Oct 29 00:34:10.689191 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 29 00:34:10.689211 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Tue Oct 28 23:18:12 -00 2025 Oct 29 00:34:10.689219 kernel: efi: EFI v2.70 by EDK II Oct 29 00:34:10.689225 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 29 00:34:10.689230 kernel: random: crng init done Oct 29 00:34:10.689235 kernel: ACPI: Early table checksum verification disabled Oct 29 00:34:10.689242 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 29 00:34:10.689249 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 29 00:34:10.689255 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:10.689261 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:10.689266 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:10.689272 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:10.689277 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:10.689283 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:10.689290 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:10.689296 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:10.689302 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:10.689308 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 29 00:34:10.689314 kernel: NUMA: Failed to initialise from firmware Oct 29 00:34:10.689320 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 29 00:34:10.689325 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Oct 29 00:34:10.689335 kernel: Zone ranges: Oct 29 00:34:10.689341 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 29 00:34:10.689348 kernel: DMA32 empty Oct 29 00:34:10.689354 kernel: Normal empty Oct 29 00:34:10.689362 kernel: Movable zone start for each node Oct 29 00:34:10.689368 kernel: Early memory node ranges Oct 29 00:34:10.689374 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 29 00:34:10.689380 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 29 00:34:10.689386 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 29 00:34:10.689392 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 29 00:34:10.689399 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 29 00:34:10.689405 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 29 00:34:10.689411 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 29 00:34:10.689416 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 29 00:34:10.689423 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 29 00:34:10.689429 kernel: psci: probing for conduit method from ACPI. Oct 29 00:34:10.689435 kernel: psci: PSCIv1.1 detected in firmware. Oct 29 00:34:10.689441 kernel: psci: Using standard PSCI v0.2 function IDs Oct 29 00:34:10.689447 kernel: psci: Trusted OS migration not required Oct 29 00:34:10.689455 kernel: psci: SMC Calling Convention v1.1 Oct 29 00:34:10.689467 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 29 00:34:10.689476 kernel: ACPI: SRAT not present Oct 29 00:34:10.689482 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Oct 29 00:34:10.689488 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Oct 29 00:34:10.689495 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 29 00:34:10.689501 kernel: Detected PIPT I-cache on CPU0 Oct 29 00:34:10.689507 kernel: CPU features: detected: GIC system register CPU interface Oct 29 00:34:10.689513 kernel: CPU features: detected: Hardware dirty bit management Oct 29 00:34:10.689519 kernel: CPU features: detected: Spectre-v4 Oct 29 00:34:10.689525 kernel: CPU features: detected: Spectre-BHB Oct 29 00:34:10.689532 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 29 00:34:10.689538 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 29 00:34:10.689544 kernel: CPU features: detected: ARM erratum 1418040 Oct 29 00:34:10.689550 kernel: CPU features: detected: SSBS not fully self-synchronizing Oct 29 00:34:10.689556 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 29 00:34:10.689562 kernel: Policy zone: DMA Oct 29 00:34:10.689569 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=ddcdcc5923a51dfb24bee27c235aa754769d72fd417f60397f96d58c38c7a3e3 Oct 29 00:34:10.689575 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 29 00:34:10.689581 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 29 00:34:10.689588 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 29 00:34:10.689594 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 29 00:34:10.689601 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Oct 29 00:34:10.689607 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 29 00:34:10.689613 kernel: trace event string verifier disabled Oct 29 00:34:10.689619 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 29 00:34:10.689643 kernel: rcu: RCU event tracing is enabled. Oct 29 00:34:10.689650 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 29 00:34:10.689656 kernel: Trampoline variant of Tasks RCU enabled. Oct 29 00:34:10.689662 kernel: Tracing variant of Tasks RCU enabled. Oct 29 00:34:10.689669 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 29 00:34:10.689675 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 29 00:34:10.689681 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 29 00:34:10.689690 kernel: GICv3: 256 SPIs implemented Oct 29 00:34:10.689701 kernel: GICv3: 0 Extended SPIs implemented Oct 29 00:34:10.689708 kernel: GICv3: Distributor has no Range Selector support Oct 29 00:34:10.689714 kernel: Root IRQ handler: gic_handle_irq Oct 29 00:34:10.689721 kernel: GICv3: 16 PPIs implemented Oct 29 00:34:10.689727 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 29 00:34:10.689733 kernel: ACPI: SRAT not present Oct 29 00:34:10.689739 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 29 00:34:10.689745 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 29 00:34:10.689751 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 29 00:34:10.689757 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 29 00:34:10.689763 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 29 00:34:10.689780 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 29 00:34:10.689786 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 29 00:34:10.689792 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 29 00:34:10.689798 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 29 00:34:10.689804 kernel: arm-pv: using stolen time PV Oct 29 00:34:10.689810 kernel: Console: colour dummy device 80x25 Oct 29 00:34:10.689822 kernel: ACPI: Core revision 20210730 Oct 29 00:34:10.689829 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 29 00:34:10.689835 kernel: pid_max: default: 32768 minimum: 301 Oct 29 00:34:10.689866 kernel: LSM: Security Framework initializing Oct 29 00:34:10.689875 kernel: SELinux: Initializing. Oct 29 00:34:10.689882 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 29 00:34:10.689888 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 29 00:34:10.689894 kernel: rcu: Hierarchical SRCU implementation. Oct 29 00:34:10.689900 kernel: Platform MSI: ITS@0x8080000 domain created Oct 29 00:34:10.689906 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 29 00:34:10.689912 kernel: Remapping and enabling EFI services. Oct 29 00:34:10.689918 kernel: smp: Bringing up secondary CPUs ... Oct 29 00:34:10.689924 kernel: Detected PIPT I-cache on CPU1 Oct 29 00:34:10.689932 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 29 00:34:10.689938 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 29 00:34:10.689945 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 29 00:34:10.689951 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 29 00:34:10.689957 kernel: Detected PIPT I-cache on CPU2 Oct 29 00:34:10.689963 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 29 00:34:10.689969 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 29 00:34:10.689976 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 29 00:34:10.689982 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 29 00:34:10.689988 kernel: Detected PIPT I-cache on CPU3 Oct 29 00:34:10.689995 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 29 00:34:10.690001 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 29 00:34:10.690007 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 29 00:34:10.690013 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 29 00:34:10.690023 kernel: smp: Brought up 1 node, 4 CPUs Oct 29 00:34:10.690031 kernel: SMP: Total of 4 processors activated. Oct 29 00:34:10.690037 kernel: CPU features: detected: 32-bit EL0 Support Oct 29 00:34:10.690044 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 29 00:34:10.690050 kernel: CPU features: detected: Common not Private translations Oct 29 00:34:10.690057 kernel: CPU features: detected: CRC32 instructions Oct 29 00:34:10.690063 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 29 00:34:10.690070 kernel: CPU features: detected: LSE atomic instructions Oct 29 00:34:10.690078 kernel: CPU features: detected: Privileged Access Never Oct 29 00:34:10.690084 kernel: CPU features: detected: RAS Extension Support Oct 29 00:34:10.690091 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 29 00:34:10.690097 kernel: CPU: All CPU(s) started at EL1 Oct 29 00:34:10.690104 kernel: alternatives: patching kernel code Oct 29 00:34:10.690111 kernel: devtmpfs: initialized Oct 29 00:34:10.690118 kernel: KASLR enabled Oct 29 00:34:10.690124 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 29 00:34:10.690131 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 29 00:34:10.690137 kernel: pinctrl core: initialized pinctrl subsystem Oct 29 00:34:10.690144 kernel: SMBIOS 3.0.0 present. Oct 29 00:34:10.690150 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 29 00:34:10.690157 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 29 00:34:10.690163 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 29 00:34:10.690171 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 29 00:34:10.690178 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 29 00:34:10.690184 kernel: audit: initializing netlink subsys (disabled) Oct 29 00:34:10.690191 kernel: audit: type=2000 audit(0.033:1): state=initialized