time="2026-09-24T15:47:47.494150723Z" level=info msg="Updating config from single file: /tmp/crio-vulnerable-1/crio.conf"
time="2026-09-24T15:47:47.494173762Z" level=info msg="Updating config from drop-in file: /tmp/crio-vulnerable-1/crio.conf"
time="2026-09-24T15:47:47.494350545Z" level=info msg="Updating config from path: "
time="2026-09-24T15:47:47.50188146Z" level=info msg="Starting CRI-O, version: 1.36.5, git: 6e902ee2a9f7ce535855c68c92c6838f087f578f(clean)"
time="2026-09-24T15:47:47.501920779Z" level=info msg="Node configuration value for hugetlb cgroup is true"
time="2026-09-24T15:47:47.501923238Z" level=info msg="Node configuration value for pid cgroup is true"
time="2026-09-24T15:47:47.501939808Z" level=info msg="Node configuration value for memoryswap cgroup is true"
time="2026-09-24T15:47:47.501941548Z" level=info msg="Node configuration value for cgroup v2 is true"
time="2026-09-24T15:47:47.501975856Z" level=warning msg="node configuration validation for systemd AllowedCPUs failed: check systemd AllowedCPUs: exec: \"systemctl\": executable file not found in $PATH"
time="2026-09-24T15:47:47.501979326Z" level=info msg="Node configuration value for systemd AllowedCPUs is false"
time="2026-09-24T15:47:47.502260406Z" level=info msg="Using default capabilities: CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_FSETID, CAP_FOWNER, CAP_SETGID, CAP_SETUID, CAP_SETPCAP, CAP_NET_BIND_SERVICE, CAP_KILL"
time="2026-09-24T15:47:47.502272556Z" level=warning msg="Runtime handler \"crun\" is being ignored due to: \"crun\" not found in $PATH: exec: \"crun\": executable file not found in $PATH"
time="2026-09-24T15:47:47.502289335Z" level=info msg="Runtime handler \"runc\" container create timeout not set, using default: 240 seconds"
time="2026-09-24T15:47:47.507780582Z" level=info msg="Using runtime handler runc version 1.3.4, commit: v1.3.4-0-gd6d73eb8, spec: 1.2.1, go: go1.24.10, libseccomp: 2.5.6"
time="2026-09-24T15:47:47.514034831Z" level=info msg="Using pinns executable: /tmp/crio-vulnerable-1/pinns"
time="2026-09-24T15:47:47.514063651Z" level=info msg="Checkpoint/restore support enabled"
time="2026-09-24T15:47:47.51406642Z" level=info msg="Using the internal default seccomp profile"
time="2026-09-24T15:47:47.51407163Z" level=info msg="AppArmor is disabled by the system or at CRI-O build-time"
time="2026-09-24T15:47:47.51407373Z" level=info msg="No blockio config file specified, blockio not configured"
time="2026-09-24T15:47:47.51407587Z" level=info msg="RDT not available in the host system"
time="2026-09-24T15:47:47.51408087Z" level=info msg="Using conmon executable: /usr/bin/conmon"
time="2026-09-24T15:47:47.516129618Z" level=info msg="Conmon does support the --sync option"
time="2026-09-24T15:47:47.516143877Z" level=info msg="Conmon does support the --log-global-size-max option"
time="2026-09-24T15:47:47.520046137Z" level=info msg="Found CNI network lo (type=loopback) at /tmp/crio-vulnerable-1/cni/10-loopback.conflist"
time="2026-09-24T15:47:47.520056657Z" level=info msg="Updated default CNI network name to lo"
time="2026-09-24T15:47:47.520188803Z" level=info msg="FLAG: --c=\"/tmp/crio-vulnerable-1/crio.conf\"\n"
time="2026-09-24T15:47:47.520197153Z" level=info msg="FLAG: --config=\"/tmp/crio-vulnerable-1/crio.conf\"\n"
time="2026-09-24T15:47:47.520200113Z" level=info msg="FLAG: --config-dir=\"\"\n"
time="2026-09-24T15:47:47.520206582Z" level=info msg="FLAG: --d=\"\"\n"
