/proc/sys/net/ipv4/tcp_* AppArmor violations with latest passt

[martinpitt]

upstream report and patch: https://bugzilla.redhat.com/show_bug.cgi?id=2426863

[cockpituous]

debian-testing
Ooops, it happened again

---

> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> warn: GET_ALL_VMS action failed: Rejected send message, 1 matched rules; type="method_call", sender=":1.100" (uid=1002 pid=5030 comm="/usr/bin/python3 /usr/bin/cockpit-bridge" label="unconfined") interface="org.libvirt.Connect" member="ListDomains" error name="(unset)" requested_reply="0" destination="org.libvirt" (uid=107 pid=1450 comm="/usr/sbin/libvirt-dbus --system" label="unconfined")
audit: type=1400 audit(1767387470.200:208): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5186 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767387470.216:209): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5186 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767387470.216:210): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5186 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767387470.248:211): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5188 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767387470.248:212): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5188 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767387470.248:213): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5188 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767387470.272:214): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5190 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767387470.272:215): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5190 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767387470.272:216): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5190 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestMachinesNICs-testPortForwards-debian-testing-127.0.0.2-3001-FAIL.js.log
Journal extracted to TestMachinesNICs-testPortForwards-debian-testing-127.0.0.2-3001-FAIL.log.gz
Stopping 'libvirtd.service', but its triggering units are still active:
libvirtd-ro.socket, libvirtd.socket, libvirtd-admin.socket
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/machineslib.py", line 591, in tearDown
    super().tearDown()
    ~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2055, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2321, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1767387470.200:208): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5186 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testPortForwards (__main__.TestMachinesNICs.testPortForwards) failed
# 1 TEST FAILED [30s on 7d5519210afe]
not ok 84 /work/make-checkout-workdir/test/check-machines-nics TestMachinesNICs.testPortForwards [ND@7]

First occurrence: 2026-01-02T20:57:57.439109+00:00 | revision d8d6689
Times recorded: 1
Latest occurrences:

• 2026-01-02T20:57:57.439109+00:00 | revision d8d6689

---

> info: PackageKit went away from D-Bus
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
Running as unit: mem-hog.service; invocation ID: f92cbd507ef147579e45ed6fcfe00321
> warn: CPU temperature metric closed: Object(3)
Getting image source signatures
Copying blob sha256:84496267475d55be3842b1f3e0c546529e6c539c3ad4b9cd37a91677444cf3cd
Copying blob sha256:b92437a87bb9fdba549cccb225042bb05b8789d69defffc21554e626c60f99d8
Copying config sha256:058a2282f40b52cab19a3464810b8373fac84766774d56b4f0693ee615876772
Writing manifest to image destination
Running as unit: user-mem-hog.service; invocation ID: b4c72c184ac04516872ee98b2c41e8b7
Running as unit: mem-userhog.service; invocation ID: 8eb2db31262b42018e7ccc9953d1a3ab
audit: type=1400 audit(1767426402.452:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=16843 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767426402.452:117): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=16843 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767426402.452:118): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=16843 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestCurrentMetrics-testMemory-debian-testing-127.0.0.2-3001-FAIL.js.log
Journal extracted to TestCurrentMetrics-testMemory-debian-testing-127.0.0.2-3001-FAIL.log.gz
Removed '/etc/systemd/system/packagekit.service'.
> warn: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2055, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2321, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1767426402.452:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=16843 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testMemory (__main__.TestCurrentMetrics.testMemory) failed
# 1 TEST FAILED [46s on 53375d6573b2]
not ok 30 test/verify/check-metrics TestCurrentMetrics.testMemory [ND@7]

First occurrence: 2026-01-03T07:47:00.246422+00:00 | revision d806f387932b7c74c37da18f739ccc29e3ac8a5a
Times recorded: 1
Latest occurrences:

• 2026-01-03T07:47:00.246422+00:00 | revision d806f387932b7c74c37da18f739ccc29e3ac8a5a

