:42376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:07:59.314198 kernel: audit: type=1131 audit(1755043679.252:1733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.20:22-10.200.16.10:42376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:04.328119 systemd[1]: Started sshd@21-10.200.20.20:22-10.200.16.10:54074.service. Aug 13 00:08:04.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.20:22-10.200.16.10:54074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:04.366284 kernel: audit: type=1130 audit(1755043684.327:1734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.20:22-10.200.16.10:54074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:04.824000 audit[6676]: NETFILTER_CFG table=filter:159 family=2 entries=20 op=nft_register_rule pid=6676 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:08:04.842902 sshd[6673]: Accepted publickey for core from 10.200.16.10 port 54074 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:08:04.824000 audit[6676]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc43ab8b0 a2=0 a3=1 items=0 ppid=2589 pid=6676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:04.843324 kernel: audit: type=1325 audit(1755043684.824:1735): table=filter:159 family=2 entries=20 op=nft_register_rule pid=6676 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:08:04.869483 sshd[6673]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:08:04.824000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:08:04.885086 kernel: audit: type=1300 audit(1755043684.824:1735): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc43ab8b0 a2=0 a3=1 items=0 ppid=2589 pid=6676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:04.885168 kernel: audit: type=1327 audit(1755043684.824:1735): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:08:04.841000 audit[6673]: USER_ACCT pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:04.908210 kernel: audit: type=1101 audit(1755043684.841:1736): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:04.867000 audit[6673]: CRED_ACQ pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:04.930293 kernel: audit: type=1103 audit(1755043684.867:1737): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:04.932694 systemd-logind[1458]: New session 24 of user core. Aug 13 00:08:04.933164 systemd[1]: Started session-24.scope. Aug 13 00:08:04.867000 audit[6673]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd399f030 a2=3 a3=1 items=0 ppid=1 pid=6673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:04.972417 kernel: audit: type=1006 audit(1755043684.867:1738): pid=6673 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Aug 13 00:08:04.972532 kernel: audit: type=1300 audit(1755043684.867:1738): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd399f030 a2=3 a3=1 items=0 ppid=1 pid=6673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:04.867000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:04.982321 kernel: audit: type=1327 audit(1755043684.867:1738): proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:04.884000 audit[6676]: NETFILTER_CFG table=nat:160 family=2 entries=110 op=nft_register_chain pid=6676 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:08:04.996346 kernel: audit: type=1325 audit(1755043684.884:1739): table=nat:160 family=2 entries=110 op=nft_register_chain pid=6676 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Aug 13 00:08:04.884000 audit[6676]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffc43ab8b0 a2=0 a3=1 items=0 ppid=2589 pid=6676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:04.884000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Aug 13 00:08:04.972000 audit[6673]: USER_START pid=6673 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:04.973000 audit[6677]: CRED_ACQ pid=6677 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:05.328470 sshd[6673]: pam_unix(sshd:session): session closed for user core Aug 13 00:08:05.328000 audit[6673]: USER_END pid=6673 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:05.328000 audit[6673]: CRED_DISP pid=6673 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:05.331673 systemd[1]: sshd@21-10.200.20.20:22-10.200.16.10:54074.service: Deactivated successfully. Aug 13 00:08:05.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.20:22-10.200.16.10:54074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:05.332454 systemd[1]: session-24.scope: Deactivated successfully. Aug 13 00:08:05.332985 systemd-logind[1458]: Session 24 logged out. Waiting for processes to exit. Aug 13 00:08:05.334124 systemd-logind[1458]: Removed session 24. Aug 13 00:08:10.410741 systemd[1]: Started sshd@22-10.200.20.20:22-10.200.16.10:49138.service. Aug 13 00:08:10.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.20:22-10.200.16.10:49138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:10.416638 kernel: kauditd_printk_skb: 7 callbacks suppressed Aug 13 00:08:10.416754 kernel: audit: type=1130 audit(1755043690.409:1745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.20:22-10.200.16.10:49138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:10.907000 audit[6687]: USER_ACCT pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:10.909041 sshd[6687]: Accepted publickey for core from 10.200.16.10 port 49138 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:08:10.930000 audit[6687]: CRED_ACQ pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:10.932336 kernel: audit: type=1101 audit(1755043690.907:1746): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:10.932398 kernel: audit: type=1103 audit(1755043690.930:1747): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:10.932492 sshd[6687]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:08:10.965729 kernel: audit: type=1006 audit(1755043690.930:1748): pid=6687 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Aug 13 00:08:10.930000 audit[6687]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff72dd9f0 a2=3 a3=1 items=0 ppid=1 pid=6687 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:10.988516 kernel: audit: type=1300 audit(1755043690.930:1748): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff72dd9f0 a2=3 a3=1 items=0 ppid=1 pid=6687 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:10.930000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:10.997102 