audit_enabled=0 res=1 Oct 29 00:34:10.690197 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 29 00:34:10.690204 kernel: cpuidle: using governor menu Oct 29 00:34:10.690210 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 29 00:34:10.690217 kernel: ASID allocator initialised with 32768 entries Oct 29 00:34:10.690223 kernel: ACPI: bus type PCI registered Oct 29 00:34:10.690231 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 29 00:34:10.690237 kernel: Serial: AMBA PL011 UART driver Oct 29 00:34:10.690244 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 29 00:34:10.690250 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 29 00:34:10.690257 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 29 00:34:10.690264 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 29 00:34:10.690270 kernel: cryptd: max_cpu_qlen set to 1000 Oct 29 00:34:10.690277 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 29 00:34:10.690283 kernel: ACPI: Added _OSI(Module Device) Oct 29 00:34:10.690290 kernel: ACPI: Added _OSI(Processor Device) Oct 29 00:34:10.690297 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 29 00:34:10.690303 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 29 00:34:10.690310 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 29 00:34:10.690317 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 29 00:34:10.690323 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 29 00:34:10.690330 kernel: ACPI: Interpreter enabled Oct 29 00:34:10.690336 kernel: ACPI: Using GIC for interrupt routing Oct 29 00:34:10.690343 kernel: ACPI: MCFG table detected, 1 entries Oct 29 00:34:10.690350 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 29 00:34:10.690357 kernel: printk: console [ttyAMA0] enabled Oct 29 00:34:10.690363 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 29 00:34:10.690493 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 29 00:34:10.690558 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 29 00:34:10.690628 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 29 00:34:10.690687 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 29 00:34:10.690748 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 29 00:34:10.690756 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 29 00:34:10.690763 kernel: PCI host bridge to bus 0000:00 Oct 29 00:34:10.690844 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 29 00:34:10.690900 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 29 00:34:10.690952 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 29 00:34:10.691004 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 29 00:34:10.691078 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 29 00:34:10.691161 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 29 00:34:10.691223 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 29 00:34:10.691285 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 29 00:34:10.691345 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 29 00:34:10.691404 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 29 00:34:10.691470 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 29 00:34:10.691533 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 29 00:34:10.691586 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 29 00:34:10.691643 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 29 00:34:10.691697 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 29 00:34:10.691705 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 29 00:34:10.691712 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 29 00:34:10.691722 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 29 00:34:10.691731 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 29 00:34:10.691738 kernel: iommu: Default domain type: Translated Oct 29 00:34:10.691745 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 29 00:34:10.691751 kernel: vgaarb: loaded Oct 29 00:34:10.691758 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 29 00:34:10.691765 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 29 00:34:10.691771 kernel: PTP clock support registered Oct 29 00:34:10.691778 kernel: Registered efivars operations Oct 29 00:34:10.691784 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 29 00:34:10.691791 kernel: VFS: Disk quotas dquot_6.6.0 Oct 29 00:34:10.691799 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 29 00:34:10.691805 kernel: pnp: PnP ACPI init Oct 29 00:34:10.691905 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 29 00:34:10.691916 kernel: pnp: PnP ACPI: found 1 devices Oct 29 00:34:10.691923 kernel: NET: Registered PF_INET protocol family Oct 29 00:34:10.691929 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 29 00:34:10.691936 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 29 00:34:10.691944 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 29 00:34:10.691953 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 29 00:34:10.691961 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 29 00:34:10.691967 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 29 00:34:10.691974 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 29 00:34:10.691980 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 29 00:34:10.691987 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 29 00:34:10.691993 kernel: PCI: CLS 0 bytes, default 64 Oct 29 00:34:10.692000 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 29 00:34:10.692012 kernel: kvm [1]: HYP mode not available Oct 29 00:34:10.692020 kernel: Initialise system trusted keyrings Oct 29 00:34:10.692026 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 29 00:34:10.692033 kernel: Key type asymmetric registered Oct 29 00:34:10.692039 kernel: Asymmetric key parser 'x509' registered Oct 29 00:34:10.692046 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 29 00:34:10.692052 kernel: io scheduler mq-deadline registered Oct 29 00:34:10.692059 kernel: io scheduler kyber registered Oct 29 00:34:10.692065 kernel: io scheduler bfq registered Oct 29 00:34:10.692072 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 29 00:34:10.692080 kernel: ACPI: button: Power Button [PWRB] Oct 29 00:34:10.692087 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 29 00:34:10.692150 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 29 00:34:10.692160 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 29 00:34:10.692166 kernel: thunder_xcv, ver 1.0 Oct 29 00:34:10.692172 kernel: thunder_bgx, ver 1.0 Oct 29 00:34:10.692179 kernel: nicpf, ver 1.0 Oct 29 00:34:10.692185 kernel: nicvf, ver 1.0 Oct 29 00:34:10.692255 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 29 00:34:10.692313 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-10-29T00:34:10 UTC (1761698050) Oct 29 00:34:10.692322 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 29 00:34:10.692329 kernel: NET: Registered PF_INET6 protocol family Oct 29 00:34:10.692335 kernel: Segment Routing with IPv6 Oct 29 00:34:10.692342 kernel: In-situ OAM (IOAM) with IPv6 Oct 29 00:34:10.692348 kernel: NET: Registered PF_PACKET protocol family Oct 29 00:34:10.692355 kernel: Key type dns_resolver registered Oct 29 00:34:10.692362 kernel: registered taskstats version 1 Oct 29 00:34:10.692369 kernel: Loading compiled-in X.509 certificates Oct 29 00:34:10.692376 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 365034a3270fb89208cc05b5e556df135e9c6322' Oct 29 00:34:10.692383 kernel: Key type .fscrypt registered Oct 29 00:34:10.692389 kernel: Key type fscrypt-provisioning registered Oct 29 00:34:10.692396 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 29 00:34:10.692403 kernel: ima: Allocated hash algorithm: sha1 Oct 29 00:34:10.692409 kernel: ima: No architecture policies found Oct 29 00:34:10.692416 kernel: clk: Disabling unused clocks Oct 29 00:34:10.692423 kernel: Freeing unused kernel memory: 36416K Oct 29 00:34:10.692431 kernel: Run /init as init process Oct 29 00:34:10.692438 kernel: with arguments: Oct 29 00:34:10.692444 kernel: /init Oct 29 00:34:10.692450 kernel: with environment: Oct 29 00:34:10.692457 kernel: HOME=/ Oct 29 00:34:10.692471 kernel: TERM=linux Oct 29 00:34:10.692478 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 29 00:34:10.692486 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 29 00:34:10.692496 systemd[1]: Detected virtualization kvm. Oct 29 00:34:10.692503 systemd[1]: Detected architecture arm64. Oct 29 00:34:10.692510 systemd[1]: Running in initrd. Oct 29 00:34:10.692517 systemd[1]: No hostname configured, using default hostname. Oct 29 00:34:10.692534 systemd[1]: Hostname set to . Oct 29 00:34:10.692541 systemd[1]: Initializing machine ID from VM UUID. Oct 29 00:34:10.692550 systemd[1]: Queued start job for default target initrd.target. Oct 29 00:34:10.692557 systemd[1]: Started systemd-ask-password-console.path. Oct 29 00:34:10.692565 systemd[1]: Reached target cryptsetup.target. Oct 29 00:34:10.692572 systemd[1]: Reached target paths.target. Oct 29 00:34:10.692579 systemd[1]: Reached target slices.target. Oct 29 00:34:10.692586 systemd[1]: Reached target swap.target. Oct 29 00:34:10.692593 systemd[1]: Reached target timers.target. Oct 29 00:34:10.692600 systemd[1]: Listening on iscsid.socket. Oct 29 00:34:10.692607 systemd[1]: Listening on iscsiuio.socket. Oct 29 00:34:10.692615 systemd[1]: Listening on systemd-journald-audit.socket. Oct 29 00:34:10.692622 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 29 00:34:10.692629 systemd[1]: Listening on systemd-journald.socket. Oct 29 00:34:10.692637 systemd[1]: Listening on systemd-networkd.socket. Oct 29 00:34:10.692644 systemd[1]: Listening on systemd-udevd-control.socket. Oct 29 00:34:10.692651 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 29 00:34:10.692658 systemd[1]: Reached target sockets.target. Oct 29 00:34:10.692665 systemd[1]: Starting kmod-static-nodes.service... Oct 29 00:34:10.692673 systemd[1]: Finished network-cleanup.service. Oct 29 00:34:10.692681 systemd[1]: Starting systemd-fsck-usr.service... Oct 29 00:34:10.692688 systemd[1]: Starting systemd-journald.service... Oct 29 00:34:10.692695 systemd[1]: Starting systemd-modules-load.service... Oct 29 00:34:10.692702 systemd[1]: Starting systemd-resolved.service... Oct 29 00:34:10.692709 systemd[1]: Starting systemd-vconsole-setup.service... Oct 29 00:34:10.692716 systemd[1]: Finished kmod-static-nodes.service. Oct 29 00:34:10.692723 systemd[1]: Finished systemd-fsck-usr.service. Oct 29 00:34:10.692730 kernel: audit: type=1130 audit(1761698050.689:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.692740 systemd-journald[290]: Journal started Oct 29 00:34:10.692781 systemd-journald[290]: Runtime Journal (/run/log/journal/0202c54e1f0e468c82fd5ac4d21b772b) is 6.0M, max 48.7M, 42.6M free. Oct 29 00:34:10.