---

> info: PackageKit went away from D-Bus
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
> info: PackageKit went away from D-Bus
> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
Running as unit: cpu-userhog.service; invocation ID: a4c2e17bded94fd9a62da659194db482
WARNING: Waiting for ph_in_text("table[aria-label='Top 5 CPU services'] tbody","cpu-userhog") took 10.0 seconds, which is 66% of the timeout.
> warn: CPU temperature metric closed: Object(2)
audit: type=1400 audit(1767426428.628:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=6737 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767426428.628:117): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=6737 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767426428.628:118): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=6737 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestCurrentMetrics-testCPU-debian-testing-127.0.0.2-2901-FAIL.js.log
Journal extracted to TestCurrentMetrics-testCPU-debian-testing-127.0.0.2-2901-FAIL.log.gz
Removed '/etc/systemd/system/packagekit.service'.
> warn: transport closed: disconnected
umount: /etc/cockpit: target is busy.
                     USER        PID ACCESS COMMAND
/etc/cockpit:        root     kernel mount (root)/etc/cockpit
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2055, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2321, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1767426428.628:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=6737 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testCPU (__main__.TestCurrentMetrics.testCPU) failed
# 1 TEST FAILED [216s on 53375d6573b2]
not ok 28 test/verify/check-metrics TestCurrentMetrics.testCPU [ND@6]

First occurrence: 2026-01-03T07:49:57.400071+00:00 | revision d806f387932b7c74c37da18f739ccc29e3ac8a5a
Times recorded: 1
Latest occurrences:

• 2026-01-03T07:49:57.400071+00:00 | revision d806f387932b7c74c37da18f739ccc29e3ac8a5a

---

> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> warn: GET_ALL_VMS action failed: Rejected send message, 1 matched rules; type="method_call", sender=":1.98" (uid=1002 pid=5259 comm="/usr/bin/python3 /usr/bin/cockpit-bridge" label="unconfined") interface="org.libvirt.Connect" member="ListDomains" error name="(unset)" requested_reply="0" destination="org.libvirt" (uid=107 pid=1329 comm="/usr/sbin/libvirt-dbus --system" label="unconfined")
audit: type=1400 audit(1767766093.764:154): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5414 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766093.764:155): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5414 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766093.764:156): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5414 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766093.928:157): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5416 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766093.940:158): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5416 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766093.940:159): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5416 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766094.024:160): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5418 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766094.036:161): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5418 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766094.036:162): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5418 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestMachinesNICs-testPortForwards-debian-testing-127.0.0.2-2701-FAIL.js.log
Journal extracted to TestMachinesNICs-testPortForwards-debian-testing-127.0.0.2-2701-FAIL.log.gz
Stopping 'libvirtd.service', but its triggering units are still active:
libvirtd.socket, libvirtd-ro.socket, libvirtd-admin.socket
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/machineslib.py", line 591, in tearDown
    super().tearDown()
    ~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2055, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2321, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1767766093.764:154): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5414 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testPortForwards (__main__.TestMachinesNICs.testPortForwards) failed
# 1 TEST FAILED [31s on 2f96adf7e040]
not ok 84 /work/make-checkout-workdir/test/check-machines-nics TestMachinesNICs.testPortForwards [ND@4]

First occurrence: 2026-01-07T06:08:22.681079+00:00 | revision 134adf8
Times recorded: 1
Latest occurrences:

• 2026-01-07T06:08:22.681079+00:00 | revision 134adf8

---

> warn: CPU temperature metric closed: Object(3)
Getting image source signatures
Copying blob sha256:84496267475d55be3842b1f3e0c546529e6c539c3ad4b9cd37a91677444cf3cd
Copying blob sha256:b92437a87bb9fdba549cccb225042bb05b8789d69defffc21554e626c60f99d8
Copying config sha256:058a2282f40b52cab19a3464810b8373fac84766774d56b4f0693ee615876772
Writing manifest to image destination
Running as unit: user-mem-hog.service; invocation ID: afcb730fb01e44aeaf8727198f4a0151
Running as unit: mem-userhog.service; invocation ID: bffe1c23ce954f708a4ec3752b670c1c
audit: type=1400 audit(1767766507.392:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=9628 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766507.392:117): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=9628 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766507.392:118): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=9628 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestCurrentMetrics-testMemory-debian-testing-127.0.0.2-2501-FAIL.js.log
Journal extracted to TestCurrentMetrics-testMemory-debian-testing-127.0.0.2-2501-FAIL.log.gz
Removed '/etc/systemd/system/packagekit.service'.
> warn: transport closed: disconnected
umount: /etc/cockpit: target is busy.
                     USER        PID ACCESS COMMAND
/etc/cockpit:        root     kernel mount (root)/etc/cockpit
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2055, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2321, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1767766507.392:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=9628 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testMemory (__main__.TestCurrentMetrics.testMemory) failed
# 1 TEST FAILED [46s on aec006e7d007]
not ok 30 test/verify/check-metrics TestCurrentMetrics.testMemory [ND@3]

First occurrence: 2026-01-07T06:15:26.445923+00:00 | revision 134adf8
Times recorded: 1
Latest occurrences:

• 2026-01-07T06:15:26.445923+00:00 | revision 134adf8

---

> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> info: PackageKit went away from D-Bus
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> info: PackageKit went away from D-Bus
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
Running as unit: cpu-userhog.service; invocation ID: 03a6221ff0284c74a9fec6d447d9ab09
WARNING: Waiting for ph_in_text("table[aria-label='Top 5 CPU services'] tbody","cpu-userhog") took 10.0 seconds, which is 66% of the timeout.
> warn: CPU temperature metric closed: Object(2)
audit: type=1400 audit(1767766528.472:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=10386 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766528.472:117): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=10386 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767766528.472:118): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=10386 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestCurrentMetrics-testCPU-debian-testing-127.0.0.2-2301-FAIL.js.log
Journal extracted to TestCurrentMetrics-testCPU-debian-testing-127.0.0.2-2301-FAIL.log.gz
Removed '/etc/systemd/system/packagekit.service'.
> warn: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2055, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2321, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1767766528.472:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=10386 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testCPU (__main__.TestCurrentMetrics.testCPU) failed
# 1 TEST FAILED [169s on aec006e7d007]
not ok 28 test/verify/check-metrics TestCurrentMetrics.testCPU [ND@1]

First occurrence: 2026-01-07T06:17:36.628039+00:00 | revision 134adf8
Times recorded: 1
Latest occurrences:

• 2026-01-07T06:17:36.628039+00:00 | revision 134adf8

---

> warn: GET_ALL_VMS action failed: Rejected send message, 1 matched rules; type="method_call", sender=":1.99" (uid=1002 pid=5123 comm="/usr/bin/python3 /usr/bin/cockpit-bridge" label="unconfined") interface="org.libvirt.Connect" member="ListDomains" error name="(unset)" requested_reply="0" destination="org.libvirt" (uid=107 pid=1534 comm="/usr/sbin/libvirt-dbus --system" label="unconfined")
> info: CAPS Object(8)
audit: type=1400 audit(1767780201.188:141): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5279 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767780201.188:142): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5279 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767780201.188:143): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5279 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767780201.252:144): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5281 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767780201.252:145): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5281 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767780201.252:146): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5281 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767780201.380:147): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5283 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767780201.396:148): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5283 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767780201.396:149): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5283 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestMachinesNICs-testPortForwards-debian-testing-127.0.0.2-2401-FAIL.js.log
Journal extracted to TestMachinesNICs-testPortForwards-debian-testing-127.0.0.2-2401-FAIL.log.gz
Stopping 'libvirtd.service', but its triggering units are still active:
libvirtd.socket, libvirtd-ro.socket, libvirtd-admin.socket
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/machineslib.py", line 591, in tearDown
    super().tearDown()
    ~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2055, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2321, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1767780201.188:141): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5279 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testPortForwards (__main__.TestMachinesNICs.testPortForwards) failed
# 1 TEST FAILED [123s on 4f21a0043e97]
not ok 84 /work/make-checkout-workdir/test/check-machines-nics TestMachinesNICs.testPortForwards [ND@2]

First occurrence: 2026-01-07T10:04:58.490915+00:00 | revision c27d31b44a8fcbce660b0b63689c2e9553bc03f2
Times recorded: 1
Latest occurrences:

• 2026-01-07T10:04:58.490915+00:00 | revision c27d31b44a8fcbce660b0b63689c2e9553bc03f2

---

> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
Running as unit: mem-hog.service; invocation ID: 112fc0d9d45e47a3996e2a60e5cb6d05
> warn: CPU temperature metric closed: Object(3)
Getting image source signatures
Copying blob sha256:84496267475d55be3842b1f3e0c546529e6c539c3ad4b9cd37a91677444cf3cd
Copying blob sha256:b92437a87bb9fdba549cccb225042bb05b8789d69defffc21554e626c60f99d8
Copying config sha256:058a2282f40b52cab19a3464810b8373fac84766774d56b4f0693ee615876772
Writing manifest to image destination
Running as unit: user-mem-hog.service; invocation ID: f7630a61ae65402cb059342f75770da6
Running as unit: mem-userhog.service; invocation ID: 4fa8a84bd5754b22a463b6665e22c434
audit: type=1400 audit(1767783029.520:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5599 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767783029.536:117): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=5599 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767783029.536:118): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=5599 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestCurrentMetrics-testMemory-debian-testing-127.0.0.2-2501-FAIL.js.log
Journal extracted to TestCurrentMetrics-testMemory-debian-testing-127.0.0.2-2501-FAIL.log.gz
Removed '/etc/systemd/system/packagekit.service'.
> warn: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2055, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2321, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1767783029.520:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=5599 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testMemory (__main__.TestCurrentMetrics.testMemory) failed
# 1 TEST FAILED [56s on 1ab3832b1c48]
not ok 30 test/verify/check-metrics TestCurrentMetrics.testMemory [ND@3]