kernel: audit: type=1327 audit(1755043690.930:1748): proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:10.999378 systemd-logind[1458]: New session 25 of user core. Aug 13 00:08:10.999859 systemd[1]: Started session-25.scope. Aug 13 00:08:11.002000 audit[6687]: USER_START pid=6687 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:11.054169 kernel: audit: type=1105 audit(1755043691.002:1749): pid=6687 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:11.054285 kernel: audit: type=1103 audit(1755043691.004:1750): pid=6711 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:11.004000 audit[6711]: CRED_ACQ pid=6711 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:11.376418 sshd[6687]: pam_unix(sshd:session): session closed for user core Aug 13 00:08:11.376000 audit[6687]: USER_END pid=6687 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:11.383137 systemd[1]: session-25.scope: Deactivated successfully. Aug 13 00:08:11.383804 systemd[1]: sshd@22-10.200.20.20:22-10.200.16.10:49138.service: Deactivated successfully. Aug 13 00:08:11.376000 audit[6687]: CRED_DISP pid=6687 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:11.402980 systemd-logind[1458]: Session 25 logged out. Waiting for processes to exit. Aug 13 00:08:11.403815 systemd-logind[1458]: Removed session 25. Aug 13 00:08:11.422004 kernel: audit: type=1106 audit(1755043691.376:1751): pid=6687 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:11.422119 kernel: audit: type=1104 audit(1755043691.376:1752): pid=6687 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:11.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.20:22-10.200.16.10:49138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:16.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.20:22-10.200.16.10:49144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:16.458781 systemd[1]: Started sshd@23-10.200.20.20:22-10.200.16.10:49144.service. Aug 13 00:08:16.463958 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:08:16.464051 kernel: audit: type=1130 audit(1755043696.457:1754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.20:22-10.200.16.10:49144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:16.951000 audit[6742]: USER_ACCT pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:16.953031 sshd[6742]: Accepted publickey for core from 10.200.16.10 port 49144 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:08:16.958729 sshd[6742]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:08:16.957000 audit[6742]: CRED_ACQ pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:16.996653 kernel: audit: type=1101 audit(1755043696.951:1755): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:16.996775 kernel: audit: type=1103 audit(1755043696.957:1756): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:17.010858 kernel: audit: type=1006 audit(1755043696.957:1757): pid=6742 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Aug 13 00:08:16.957000 audit[6742]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedec6830 a2=3 a3=1 items=0 ppid=1 pid=6742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:17.014077 systemd-logind[1458]: New session 26 of user core. Aug 13 00:08:17.014669 systemd[1]: Started session-26.scope. Aug 13 00:08:17.034398 kernel: audit: type=1300 audit(1755043696.957:1757): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedec6830 a2=3 a3=1 items=0 ppid=1 pid=6742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:16.957000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:17.047387 kernel: audit: type=1327 audit(1755043696.957:1757): proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:17.047475 kernel: audit: type=1105 audit(1755043697.018:1758): pid=6742 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:17.018000 audit[6742]: USER_START pid=6742 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:17.023000 audit[6744]: CRED_ACQ pid=6744 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:17.093177 kernel: audit: type=1103 audit(1755043697.023:1759): pid=6744 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:17.406811 sshd[6742]: pam_unix(sshd:session): session closed for user core Aug 13 00:08:17.406000 audit[6742]: USER_END pid=6742 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:17.409916 systemd-logind[1458]: Session 26 logged out. Waiting for processes to exit. Aug 13 00:08:17.411082 systemd[1]: session-26.scope: Deactivated successfully. Aug 13 00:08:17.412411 systemd-logind[1458]: Removed session 26. Aug 13 00:08:17.412818 systemd[1]: sshd@23-10.200.20.20:22-10.200.16.10:49144.service: Deactivated successfully. Aug 13 00:08:17.406000 audit[6742]: CRED_DISP pid=6742 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:17.453025 kernel: audit: type=1106 audit(1755043697.406:1760): pid=6742 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:17.453156 kernel: audit: type=1104 audit(1755043697.406:1761): pid=6742 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:17.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.20:22-10.200.16.10:49144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:22.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.20:22-10.200.16.10:34272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:22.515814 kernel: kauditd_printk_skb: 1 callbacks suppressed Aug 13 00:08:22.515896 kernel: audit: type=1130 audit(1755043702.489:1763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.20:22-10.200.16.10:34272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:22.490302 systemd[1]: Started sshd@24-10.200.20.20:22-10.200.16.10:34272.service. Aug 13 00:08:22.979000 audit[6759]: USER_ACCT pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:22.980980 sshd[6759]: Accepted publickey for core from 10.200.16.10 port 34272 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:08:23.005302 kernel: audit: type=1101 audit(1755043702.979:1764): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.005596 sshd[6759]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:08:23.003000 audit[6759]: CRED_ACQ pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.040769 kernel: audit: type=1103 audit(1755043703.003:1765): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.040881 