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.689758 systemd-modules-load[291]: Inserted module 'overlay' Oct 29 00:34:10.702594 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 29 00:34:10.702631 systemd[1]: Started systemd-journald.service. Oct 29 00:34:10.705643 systemd-resolved[292]: Positive Trust Anchors: Oct 29 00:34:10.705650 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 29 00:34:10.705678 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 29 00:34:10.718697 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 29 00:34:10.718719 kernel: audit: type=1130 audit(1761698050.710:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.710180 systemd-resolved[292]: Defaulting to hostname 'linux'. Oct 29 00:34:10.723142 kernel: Bridge firewalling registered Oct 29 00:34:10.723160 kernel: audit: type=1130 audit(1761698050.719:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.711424 systemd[1]: Started systemd-resolved.service. Oct 29 00:34:10.727014 kernel: audit: type=1130 audit(1761698050.723:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.719928 systemd-modules-load[291]: Inserted module 'br_netfilter' Oct 29 00:34:10.731044 kernel: audit: type=1130 audit(1761698050.726:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.720143 systemd[1]: Finished systemd-vconsole-setup.service. Oct 29 00:34:10.724105 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 29 00:34:10.727948 systemd[1]: Reached target nss-lookup.target. Oct 29 00:34:10.732508 systemd[1]: Starting dracut-cmdline-ask.service... Oct 29 00:34:10.737527 kernel: SCSI subsystem initialized Oct 29 00:34:10.745851 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 29 00:34:10.745891 kernel: device-mapper: uevent: version 1.0.3 Oct 29 00:34:10.745901 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 29 00:34:10.748922 systemd[1]: Finished dracut-cmdline-ask.service. Oct 29 00:34:10.750052 systemd-modules-load[291]: Inserted module 'dm_multipath' Oct 29 00:34:10.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.750618 systemd[1]: Starting dracut-cmdline.service... Oct 29 00:34:10.755050 systemd[1]: Finished systemd-modules-load.service. Oct 29 00:34:10.760598 kernel: audit: type=1130 audit(1761698050.748:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.760619 kernel: audit: type=1130 audit(1761698050.755:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.757233 systemd[1]: Starting systemd-sysctl.service... Oct 29 00:34:10.764400 dracut-cmdline[310]: dracut-dracut-053 Oct 29 00:34:10.766631 systemd[1]: Finished systemd-sysctl.service. Oct 29 00:34:10.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.770787 dracut-cmdline[310]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=ddcdcc5923a51dfb24bee27c235aa754769d72fd417f60397f96d58c38c7a3e3 Oct 29 00:34:10.775434 kernel: audit: type=1130 audit(1761698050.766:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.827845 kernel: Loading iSCSI transport class v2.0-870. Oct 29 00:34:10.839850 kernel: iscsi: registered transport (tcp) Oct 29 00:34:10.854851 kernel: iscsi: registered transport (qla4xxx) Oct 29 00:34:10.854875 kernel: QLogic iSCSI HBA Driver Oct 29 00:34:10.887420 systemd[1]: Finished dracut-cmdline.service. Oct 29 00:34:10.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.889056 systemd[1]: Starting dracut-pre-udev.service... Oct 29 00:34:10.892515 kernel: audit: type=1130 audit(1761698050.888:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:10.930853 kernel: raid6: neonx8 gen() 13688 MB/s Oct 29 00:34:10.947859 kernel: raid6: neonx8 xor() 10784 MB/s Oct 29 00:34:10.964841 kernel: raid6: neonx4 gen() 13384 MB/s Oct 29 00:34:10.981852 kernel: raid6: neonx4 xor() 11153 MB/s Oct 29 00:34:10.998843 kernel: raid6: neonx2 gen() 12921 MB/s Oct 29 00:34:11.015847 kernel: raid6: neonx2 xor() 10247 MB/s Oct 29 00:34:11.032851 kernel: raid6: neonx1 gen() 10576 MB/s Oct 29 00:34:11.049949 kernel: raid6: neonx1 xor() 8759 MB/s Oct 29 00:34:11.066845 kernel: raid6: int64x8 gen() 6260 MB/s Oct 29 00:34:11.083857 kernel: raid6: int64x8 xor() 3535 MB/s Oct 29 00:34:11.100853 kernel: raid6: int64x4 gen() 7212 MB/s Oct 29 00:34:11.117861 kernel: raid6: int64x4 xor() 3838 MB/s Oct 29 00:34:11.134852 kernel: raid6: int64x2 gen() 6137 MB/s Oct 29 00:34:11.151853 kernel: raid6: int64x2 xor() 3316 MB/s Oct 29 00:34:11.168847 kernel: raid6: int64x1 gen() 5040 MB/s Oct 29 00:34:11.185898 kernel: raid6: int64x1 xor() 2645 MB/s Oct 29 00:34:11.185925 kernel: raid6: using algorithm neonx8 gen() 13688 MB/s Oct 29 00:34:11.185934 kernel: raid6: .... xor() 10784 MB/s, rmw enabled Oct 29 00:34:11.186916 kernel: raid6: using neon recovery algorithm Oct 29 00:34:11.200062 kernel: xor: measuring software checksum speed Oct 29 00:34:11.200094 kernel: 8regs : 16725 MB/sec Oct 29 00:34:11.200843 kernel: 32regs : 20717 MB/sec Oct 29 00:34:11.200855 kernel: arm64_neon : 27719 MB/sec Oct 29 00:34:11.201885 kernel: xor: using function: arm64_neon (27719 MB/sec) Oct 29 00:34:11.253844 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 29 00:34:11.264103 systemd[1]: Finished dracut-pre-udev.service. Oct 29 00:34:11.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:11.302000 audit: BPF prog-id=7 op=LOAD Oct 29 00:34:11.302000 audit: BPF prog-id=8 op=LOAD Oct 29 00:34:11.303674 systemd[1]: Starting systemd-udevd.service... Oct 29 00:34:11.315754 systemd-udevd[490]: Using default interface naming scheme 'v252'. Oct 29 00:34:11.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:11.319054 systemd[1]: Started systemd-udevd.service. Oct 29 00:34:11.322631 systemd[1]: Starting dracut-pre-trigger.service... Oct 29 00:34:11.335124 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Oct 29 00:34:11.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:11.361229 systemd[1]: Finished dracut-pre-trigger.service. Oct 29 00:34:11.362660 systemd[1]: Starting systemd-udev-trigger.service... Oct 29 00:34:11.396345 systemd[1]: Finished systemd-udev-trigger.service. Oct 29 00:34:11.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:11.427517 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Oct 29 00:34:11.432261 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 29 00:34:11.432279 kernel: GPT:9289727 != 19775487 Oct 29 00:34:11.432288 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 29 00:34:11.432297 kernel: GPT:9289727 != 19775487 Oct 29 00:34:11.432304 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 29 00:34:11.432312 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:11.446845 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (548) Oct 29 00:34:11.447967 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 29 00:34:11.452886 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 29 00:34:11.453961 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 29 00:34:11.458569 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 29 00:34:11.464228 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 29 00:34:11.468792 systemd[1]: Starting disk-uuid.service... Oct 29 00:34:11.475837 disk-uuid[567]: Primary Header is updated. Oct 29 00:34:11.475837 disk-uuid[567]: Secondary Entries is updated. Oct 29 00:34:11.475837 disk-uuid[567]: Secondary Header is updated. Oct 29 00:34:11.479840 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:11.481833 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:11.484836 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:12.485806 disk-uuid[568]: The operation has completed successfully. Oct 29 00:34:12.486892 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:12.513068 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 29 00:34:12.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.513172 systemd[1]: Finished disk-uuid.service. Oct 29 00:34:12.514865 systemd[1]: Starting verity-setup.service... Oct 29 00:34:12.528854 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 29 00:34:12.554099 systemd[1]: Found device dev-mapper-usr.device. Oct 29 00:34:12.556274 systemd[1]: Mounting sysusr-usr.mount... Oct 29 00:34:12.558200 systemd[1]: Finished verity-setup.service. Oct 29 00:34:12.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.603848 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 29 00:34:12.604004 systemd[1]: Mounted sysusr-usr.mount. Oct 29 00:34:12.604788 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 29 00:34:12.605501 systemd[1]: Starting ignition-setup.service... Oct 29 00:34:12.608327 systemd[1]: Starting parse-ip-for-networkd.service... Oct 29 00:34:12.620257 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 29 00:34:12.620291 kernel: BTRFS info (device vda6): using free space tree Oct 29 00:34:12.620301 kernel: BTRFS info (device vda6): has skinny extents Oct 29 00:34:12.634997 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 29 00:34:12.644414 systemd[1]: Finished ignition-setup.service. Oct 29 00:34:12.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.646384 systemd[1]: Starting ignition-fetch-offline.service... Oct 29 00:34:12.705523 systemd[1]: Finished parse-ip-for-networkd.service. Oct 29 00:34:12.