First occurrence: 2026-01-07T10:50:46.823997+00:00 | revision 6c39121e70c6dc6aa547475a45448e92ad307303
Times recorded: 1
Latest occurrences:

• 2026-01-07T10:50:46.823997+00:00 | revision 6c39121e70c6dc6aa547475a45448e92ad307303

---

> info: PackageKit went away from D-Bus
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> info: PackageKit went away from D-Bus
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
> info: PackageKit went away from D-Bus
> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> warn: loading available updates failed: {"problem":"not-found","name":null,"message":"not-found"}
Running as unit: cpu-userhog.service; invocation ID: f5d470080ceb4308b229c613d8bee70f
WARNING: Waiting for ph_in_text("table[aria-label='Top 5 CPU services'] tbody","cpu-userhog") took 9.9 seconds, which is 66% of the timeout.
> warn: CPU temperature metric closed: Object(2)
audit: type=1400 audit(1767783048.100:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=8000 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767783048.100:117): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=8000 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1767783048.100:118): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=8000 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestCurrentMetrics-testCPU-debian-testing-127.0.0.2-2801-FAIL.js.log
Journal extracted to TestCurrentMetrics-testCPU-debian-testing-127.0.0.2-2801-FAIL.log.gz
Removed '/etc/systemd/system/packagekit.service'.
> warn: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2055, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2321, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1767783048.100:116): apparmor="DENIED" operation="open" class="file" profile="pasta" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=8000 comm="pasta.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testCPU (__main__.TestCurrentMetrics.testCPU) failed
# 1 TEST FAILED [208s on 1ab3832b1c48]
not ok 28 test/verify/check-metrics TestCurrentMetrics.testCPU [ND@5]

First occurrence: 2026-01-07T10:53:23.224133+00:00 | revision 6c39121e70c6dc6aa547475a45448e92ad307303
Times recorded: 1
Latest occurrences:

• 2026-01-07T10:53:23.224133+00:00 | revision 6c39121e70c6dc6aa547475a45448e92ad307303

---

> warn: Failed to get current crypto policy: not-found ; falling back to /etc/crypto-policies/config
> warn: GET_ALL_VMS action failed: Rejected send message, 1 matched rules; type="method_call", sender=":1.90" (uid=1002 pid=4358 comm="/usr/bin/python3 /usr/bin/cockpit-bridge" label="unconfined") interface="org.libvirt.Connect" member="ListDomains" error name="(unset)" requested_reply="0" destination="org.libvirt" (uid=107 pid=1394 comm="/usr/sbin/libvirt-dbus --system" label="unconfined")
audit: type=1400 audit(1769699733.984:154): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=4501 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1769699734.000:155): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=4501 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1769699734.000:156): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=4501 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1769699734.028:157): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=4503 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1769699734.028:158): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=4503 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1769699734.028:159): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=4503 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1769699734.052:160): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=4505 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1769699734.052:161): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_linear_timeouts" pid=4505 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
audit: type=1400 audit(1769699734.052:162): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_rto_max_ms" pid=4505 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0
Wrote JS log to TestMachinesNICs-testPortForwards-debian-testing-127.0.0.2-2301-FAIL.js.log
Journal extracted to TestMachinesNICs-testPortForwards-debian-testing-127.0.0.2-2301-FAIL.log.gz
Stopping 'libvirtd.service', but its triggering units are still active:
libvirtd-ro.socket, libvirtd.socket, libvirtd-admin.socket
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/machineslib.py", line 591, in tearDown
    super().tearDown()
    ~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2054, in tearDown
    self.check_journal_messages()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2320, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1769699733.984:154): apparmor="DENIED" operation="open" class="file" profile="passt" name="/proc/sys/net/ipv4/tcp_syn_retries" pid=4501 comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

# Result testPortForwards (__main__.TestMachinesNICs.testPortForwards) failed
# 1 TEST FAILED [28s on 534632c6246f]
not ok 84 /work/make-checkout-workdir/test/check-machines-nics TestMachinesNICs.testPortForwards [ND@1]

First occurrence: 2026-01-29T15:15:43.092726+00:00 | revision f8a76a25817f76108bec04fa4057a0b50beb8b80
Times recorded: 1
Latest occurrences:

• 2026-01-29T15:15:43.092726+00:00 | revision f8a76a25817f76108bec04fa4057a0b50beb8b80