kernel: audit: type=1006 audit(1755043703.003:1766): pid=6759 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Aug 13 00:08:23.003000 audit[6759]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff90de9d0 a2=3 a3=1 items=0 ppid=1 pid=6759 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:23.068498 kernel: audit: type=1300 audit(1755043703.003:1766): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff90de9d0 a2=3 a3=1 items=0 ppid=1 pid=6759 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:23.003000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:23.071666 systemd[1]: Started session-27.scope. Aug 13 00:08:23.073024 systemd-logind[1458]: New session 27 of user core. Aug 13 00:08:23.077518 kernel: audit: type=1327 audit(1755043703.003:1766): proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:23.077000 audit[6759]: USER_START pid=6759 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.105274 kernel: audit: type=1105 audit(1755043703.077:1767): pid=6759 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.104000 audit[6764]: CRED_ACQ pid=6764 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.126278 kernel: audit: type=1103 audit(1755043703.104:1768): pid=6764 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.457431 sshd[6759]: pam_unix(sshd:session): session closed for user core Aug 13 00:08:23.457000 audit[6759]: USER_END pid=6759 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.460017 systemd-logind[1458]: Session 27 logged out. Waiting for processes to exit. Aug 13 00:08:23.461135 systemd[1]: session-27.scope: Deactivated successfully. Aug 13 00:08:23.462307 systemd-logind[1458]: Removed session 27. Aug 13 00:08:23.462924 systemd[1]: sshd@24-10.200.20.20:22-10.200.16.10:34272.service: Deactivated successfully. Aug 13 00:08:23.457000 audit[6759]: CRED_DISP pid=6759 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.503336 kernel: audit: type=1106 audit(1755043703.457:1769): pid=6759 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.503453 kernel: audit: type=1104 audit(1755043703.457:1770): pid=6759 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:23.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.20:22-10.200.16.10:34272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:26.484000 audit[5940]: AVC avc: denied { watch } for pid=5940 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_06_23.3508000892/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c76,c560 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c76,c560 tclass=file permissive=0 Aug 13 00:08:26.484000 audit[5940]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400114a120 a2=fc6 a3=0 items=0 ppid=5887 pid=5940 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c76,c560 key=(null) Aug 13 00:08:26.484000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Aug 13 00:08:28.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.20:22-10.200.16.10:34280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:28.537532 systemd[1]: Started sshd@25-10.200.20.20:22-10.200.16.10:34280.service. Aug 13 00:08:28.542593 kernel: kauditd_printk_skb: 4 callbacks suppressed Aug 13 00:08:28.542683 kernel: audit: type=1130 audit(1755043708.536:1773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.20:22-10.200.16.10:34280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:29.025000 audit[6775]: USER_ACCT pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.027309 sshd[6775]: Accepted publickey for core from 10.200.16.10 port 34280 ssh2: RSA SHA256:J/je3NSfm2Jr+TQ4JtJfZPKSEEtI0uL9aC1/9TbPR4M Aug 13 00:08:29.029454 sshd[6775]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Aug 13 00:08:29.027000 audit[6775]: CRED_ACQ pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.070393 kernel: audit: type=1101 audit(1755043709.025:1774): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.070515 kernel: audit: type=1103 audit(1755043709.027:1775): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.074143 systemd-logind[1458]: New session 28 of user core. Aug 13 00:08:29.074737 systemd[1]: Started session-28.scope. Aug 13 00:08:29.083814 kernel: audit: type=1006 audit(1755043709.027:1776): pid=6775 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Aug 13 00:08:29.027000 audit[6775]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8b7e230 a2=3 a3=1 items=0 ppid=1 pid=6775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:29.105868 kernel: audit: type=1300 audit(1755043709.027:1776): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8b7e230 a2=3 a3=1 items=0 ppid=1 pid=6775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Aug 13 00:08:29.027000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:29.113900 kernel: audit: type=1327 audit(1755043709.027:1776): proctitle=737368643A20636F7265205B707269765D Aug 13 00:08:29.114007 kernel: audit: type=1105 audit(1755043709.078:1777): pid=6775 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.078000 audit[6775]: USER_START pid=6775 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.079000 audit[6797]: CRED_ACQ pid=6797 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.157332 kernel: audit: type=1103 audit(1755043709.079:1778): pid=6797 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.443474 sshd[6775]: pam_unix(sshd:session): session closed for user core Aug 13 00:08:29.443000 audit[6775]: USER_END pid=6775 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.447481 systemd[1]: sshd@25-10.200.20.20:22-10.200.16.10:34280.service: Deactivated successfully. Aug 13 00:08:29.448377 systemd[1]: session-28.scope: Deactivated successfully. Aug 13 00:08:29.444000 audit[6775]: CRED_DISP pid=6775 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.495732 kernel: audit: type=1106 audit(1755043709.443:1779): pid=6775 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.495857 kernel: audit: type=1104 audit(1755043709.444:1780): pid=6775 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Aug 13 00:08:29.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.20:22-10.200.16.10:34280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Aug 13 00:08:29.496128 systemd-logind[1458]: Session 28 logged out. Waiting for processes to exit. Aug 13 00:08:29.497092 systemd-logind[1458]: Removed session 28.