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.707000 audit: BPF prog-id=9 op=LOAD Oct 29 00:34:12.708893 systemd[1]: Starting systemd-networkd.service... Oct 29 00:34:12.717104 ignition[659]: Ignition 2.14.0 Oct 29 00:34:12.717114 ignition[659]: Stage: fetch-offline Oct 29 00:34:12.717152 ignition[659]: no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:12.717163 ignition[659]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:12.717289 ignition[659]: parsed url from cmdline: "" Oct 29 00:34:12.717293 ignition[659]: no config URL provided Oct 29 00:34:12.717297 ignition[659]: reading system config file "/usr/lib/ignition/user.ign" Oct 29 00:34:12.717304 ignition[659]: no config at "/usr/lib/ignition/user.ign" Oct 29 00:34:12.717323 ignition[659]: op(1): [started] loading QEMU firmware config module Oct 29 00:34:12.717327 ignition[659]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 29 00:34:12.727575 ignition[659]: op(1): [finished] loading QEMU firmware config module Oct 29 00:34:12.727598 ignition[659]: QEMU firmware config was not found. Ignoring... Oct 29 00:34:12.732963 systemd-networkd[744]: lo: Link UP Oct 29 00:34:12.732975 systemd-networkd[744]: lo: Gained carrier Oct 29 00:34:12.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.733358 systemd-networkd[744]: Enumeration completed Oct 29 00:34:12.733474 systemd[1]: Started systemd-networkd.service. Oct 29 00:34:12.733547 systemd-networkd[744]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 29 00:34:12.734933 systemd[1]: Reached target network.target. Oct 29 00:34:12.737427 systemd[1]: Starting iscsiuio.service... Oct 29 00:34:12.741876 systemd-networkd[744]: eth0: Link UP Oct 29 00:34:12.741880 systemd-networkd[744]: eth0: Gained carrier Oct 29 00:34:12.744631 systemd[1]: Started iscsiuio.service. Oct 29 00:34:12.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.746275 systemd[1]: Starting iscsid.service... Oct 29 00:34:12.749485 iscsid[750]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 29 00:34:12.749485 iscsid[750]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 29 00:34:12.749485 iscsid[750]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 29 00:34:12.749485 iscsid[750]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 29 00:34:12.749485 iscsid[750]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 29 00:34:12.749485 iscsid[750]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 29 00:34:12.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.752263 systemd[1]: Started iscsid.service. Oct 29 00:34:12.758696 systemd[1]: Starting dracut-initqueue.service... Oct 29 00:34:12.765895 systemd-networkd[744]: eth0: DHCPv4 address 10.0.0.78/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 29 00:34:12.769981 systemd[1]: Finished dracut-initqueue.service. Oct 29 00:34:12.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.771014 systemd[1]: Reached target remote-fs-pre.target. Oct 29 00:34:12.772895 systemd[1]: Reached target remote-cryptsetup.target. Oct 29 00:34:12.774636 systemd[1]: Reached target remote-fs.target. Oct 29 00:34:12.777090 systemd[1]: Starting dracut-pre-mount.service... Oct 29 00:34:12.785017 systemd[1]: Finished dracut-pre-mount.service. Oct 29 00:34:12.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.806656 ignition[659]: parsing config with SHA512: 1ed0aac28b0c076e2d67b88f0ef10da8f284f03378f44d8b89bfce1d05c42e30ee8eb956c0c5fddb129f4c53fc66fd2ac2eda98735f584bdf4459ec6471cd26c Oct 29 00:34:12.815249 unknown[659]: fetched base config from "system" Oct 29 00:34:12.815260 unknown[659]: fetched user config from "qemu" Oct 29 00:34:12.815679 ignition[659]: fetch-offline: fetch-offline passed Oct 29 00:34:12.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.816978 systemd[1]: Finished ignition-fetch-offline.service. Oct 29 00:34:12.815728 ignition[659]: Ignition finished successfully Oct 29 00:34:12.818589 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 29 00:34:12.819371 systemd[1]: Starting ignition-kargs.service... Oct 29 00:34:12.827601 ignition[765]: Ignition 2.14.0 Oct 29 00:34:12.827610 ignition[765]: Stage: kargs Oct 29 00:34:12.827698 ignition[765]: no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:12.829756 systemd[1]: Finished ignition-kargs.service. Oct 29 00:34:12.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.827708 ignition[765]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:12.828492 ignition[765]: kargs: kargs passed Oct 29 00:34:12.832241 systemd[1]: Starting ignition-disks.service... Oct 29 00:34:12.828531 ignition[765]: Ignition finished successfully Oct 29 00:34:12.838379 ignition[771]: Ignition 2.14.0 Oct 29 00:34:12.838388 ignition[771]: Stage: disks Oct 29 00:34:12.838482 ignition[771]: no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:12.838492 ignition[771]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:12.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.840245 systemd[1]: Finished ignition-disks.service. Oct 29 00:34:12.839438 ignition[771]: disks: disks passed Oct 29 00:34:12.841303 systemd[1]: Reached target initrd-root-device.target. Oct 29 00:34:12.839486 ignition[771]: Ignition finished successfully Oct 29 00:34:12.842875 systemd[1]: Reached target local-fs-pre.target. Oct 29 00:34:12.844373 systemd[1]: Reached target local-fs.target. Oct 29 00:34:12.845642 systemd[1]: Reached target sysinit.target. Oct 29 00:34:12.846975 systemd[1]: Reached target basic.target. Oct 29 00:34:12.849153 systemd[1]: Starting systemd-fsck-root.service... Oct 29 00:34:12.860187 systemd-fsck[779]: ROOT: clean, 637/553520 files, 56031/553472 blocks Oct 29 00:34:12.863450 systemd[1]: Finished systemd-fsck-root.service. Oct 29 00:34:12.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.865281 systemd[1]: Mounting sysroot.mount... Oct 29 00:34:12.872835 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 29 00:34:12.872991 systemd[1]: Mounted sysroot.mount. Oct 29 00:34:12.873762 systemd[1]: Reached target initrd-root-fs.target. Oct 29 00:34:12.877783 systemd[1]: Mounting sysroot-usr.mount... Oct 29 00:34:12.878636 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 29 00:34:12.878675 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 29 00:34:12.878698 systemd[1]: Reached target ignition-diskful.target. Oct 29 00:34:12.880545 systemd[1]: Mounted sysroot-usr.mount. Oct 29 00:34:12.882483 systemd[1]: Starting initrd-setup-root.service... Oct 29 00:34:12.887223 initrd-setup-root[789]: cut: /sysroot/etc/passwd: No such file or directory Oct 29 00:34:12.890797 initrd-setup-root[797]: cut: /sysroot/etc/group: No such file or directory Oct 29 00:34:12.893680 initrd-setup-root[805]: cut: /sysroot/etc/shadow: No such file or directory Oct 29 00:34:12.897494 initrd-setup-root[813]: cut: /sysroot/etc/gshadow: No such file or directory Oct 29 00:34:12.927566 systemd[1]: Finished initrd-setup-root.service. Oct 29 00:34:12.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.929228 systemd[1]: Starting ignition-mount.service... Oct 29 00:34:12.930532 systemd[1]: Starting sysroot-boot.service... Oct 29 00:34:12.934752 bash[830]: umount: /sysroot/usr/share/oem: not mounted. Oct 29 00:34:12.945105 ignition[832]: INFO : Ignition 2.14.0 Oct 29 00:34:12.946296 ignition[832]: INFO : Stage: mount Oct 29 00:34:12.947953 ignition[832]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:12.947953 ignition[832]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:12.947953 ignition[832]: INFO : mount: mount passed Oct 29 00:34:12.947953 ignition[832]: INFO : Ignition finished successfully Oct 29 00:34:12.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.948613 systemd[1]: Finished ignition-mount.service. Oct 29 00:34:12.950805 systemd[1]: Finished sysroot-boot.service. Oct 29 00:34:13.566529 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 29 00:34:13.576878 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (840) Oct 29 00:34:13.580345 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 29 00:34:13.580367 kernel: BTRFS info (device vda6): using free space tree Oct 29 00:34:13.580377 kernel: BTRFS info (device vda6): has skinny extents Oct 29 00:34:13.588072 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 29 00:34:13.589606 systemd[1]: Starting ignition-files.service... Oct 29 00:34:13.606487 ignition[860]: INFO : Ignition 2.14.0 Oct 29 00:34:13.606487 ignition[860]: INFO : Stage: files Oct 29 00:34:13.606487 ignition[860]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:13.606487 ignition[860]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:13.614826 ignition[860]: DEBUG : files: compiled without relabeling support, skipping Oct 29 00:34:13.614826 ignition[860]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 29 00:34:13.614826 ignition[860]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 29 00:34:13.621270 ignition[860]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 29 00:34:13.621270 ignition[860]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 29 00:34:13.621270 ignition[860]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 29 00:34:13.621270 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Oct 29 00:34:13.621270 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Oct 29 00:34:13.617633 unknown[860]: wrote ssh authorized keys file for user: core Oct 29 00:34:13.687988 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 29 00:34:13.884762 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Oct 29 00:34:13.884762 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Oct 29 00:34:13.888526 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Oct 29 00:34:14.313403 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Oct 29 00:34:14.459052 systemd-networkd[744]: eth0: Gained IPv6LL Oct 29 00:34:14.651689 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Oct 29 00:34:14.651689 ignition[860]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Oct 29 00:34:14.656225 ignition[860]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 29 00:34:14.687389 ignition[860]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 29 00:34:14.689133 ignition[860]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Oct 29 00:34:14.689133 ignition[860]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 29 00:34:14.689133 ignition[860]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 29 00:34:14.689133 ignition[860]: INFO : files: files passed Oct 29 00:34:14.689133 ignition[860]: INFO : Ignition finished successfully Oct 29 00:34:14.