time="2026-09-24T15:47:47.52031726Z" level=info msg="CNI plugin is now healthy (was: plugin status uninitialized)"
time="2026-09-24T15:47:47.520383808Z" level=info msg="Continuous CNI STATUS monitoring is disabled (cni_status_grace_period is 0s)"
time="2026-09-24T15:47:47.52054945Z" level=info msg="Current CRI-O configuration:\n[crio]\n  root = \"/var/lib/pruva-crio-root\"\n  runroot = \"/run/pruva-crio-root\"\n  imagestore = \"\"\n  storage_driver = \"vfs\"\n  log_dir = \"/var/log/crio/pods\"\n  version_file = \"/var/run/crio/version\"\n  version_file_persist = \"\"\n  clean_shutdown_file = \"/var/lib/crio/clean.shutdown\"\n  internal_wipe = true\n  internal_repair = true\n  [crio.api]\n    grpc_max_send_msg_size = 83886080\n    grpc_max_recv_msg_size = 83886080\n    listen = \"/tmp/crio-vulnerable-1/crio.sock\"\n    stream_address = \"127.0.0.1\"\n    stream_port = \"0\"\n    stream_enable_tls = false\n    stream_tls_cert = \"\"\n    stream_tls_key = \"\"\n    stream_tls_ca = \"\"\n    stream_idle_timeout = \"\"\n    tls_min_version = \"VersionTLS12\"\n  [crio.runtime]\n    no_pivot = false\n    selinux = false\n    log_to_journald = false\n    drop_infra_ctr = false\n    read_only = false\n    hooks_dir = [\"/usr/share/containers/oci/hooks.d\"]\n    default_capabilities = [\"CHOWN\", \"DAC_OVERRIDE\", \"FSETID\", \"FOWNER\", \"SETGID\", \"SETUID\", \"SETPCAP\", \"NET_BIND_SERVICE\", \"KILL\"]\n    add_inheritable_capabilities = false\n    min_injected_gomaxprocs = 0\n    allowed_devices = [\"/dev/fuse\", \"/dev/net/tun\"]\n    cdi_spec_dirs = [\"/etc/cdi\", \"/var/run/cdi\"]\n    device_ownership_from_security_context = false\n    default_runtime = \"runc\"\n    decryption_keys_path = \"/etc/crio/keys/\"\n    conmon = \"/usr/bin/conmon\"\n    conmon_cgroup = \"\"\n    seccomp_profile = \"\"\n    privileged_seccomp_profile = \"\"\n    apparmor_profile = \"crio-default\"\n    blockio_config_file = \"\"\n    blockio_reload = false\n    irqbalance_config_file = \"/etc/sysconfig/irqbalance\"\n    rdt_config_file = \"\"\n    cgroup_manager = \"cgroupfs\"\n    default_mounts_file = \"\"\n    container_exits_dir = \"/tmp/crio-vulnerable-1/exits\"\n    container_attach_socket_dir = \"/tmp/crio-vulnerable-1/attach\"\n    bind_mount_prefix = \"\"\n    uid_mappings = \"\"\n    minimum_mappable_uid = -1\n    gid_mappings = \"\"\n    minimum_mappable_gid = -1\n    log_level = \"info\"\n    log_filter = \"\"\n    namespaces_dir = \"/var/run\"\n    pinns_path = \"/tmp/crio-vulnerable-1/pinns\"\n    enable_criu_support = true\n    pids_limit = -1\n    log_size_max = -1\n    ctr_stop_timeout = 30\n    separate_pull_cgroup = \"\"\n    infra_ctr_cpuset = \"\"\n    shared_cpuset = \"\"\n    enable_pod_events = false\n    irqbalance_config_restore_file = \"/etc/sysconfig/orig_irq_banned_cpus\"\n    hostnetwork_disable_selinux = true\n    disable_hostport_mapping = false\n    timezone = \"\"\n    [crio.runtime.runtimes]\n      [crio.runtime.runtimes.runc]\n        runtime_config_path = \"\"\n        runtime_path = \"/usr/local/bin/runc-rootless-adapter\"\n        runtime_type = \"oci\"\n        runtime_root = \"/tmp/crio-vulnerable-1/runc-root\"\n        monitor_path = \"/usr/bin/conmon\"\n        container_min_memory = \"12MiB\"\n        no_sync_log = false\n        container_create_timeout = 240\n  [crio.image]\n    default_transport = \"docker://\"\n    global_auth_file = \"\"\n    namespaced_auth_dir = \"/etc/crio/auth\"\n    pause_image = \"registry.k8s.io/pause:3.10.2\"\n    pause_image_auth_file = \"\"\n    pause_command = \"/pause\"\n    signature_policy = \"\"\n    signature_policy_dir = \"/etc/crio/policies\"\n    image_volumes = \"mkdir\"\n    big_files_temporary_dir = \"\"\n    auto_reload_registries = false\n    pull_progress_timeout = \"0s\"\n    oci_artifact_mount_support = true\n    short_name_mode = \"enforcing\"\n  [crio.network]\n    cni_default_network = \"\"\n    network_dir = \"/tmp/crio-vulnerable-1/cni\"\n    plugin_dirs = [\"/tmp/crio-vulnerable-1/cnibin\"]\n    cni_status_grace_period = \"0s\"\n  [crio.metrics]\n    enable_metrics = false\n    metrics_collectors = [\"image_pulls_layer_size\", \"containers_events_dropped_total\", \"containers_oom_total\", \"processes_defunct\", \"operations_total\", \"operations_latency_seconds\", \"operations_latency_seconds_total\", \"operations_errors_total\", \"image_pulls_bytes_total\", \"image_pulls_skipped_bytes_total\", \"image_pulls_failure_total\", \"image_pulls_success_total\", \"image_layer_reuse_total\", \"containers_oom_count_total\", \"containers_seccomp_notifier_count_total\", \"resources_stalled_at_stage\", \"containers_stopped_monitor_count\", \"default_runtime\"]\n    metrics_host = \"127.0.0.1\"\n    metrics_port = 9090\n    metrics_socket = \"\"\n    metrics_cert = \"\"\n    metrics_key = \"\"\n  [crio.tracing]\n    enable_tracing = false\n    tracing_endpoint = \"127.0.0.1:4317\"\n    tracing_sampling_rate_per_million = 0\n  [crio.stats]\n    stats_collection_period = 0\n    collection_period = 0\n  [crio.nri]\n    enable_nri = true\n    nri_listen = \"/var/run/nri/nri.sock\"\n    nri_plugin_dir = \"/opt/nri/plugins\"\n    nri_plugin_config_dir = \"/etc/nri/conf.d\"\n    nri_plugin_registration_timeout = \"5s\"\n    nri_plugin_request_timeout = \"2s\"\n    nri_disable_connections = false\n    [crio.nri.default_validator]\n      nri_enable_default_validator = false\n      nri_validator_reject_oci_hook_adjustment = false\n      nri_validator_reject_runtime_default_seccomp_adjustment = false\n      nri_validator_reject_unconfined_seccomp_adjustment = false\n      nri_validator_reject_custom_seccomp_adjustment = false\n      nri_validator_reject_namespace_adjustment = false\n      nri_validator_tolerate_missing_plugins_annotation = \"\"\n"
time="2026-09-24T15:47:47.52202179Z" level=info msg="Attempting to restore irqbalance config from /etc/sysconfig/orig_irq_banned_cpus"
time="2026-09-24T15:47:47.522096957Z" level=info msg="Restore irqbalance config: failed to get current CPU ban list, ignoring"
time="2026-09-24T15:47:47.52823778Z" level=info msg="No kernel support for IPv6: could not find nftables binary: exec: \"nft\": executable file not found in $PATH"
time="2026-09-24T15:47:47.528644264Z" level=info msg="Registered SIGHUP reload watcher"
time="2026-09-24T15:47:47.528706172Z" level=info msg="Starting seccomp notifier watcher"
time="2026-09-24T15:47:47.52876449Z" level=info msg="Create NRI interface"
time="2026-09-24T15:47:47.528836667Z" level=info msg="built-in NRI default validator is disabled"
time="2026-09-24T15:47:47.528848047Z" level=info msg="runtime interface created"
time="2026-09-24T15:47:47.528862136Z" level=info msg="Registered domain \"k8s.io\" with NRI"
time="2026-09-24T15:47:47.528873776Z" level=info msg="runtime interface starting up..."