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.688993 systemd[1]: Finished ignition-files.service. Oct 29 00:34:14.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.690730 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 29 00:34:14.691975 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 29 00:34:14.701692 initrd-setup-root-after-ignition[886]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 29 00:34:14.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.692668 systemd[1]: Starting ignition-quench.service... Oct 29 00:34:14.705529 initrd-setup-root-after-ignition[888]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 29 00:34:14.695964 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 29 00:34:14.696035 systemd[1]: Finished ignition-quench.service. Oct 29 00:34:14.700013 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 29 00:34:14.702718 systemd[1]: Reached target ignition-complete.target. Oct 29 00:34:14.705384 systemd[1]: Starting initrd-parse-etc.service... Oct 29 00:34:14.719269 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 29 00:34:14.719355 systemd[1]: Finished initrd-parse-etc.service. Oct 29 00:34:14.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.721065 systemd[1]: Reached target initrd-fs.target. Oct 29 00:34:14.722347 systemd[1]: Reached target initrd.target. Oct 29 00:34:14.723576 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 29 00:34:14.724465 systemd[1]: Starting dracut-pre-pivot.service... Oct 29 00:34:14.734496 systemd[1]: Finished dracut-pre-pivot.service. Oct 29 00:34:14.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.736188 systemd[1]: Starting initrd-cleanup.service... Oct 29 00:34:14.744116 systemd[1]: Stopped target nss-lookup.target. Oct 29 00:34:14.745035 systemd[1]: Stopped target remote-cryptsetup.target. Oct 29 00:34:14.746445 systemd[1]: Stopped target timers.target. Oct 29 00:34:14.747718 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 29 00:34:14.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.747849 systemd[1]: Stopped dracut-pre-pivot.service. Oct 29 00:34:14.749097 systemd[1]: Stopped target initrd.target. Oct 29 00:34:14.750508 systemd[1]: Stopped target basic.target. Oct 29 00:34:14.751744 systemd[1]: Stopped target ignition-complete.target. Oct 29 00:34:14.753099 systemd[1]: Stopped target ignition-diskful.target. Oct 29 00:34:14.754390 systemd[1]: Stopped target initrd-root-device.target. Oct 29 00:34:14.755804 systemd[1]: Stopped target remote-fs.target. Oct 29 00:34:14.757205 systemd[1]: Stopped target remote-fs-pre.target. Oct 29 00:34:14.758684 systemd[1]: Stopped target sysinit.target. Oct 29 00:34:14.760084 systemd[1]: Stopped target local-fs.target. Oct 29 00:34:14.761376 systemd[1]: Stopped target local-fs-pre.target. Oct 29 00:34:14.762628 systemd[1]: Stopped target swap.target. Oct 29 00:34:14.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.763809 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 29 00:34:14.763944 systemd[1]: Stopped dracut-pre-mount.service. Oct 29 00:34:14.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.765274 systemd[1]: Stopped target cryptsetup.target. Oct 29 00:34:14.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.766510 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 29 00:34:14.766621 systemd[1]: Stopped dracut-initqueue.service. Oct 29 00:34:14.768045 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 29 00:34:14.768146 systemd[1]: Stopped ignition-fetch-offline.service. Oct 29 00:34:14.769463 systemd[1]: Stopped target paths.target. Oct 29 00:34:14.770612 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 29 00:34:14.773046 systemd[1]: Stopped systemd-ask-password-console.path. Oct 29 00:34:14.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.773982 systemd[1]: Stopped target slices.target. Oct 29 00:34:14.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.775264 systemd[1]: Stopped target sockets.target. Oct 29 00:34:14.776514 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 29 00:34:14.782524 iscsid[750]: iscsid shutting down. Oct 29 00:34:14.776634 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 29 00:34:14.778259 systemd[1]: ignition-files.service: Deactivated successfully. Oct 29 00:34:14.778360 systemd[1]: Stopped ignition-files.service. Oct 29 00:34:14.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.787330 ignition[901]: INFO : Ignition 2.14.0 Oct 29 00:34:14.787330 ignition[901]: INFO : Stage: umount Oct 29 00:34:14.787330 ignition[901]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:14.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.780604 systemd[1]: Stopping ignition-mount.service... Oct 29 00:34:14.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.791767 ignition[901]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:14.791767 ignition[901]: INFO : umount: umount passed Oct 29 00:34:14.791767 ignition[901]: INFO : Ignition finished successfully Oct 29 00:34:14.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.781686 systemd[1]: Stopping iscsid.service... Oct 29 00:34:14.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.783730 systemd[1]: Stopping sysroot-boot.service... Oct 29 00:34:14.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.785059 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 29 00:34:14.785206 systemd[1]: Stopped systemd-udev-trigger.service. Oct 29 00:34:14.786787 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 29 00:34:14.786913 systemd[1]: Stopped dracut-pre-trigger.service. Oct 29 00:34:14.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.789514 systemd[1]: iscsid.service: Deactivated successfully. Oct 29 00:34:14.789613 systemd[1]: Stopped iscsid.service. Oct 29 00:34:14.791399 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 29 00:34:14.791484 systemd[1]: Stopped ignition-mount.service. Oct 29 00:34:14.792992 systemd[1]: iscsid.socket: Deactivated successfully. Oct 29 00:34:14.793061 systemd[1]: Closed iscsid.socket. Oct 29 00:34:14.794493 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 29 00:34:14.794536 systemd[1]: Stopped ignition-disks.service. Oct 29 00:34:14.796003 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 29 00:34:14.796045 systemd[1]: Stopped ignition-kargs.service. Oct 29 00:34:14.798382 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 29 00:34:14.798425 systemd[1]: Stopped ignition-setup.service. Oct 29 00:34:14.799846 systemd[1]: Stopping iscsiuio.service... Oct 29 00:34:14.802611 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 29 00:34:14.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.803086 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 29 00:34:14.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.803184 systemd[1]: Stopped iscsiuio.service. Oct 29 00:34:14.805761 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 29 00:34:14.805876 systemd[1]: Finished initrd-cleanup.service. Oct 29 00:34:14.807550 systemd[1]: Stopped target network.target. Oct 29 00:34:14.809071 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 29 00:34:14.809108 systemd[1]: Closed iscsiuio.socket. Oct 29 00:34:14.831000 audit: BPF prog-id=6 op=UNLOAD Oct 29 00:34:14.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.810453 systemd[1]: Stopping systemd-networkd.service... Oct 29 00:34:14.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.811874 systemd[1]: Stopping systemd-resolved.service... Oct 29 00:34:14.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.818854 systemd-networkd[744]: eth0: DHCPv6 lease lost Oct 29 00:34:14.837000 audit: BPF prog-id=9 op=UNLOAD Oct 29 00:34:14.819999 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 29 00:34:14.820164 systemd[1]: Stopped systemd-networkd.service. Oct 29 00:34:14.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.823363 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 29 00:34:14.823464 systemd[1]: Stopped systemd-resolved.service. Oct 29 00:34:14.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.824806 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 29 00:34:14.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.824848 systemd[1]: Closed systemd-networkd.socket. Oct 29 00:34:14.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.829884 systemd[1]: Stopping network-cleanup.service... Oct 29 00:34:14.830656 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 29 00:34:14.830721 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 29 00:34:14.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.832735 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 29 00:34:14.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.832784 systemd[1]: Stopped systemd-sysctl.service. Oct 29 00:34:14.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.834744 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 29 00:34:14.834785 systemd[1]: Stopped systemd-modules-load.service. Oct 29 00:34:14.835864 systemd[1]: Stopping systemd-udevd.service... Oct 29 00:34:14.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.840161 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 29 00:34:14.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.840630 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 29 00:34:14.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.840711 systemd[1]: Stopped sysroot-boot.service. Oct 29 00:34:14.842439 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 29 00:34:14.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.842489 systemd[1]: Stopped initrd-setup-root.service. Oct 29 00:34:14.844541 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 29 00:34:14.844667 systemd[1]: Stopped systemd-udevd.service. Oct 29 00:34:14.845877 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 29 00:34:14.845963 systemd[1]: Stopped network-cleanup.service. Oct 29 00:34:14.847300 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 29 00:34:14.847333 systemd[1]: Closed systemd-udevd-control.socket. Oct 29 00:34:14.848677 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 29 00:34:14.848708 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 29 00:34:14.850122 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 29 00:34:14.850165 systemd[1]: Stopped dracut-pre-udev.service. Oct 29 00:34:14.851719 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 29 00:34:14.851760 systemd[1]: Stopped dracut-cmdline.service. Oct 29 00:34:14.853137 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 29 00:34:14.853182 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 29 00:34:14.855280 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 29 00:34:14.856968 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 29 00:34:14.857026 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 29 00:34:14.859180 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 29 00:34:14.859222 systemd[1]: Stopped kmod-static-nodes.service. Oct 29 00:34:14.860118 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 29 00:34:14.860161 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 29 00:34:14.862712 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 29 00:34:14.863185 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 29 00:34:14.863265 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 29 00:34:14.864538 systemd[1]: Reached target initrd-switch-root.target. Oct 29 00:34:14.866706 systemd[1]: Starting initrd-switch-root.service... Oct 29 00:34:14.872753 systemd[1]: Switching root. Oct 29 00:34:14.894221 systemd-journald[290]: Journal stopped Oct 29 00:34:17.001960 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Oct 29 00:34:17.002024 kernel: SELinux: Class mctp_socket not defined in policy. Oct 29 00:34:17.002036 kernel: SELinux: Class anon_inode not defined in policy. Oct 29 00:34:17.002045 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 29 00:34:17.002055 kernel: SELinux: policy capability network_peer_controls=1 Oct 29 00:34:17.002067 kernel: SELinux: policy capability open_perms=1 Oct 29 00:34:17.002076 kernel: SELinux: policy capability extended_socket_class=1 Oct 29 00:34:17.002086 kernel: SELinux: policy capability always_check_network=0 Oct 29 00:34:17.002095 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 29 00:34:17.002104 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 29 00:34:17.002113 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 29 00:34:17.002122 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 29 00:34:17.002132 systemd[1]: Successfully loaded SELinux policy in 35.089ms. Oct 29 00:34:17.002148 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.147ms. Oct 29 00:34:17.002160 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 29 00:34:17.002171 systemd[1]: Detected virtualization kvm. Oct 29 00:34:17.002181 systemd[1]: Detected architecture arm64. Oct 29 00:34:17.002190 systemd[1]: Detected first boot. Oct 29 00:34:17.002200 systemd[1]: Initializing machine ID from VM UUID. Oct 29 00:34:17.002210 kernel: kauditd_printk_skb: 67 callbacks suppressed Oct 29 00:34:17.002221 kernel: audit: type=1400 audit(1761698055.045:78): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 29 00:34:17.002233 kernel: audit: type=1400 audit(1761698055.045:79): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 29 00:34:17.002243 kernel: audit: type=1334 audit(1761698055.045:80): prog-id=10 op=LOAD Oct 29 00:34:17.002255 kernel: audit: type=1334 audit(1761698055.045:81): prog-id=10 op=UNLOAD Oct 29 00:34:17.002265 kernel: audit: type=1334 audit(1761698055.048:82): prog-id=11 op=LOAD Oct 29 00:34:17.002274 kernel: audit: type=1334 audit(1761698055.048:83): prog-id=11 op=UNLOAD Oct 29 00:34:17.002283 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Oct 29 00:34:17.002293 kernel: audit: type=1400 audit(1761698055.090:84): avc: denied { associate } for pid=934 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Oct 29 00:34:17.002304 kernel: audit: type=1300 audit(1761698055.090:84): arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=917 pid=934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:17.002316 kernel: audit: type=1327 audit(1761698055.090:84): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Oct 29 00:34:17.002328 kernel: audit: type=1400 audit(1761698055.096:85): avc: denied { associate } for pid=934 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Oct 29 00:34:17.002339 systemd[1]: Populated /etc with preset unit settings. Oct 29 00:34:17.002350 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 29 00:34:17.002361 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 29 00:34:17.002375 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 29 00:34:17.002386 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 29 00:34:17.002396 systemd[1]: Stopped initrd-switch-root.service. Oct 29 00:34:17.002406 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 29 00:34:17.002424 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 29 00:34:17.002437 systemd[1]: Created slice system-addon\x2drun.slice. Oct 29 00:34:17.002447 systemd[1]: Created slice system-getty.slice. Oct 29 00:34:17.002459 systemd[1]: Created slice system-modprobe.slice. Oct 29 00:34:17.002469 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 29 00:34:17.002479 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 29 00:34:17.002489 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 29 00:34:17.002500 systemd[1]: Created slice user.slice. Oct 29 00:34:17.002509 systemd[1]: Started systemd-ask-password-console.path. Oct 29 00:34:17.002520 systemd[1]: Started systemd-ask-password-wall.path. Oct 29 00:34:17.002530 systemd[1]: Set up automount boot.automount. Oct 29 00:34:17.002542 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 29 00:34:17.002552 systemd[1]: Stopped target initrd-switch-root.target. Oct 29 00:34:17.002563 systemd[1]: Stopped target initrd-fs.target. Oct 29 00:34:17.002577 systemd[1]: Stopped target initrd-root-fs.target. Oct 29 00:34:17.002587 systemd[1]: Reached target integritysetup.target. Oct 29 00:34:17.002597 systemd[1]: Reached target remote-cryptsetup.target. Oct 29 00:34:17.002607 systemd[1]: Reached target remote-fs.target. Oct 29 00:34:17.002617 systemd[1]: Reached target slices.target. Oct 29 00:34:17.002627 systemd[1]: Reached target swap.target. Oct 29 00:34:17.002638 systemd[1]: Reached target torcx.target. Oct 29 00:34:17.002649 systemd[1]: Reached target veritysetup.target. Oct 29 00:34:17.002659 systemd[1]: Listening on systemd-coredump.socket. Oct 29 00:34:17.002669 systemd[1]: Listening on systemd-initctl.socket. Oct 29 00:34:17.002679 systemd[1]: Listening on systemd-networkd.socket. Oct 29 00:34:17.002689 systemd[1]: Listening on systemd-udevd-control.socket. Oct 29 00:34:17.002700 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 29 00:34:17.002710 systemd[1]: Listening on systemd-userdbd.socket. Oct 29 00:34:17.002723 systemd[1]: Mounting dev-hugepages.mount... Oct 29 00:34:17.002733 systemd[1]: Mounting dev-mqueue.mount... Oct 29 00:34:17.002744 systemd[1]: Mounting media.mount... Oct 29 00:34:17.002755 systemd[1]: Mounting sys-kernel-debug.mount... Oct 29 00:34:17.002765 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 29 00:34:17.002775 systemd[1]: Mounting tmp.mount... Oct 29 00:34:17.002785 systemd[1]: Starting flatcar-tmpfiles.service... Oct 29 00:34:17.002795 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:17.002805 systemd[1]: Starting kmod-static-nodes.service... Oct 29 00:34:17.002823 systemd[1]: Starting modprobe@configfs.service... Oct 29 00:34:17.002834 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:17.002845 systemd[1]: Starting modprobe@drm.service... Oct 29 00:34:17.002856 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:17.002866 systemd[1]: Starting modprobe@fuse.service... Oct 29 00:34:17.002876 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:17.002887 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 29 00:34:17.002898 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 29 00:34:17.002908 systemd[1]: Stopped systemd-fsck-root.service. Oct 29 00:34:17.002919 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 29 00:34:17.002929 systemd[1]: Stopped systemd-fsck-usr.service. Oct 29 00:34:17.002941 kernel: fuse: init (API version 7.34) Oct 29 00:34:17.002951 kernel: loop: module loaded Oct 29 00:34:17.002961 systemd[1]: Stopped systemd-journald.service. Oct 29 00:34:17.002971 systemd[1]: Starting systemd-journald.service... Oct 29 00:34:17.002982 systemd[1]: Starting systemd-modules-load.service... Oct 29 00:34:17.002992 systemd[1]: Starting systemd-network-generator.service... Oct 29 00:34:17.003003 systemd[1]: Starting systemd-remount-fs.service... Oct 29 00:34:17.003013 systemd[1]: Starting systemd-udev-trigger.service... Oct 29 00:34:17.003023 systemd[1]: verity-setup.service: Deactivated successfully. Oct 29 00:34:17.003034 systemd[1]: Stopped verity-setup.service. Oct 29 00:34:17.003044 systemd[1]: Mounted dev-hugepages.mount. Oct 29 00:34:17.003057 systemd-journald[1013]: Journal started Oct 29 00:34:17.003100 systemd-journald[1013]: Runtime Journal (/run/log/journal/0202c54e1f0e468c82fd5ac4d21b772b) is 6.0M, max 48.7M, 42.6M free. Oct 29 00:34:14.951000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 29 00:34:15.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 29 00:34:15.