time="2026-09-24T15:47:47.528884966Z" level=info msg="starting plugins..."
time="2026-09-24T15:47:47.528903665Z" level=info msg="Synchronizing NRI (plugin) with current runtime state"
time="2026-09-24T15:47:47.529016532Z" level=info msg="No systemd watchdog enabled"
time="2026-09-24T15:47:48.53089469Z" level=info msg="Pulling image: registry.k8s.io/pause:3.10.2" id=e886bfa8-0ae1-4f46-81e9-90db2a66a6f5 name=/runtime.v1.ImageService/PullImage
time="2026-09-24T15:47:48.531113412Z" level=info msg="Trying to access \"registry.k8s.io/pause:3.10.2\""
time="2026-09-24T15:47:49.058057059Z" level=info msg="Pulled image: 4a83b15d3ecfe0d916b2d0a7991bc2854a629b8097017c2ee1ff65b30ae4c07c" id=e886bfa8-0ae1-4f46-81e9-90db2a66a6f5 name=/runtime.v1.ImageService/PullImage
time="2026-09-24T15:47:49.077755242Z" level=info msg="Pulling image: quay.io/crio/fedora-crio-ci:latest" id=daf832d0-fd75-4766-aae6-67c6d61b7fcf name=/runtime.v1.ImageService/PullImage
time="2026-09-24T15:47:49.077894387Z" level=info msg="Trying to access \"quay.io/crio/fedora-crio-ci:latest\""
time="2026-09-24T15:47:50.509986053Z" level=info msg="Pulled image: 492b81c586bf4fe31298733e7dd38ad35d03f5288a6810835d5d8c3c064d6837" id=daf832d0-fd75-4766-aae6-67c6d61b7fcf name=/runtime.v1.ImageService/PullImage
time="2026-09-24T15:47:50.534585243Z" level=info msg="Running pod sandbox: pruva-repro/pod-vulnerable-1/POD" id=63318cd3-58d6-4e07-b2b6-10c56e0bb0eb name=/runtime.v1.RuntimeService/RunPodSandbox
time="2026-09-24T15:47:50.534635611Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:50.538309224Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:50.59340235Z" level=info msg="Ran pod sandbox 3ac7563b9298cc4aeec1c96e1e5157573f558e8dd4ed7c58a130c83f5496da35 with infra container: pruva-repro/pod-vulnerable-1/POD" id=63318cd3-58d6-4e07-b2b6-10c56e0bb0eb name=/runtime.v1.RuntimeService/RunPodSandbox
time="2026-09-24T15:47:50.611915758Z" level=info msg="Creating container: //" id=ced627df-bd69-4756-93b8-ae4b734e4ae0 name=/runtime.v1.RuntimeService/CreateContainer
time="2026-09-24T15:47:50.613451107Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:50.613480626Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:50.965441561Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:50.965921784Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:50.990212399Z" level=info msg="Starting container: 78a51ea652b12e68f7f54f82aad76f85ca453fcb90ad33c7ad93f7fad82b4bdf" id=b3776254-c280-4ade-ab6c-51da95489a00 name=/runtime.v1.RuntimeService/StartContainer
time="2026-09-24T15:47:51.062021815Z" level=info msg="Restored container: 78a51ea652b12e68f7f54f82aad76f85ca453fcb90ad33c7ad93f7fad82b4bdf" id=b3776254-c280-4ade-ab6c-51da95489a00 name=/runtime.v1.RuntimeService/StartContainer