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 29 00:34:15.045000 audit: BPF prog-id=10 op=LOAD Oct 29 00:34:15.045000 audit: BPF prog-id=10 op=UNLOAD Oct 29 00:34:15.048000 audit: BPF prog-id=11 op=LOAD Oct 29 00:34:15.048000 audit: BPF prog-id=11 op=UNLOAD Oct 29 00:34:15.090000 audit[934]: AVC avc: denied { associate } for pid=934 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Oct 29 00:34:15.090000 audit[934]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=917 pid=934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:15.090000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Oct 29 00:34:15.096000 audit[934]: AVC avc: denied { associate } for pid=934 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Oct 29 00:34:15.096000 audit[934]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5975 a2=1ed a3=0 items=2 ppid=917 pid=934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:15.096000 audit: CWD cwd="/" Oct 29 00:34:15.096000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:34:15.096000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:34:15.096000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Oct 29 00:34:16.873000 audit: BPF prog-id=12 op=LOAD Oct 29 00:34:16.873000 audit: BPF prog-id=3 op=UNLOAD Oct 29 00:34:16.873000 audit: BPF prog-id=13 op=LOAD Oct 29 00:34:16.874000 audit: BPF prog-id=14 op=LOAD Oct 29 00:34:16.874000 audit: BPF prog-id=4 op=UNLOAD Oct 29 00:34:16.874000 audit: BPF prog-id=5 op=UNLOAD Oct 29 00:34:16.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.885000 audit: BPF prog-id=12 op=UNLOAD Oct 29 00:34:16.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.981000 audit: BPF prog-id=15 op=LOAD Oct 29 00:34:16.982000 audit: BPF prog-id=16 op=LOAD Oct 29 00:34:16.982000 audit: BPF prog-id=17 op=LOAD Oct 29 00:34:16.982000 audit: BPF prog-id=13 op=UNLOAD Oct 29 00:34:16.982000 audit: BPF prog-id=14 op=UNLOAD Oct 29 00:34:17.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.000000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 29 00:34:17.000000 audit[1013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffeb5c2190 a2=4000 a3=1 items=0 ppid=1 pid=1013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:17.000000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 29 00:34:16.872921 systemd[1]: Queued start job for default target multi-user.target. Oct 29 00:34:15.089715 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 29 00:34:16.872935 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 29 00:34:15.090003 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 29 00:34:16.875519 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 29 00:34:15.090021 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 29 00:34:15.090051 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 29 00:34:15.090060 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 29 00:34:15.090089 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 29 00:34:15.090101 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 29 00:34:15.090290 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 29 00:34:15.090322 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 29 00:34:15.090333 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 29 00:34:15.091186 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 29 00:34:15.091221 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 29 00:34:15.091240 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Oct 29 00:34:15.091253 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 29 00:34:15.091271 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Oct 29 00:34:15.091284 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:15Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 29 00:34:17.005462 systemd[1]: Started systemd-journald.service. Oct 29 00:34:16.525270 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:16Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 29 00:34:17.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.525543 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:16Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 29 00:34:16.525636 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:16Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 29 00:34:16.525792 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:16Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 29 00:34:16.525857 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:16Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 29 00:34:16.525913 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-10-29T00:34:16Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 29 00:34:17.006122 systemd[1]: Mounted dev-mqueue.mount. Oct 29 00:34:17.007018 systemd[1]: Mounted media.mount. Oct 29 00:34:17.007918 systemd[1]: Mounted sys-kernel-debug.mount. Oct 29 00:34:17.008879 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 29 00:34:17.009908 systemd[1]: Mounted tmp.mount. Oct 29 00:34:17.010944 systemd[1]: Finished flatcar-tmpfiles.service. Oct 29 00:34:17.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.012118 systemd[1]: Finished kmod-static-nodes.service. Oct 29 00:34:17.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.013250 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 29 00:34:17.013432 systemd[1]: Finished modprobe@configfs.service. Oct 29 00:34:17.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.014643 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:17.014796 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:17.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.015948 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 29 00:34:17.016147 systemd[1]: Finished modprobe@drm.service. Oct 29 00:34:17.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.017256 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:17.017411 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:17.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.018721 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 29 00:34:17.018974 systemd[1]: Finished modprobe@fuse.service. Oct 29 00:34:17.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.020043 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:17.020194 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:17.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.021423 systemd[1]: Finished systemd-modules-load.service. Oct 29 00:34:17.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.022794 systemd[1]: Finished systemd-network-generator.service. Oct 29 00:34:17.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.024056 systemd[1]: Finished systemd-remount-fs.service. Oct 29 00:34:17.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.025450 systemd[1]: Reached target network-pre.target. Oct 29 00:34:17.027712 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 29 00:34:17.029689 systemd[1]: Mounting sys-kernel-config.mount... Oct 29 00:34:17.030694 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 29 00:34:17.032410 systemd[1]: Starting systemd-hwdb-update.service... Oct 29 00:34:17.034442 systemd[1]: Starting systemd-journal-flush.service... Oct 29 00:34:17.035496 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 29 00:34:17.036611 systemd[1]: Starting systemd-random-seed.service... Oct 29 00:34:17.037632 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 29 00:34:17.038714 systemd[1]: Starting systemd-sysctl.service... Oct 29 00:34:17.040778 systemd[1]: Starting systemd-sysusers.service... Oct 29 00:34:17.041729 systemd-journald[1013]: Time spent on flushing to /var/log/journal/0202c54e1f0e468c82fd5ac4d21b772b is 18.715ms for 994 entries. Oct 29 00:34:17.041729 systemd-journald[1013]: System Journal (/var/log/journal/0202c54e1f0e468c82fd5ac4d21b772b) is 8.0M, max 195.6M, 187.6M free. Oct 29 00:34:17.069930 systemd-journald[1013]: Received client request to flush runtime journal. Oct 29 00:34:17.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.043731 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 29 00:34:17.044938 systemd[1]: Mounted sys-kernel-config.mount. Oct 29 00:34:17.070340 udevadm[1036]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 29 00:34:17.046908 systemd[1]: Finished systemd-random-seed.service. Oct 29 00:34:17.048205 systemd[1]: Finished systemd-udev-trigger.service. Oct 29 00:34:17.049355 systemd[1]: Reached target first-boot-complete.target. Oct 29 00:34:17.051309 systemd[1]: Starting systemd-udev-settle.service... Oct 29 00:34:17.056115 systemd[1]: Finished systemd-sysctl.service. Oct 29 00:34:17.065650 systemd[1]: Finished systemd-sysusers.service. Oct 29 00:34:17.067692 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 29 00:34:17.070740 systemd[1]: Finished systemd-journal-flush.service. Oct 29 00:34:17.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.084392 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 29 00:34:17.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.413879 systemd[1]: Finished systemd-hwdb-update.service. Oct 29 00:34:17.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.414000 audit: BPF prog-id=18 op=LOAD Oct 29 00:34:17.414000 audit: BPF prog-id=19 op=LOAD Oct 29 00:34:17.414000 audit: BPF prog-id=7 op=UNLOAD Oct 29 00:34:17.414000 audit: BPF prog-id=8 op=UNLOAD Oct 29 00:34:17.416059 systemd[1]: Starting systemd-udevd.service... Oct 29 00:34:17.430658 systemd-udevd[1040]: Using default interface naming scheme 'v252'. Oct 29 00:34:17.443108 systemd[1]: Started systemd-udevd.service. Oct 29 00:34:17.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.444000 audit: BPF prog-id=20 op=LOAD Oct 29 00:34:17.446501 systemd[1]: Starting systemd-networkd.service... Oct 29 00:34:17.450000 audit: BPF prog-id=21 op=LOAD Oct 29 00:34:17.451000 audit: BPF prog-id=22 op=LOAD Oct 29 00:34:17.451000 audit: BPF prog-id=23 op=LOAD Oct 29 00:34:17.452725 systemd[1]: Starting systemd-userdbd.service... Oct 29 00:34:17.466678 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 29 00:34:17.488605 systemd[1]: Started systemd-userdbd.service. Oct 29 00:34:17.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.505019 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 29 00:34:17.530464 systemd-networkd[1049]: lo: Link UP Oct 29 00:34:17.530478 systemd-networkd[1049]: lo: Gained carrier Oct 29 00:34:17.530863 systemd-networkd[1049]: Enumeration completed Oct 29 00:34:17.530964 systemd[1]: Started systemd-networkd.service. Oct 29 00:34:17.530968 systemd-networkd[1049]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 29 00:34:17.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.532758 systemd-networkd[1049]: eth0: Link UP Oct 29 00:34:17.532769 systemd-networkd[1049]: eth0: Gained carrier Oct 29 00:34:17.537254 systemd[1]: Finished systemd-udev-settle.service. Oct 29 00:34:17.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.539340 systemd[1]: Starting lvm2-activation-early.service... Oct 29 00:34:17.549170 lvm[1073]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 29 00:34:17.552965 systemd-networkd[1049]: eth0: DHCPv4 address 10.0.0.78/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 29 00:34:17.585771 systemd[1]: Finished lvm2-activation-early.service. Oct 29 00:34:17.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.586797 systemd[1]: Reached target cryptsetup.target. Oct 29 00:34:17.588843 systemd[1]: Starting lvm2-activation.service... Oct 29 00:34:17.592400 lvm[1074]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 29 00:34:17.621768 systemd[1]: Finished lvm2-activation.service. Oct 29 00:34:17.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.622865 systemd[1]: Reached target local-fs-pre.target. Oct 29 00:34:17.623700 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 29 00:34:17.623736 systemd[1]: Reached target local-fs.target. Oct 29 00:34:17.624597 systemd[1]: Reached target machines.target. Oct 29 00:34:17.626778 systemd[1]: Starting ldconfig.service... Oct 29 00:34:17.627945 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:17.628001 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:17.629291 systemd[1]: Starting systemd-boot-update.service... Oct 29 00:34:17.631205 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 29 00:34:17.633712 systemd[1]: Starting systemd-machine-id-commit.service... Oct 29 00:34:17.635931 systemd[1]: Starting systemd-sysext.service... Oct 29 00:34:17.637637 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1076 (bootctl) Oct 29 00:34:17.638853 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 29 00:34:17.648425 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 29 00:34:17.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.651878 systemd[1]: Unmounting usr-share-oem.mount... Oct 29 00:34:17.657051 systemd[1]: usr-share-oem.mount: Deactivated successfully. Oct 29 00:34:17.657304 systemd[1]: Unmounted usr-share-oem.mount. Oct 29 00:34:17.778857 kernel: loop0: detected capacity change from 0 to 211168 Oct 29 00:34:17.795845 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Oct 29 00:34:17.799800 systemd-fsck[1089]: fsck.fat 4.2 (2021-01-31) Oct 29 00:34:17.799800 systemd-fsck[1089]: /dev/vda1: 236 files, 117310/258078 clusters Oct 29 00:34:17.801706 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 29 00:34:17.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.805398 systemd[1]: Mounting boot.mount... Oct 29 00:34:17.813349 systemd[1]: Mounted boot.mount. Oct 29 00:34:17.817842 kernel: loop1: detected capacity change from 0 to 211168 Oct 29 00:34:17.817879 systemd[1]: Finished systemd-machine-id-commit.service. Oct 29 00:34:17.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.821748 systemd[1]: Finished systemd-boot-update.service. Oct 29 00:34:17.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.825190 (sd-sysext)[1093]: Using extensions 'kubernetes'. Oct 29 00:34:17.825539 (sd-sysext)[1093]: Merged extensions into '/usr'. Oct 29 00:34:17.843352 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:17.845049 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:17.847215 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:17.849451 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:17.850321 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:17.850472 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:17.851465 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:17.851611 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:17.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.853046 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:17.853172 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:17.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.854546 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:17.854684 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:17.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:17.856158 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 29 00:34:17.856294 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 29 00:34:17.914694 ldconfig[1075]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 29 00:34:17.919951 systemd[1]: Finished ldconfig.service. Oct 29 00:34:17.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.001616 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 29 00:34:18.003559 systemd[1]: Mounting usr-share-oem.mount... Oct 29 00:34:18.008638 systemd[1]: Mounted usr-share-oem.mount. Oct 29 00:34:18.010459 systemd[1]: Finished systemd-sysext.service. Oct 29 00:34:18.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.012486 systemd[1]: Starting ensure-sysext.service... Oct 29 00:34:18.014220 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 29 00:34:18.018667 systemd[1]: Reloading. Oct 29 00:34:18.024151 systemd-tmpfiles[1101]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 29 00:34:18.025773 systemd-tmpfiles[1101]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 29 00:34:18.027385 systemd-tmpfiles[1101]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 29 00:34:18.053719 /usr/lib/systemd/system-generators/torcx-generator[1121]: time="2025-10-29T00:34:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 29 00:34:18.053751 /usr/lib/systemd/system-generators/torcx-generator[1121]: time="2025-10-29T00:34:18Z" level=info msg="torcx already run" Oct 29 00:34:18.114108 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 29 00:34:18.114127 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 29 00:34:18.129358 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 29 00:34:18.170000 audit: BPF prog-id=24 op=LOAD Oct 29 00:34:18.170000 audit: BPF prog-id=15 op=UNLOAD Oct 29 00:34:18.170000 audit: BPF prog-id=25 op=LOAD Oct 29 00:34:18.170000 audit: BPF prog-id=26 op=LOAD Oct 29 00:34:18.170000 audit: BPF prog-id=16 op=UNLOAD Oct 29 00:34:18.170000 audit: BPF prog-id=17 op=UNLOAD Oct 29 00:34:18.171000 audit: BPF prog-id=27 op=LOAD Oct 29 00:34:18.171000 audit: BPF prog-id=20 op=UNLOAD Oct 29 00:34:18.171000 audit: BPF prog-id=28 op=LOAD Oct 29 00:34:18.171000 audit: BPF prog-id=29 op=LOAD Oct 29 00:34:18.171000 audit: BPF prog-id=18 op=UNLOAD Oct 29 00:34:18.171000 audit: BPF prog-id=19 op=UNLOAD Oct 29 00:34:18.173000 audit: BPF prog-id=30 op=LOAD Oct 29 00:34:18.173000 audit: BPF prog-id=21 op=UNLOAD Oct 29 00:34:18.173000 audit: BPF prog-id=31 op=LOAD Oct 29 00:34:18.173000 audit: BPF prog-id=32 op=LOAD Oct 29 00:34:18.173000 audit: BPF prog-id=22 op=UNLOAD Oct 29 00:34:18.173000 audit: BPF prog-id=23 op=UNLOAD Oct 29 00:34:18.176002 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 29 00:34:18.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.180295 systemd[1]: Starting audit-rules.service... Oct 29 00:34:18.182129 systemd[1]: Starting clean-ca-certificates.service... Oct 29 00:34:18.184049 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 29 00:34:18.185000 audit: BPF prog-id=33 op=LOAD Oct 29 00:34:18.187000 audit: BPF prog-id=34 op=LOAD Oct 29 00:34:18.186682 systemd[1]: Starting systemd-resolved.service... Oct 29 00:34:18.189185 systemd[1]: Starting systemd-timesyncd.service... Oct 29 00:34:18.191527 systemd[1]: Starting systemd-update-utmp.service... Oct 29 00:34:18.192985 systemd[1]: Finished clean-ca-certificates.service. Oct 29 00:34:18.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.195727 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 29 00:34:18.197531 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.198694 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:18.200706 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:18.201000 audit[1171]: SYSTEM_BOOT pid=1171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.202729 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:18.203538 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.203671 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:18.203771 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 29 00:34:18.204595 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 29 00:34:18.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.205947 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:18.206062 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:18.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.207288 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:18.207398 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:18.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.208678 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:18.208783 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:18.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.211665 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 29 00:34:18.211865 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.213297 systemd[1]: Starting systemd-update-done.service... Oct 29 00:34:18.216416 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.217690 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:18.219540 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:18.221532 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:18.222303 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.222436 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:18.222519 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 29 00:34:18.223326 systemd[1]: Finished systemd-update-utmp.service. Oct 29 00:34:18.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.224751 systemd[1]: Finished systemd-update-done.service. Oct 29 00:34:18.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.226029 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:18.226147 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:18.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.227357 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:18.227473 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:18.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.228693 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:18.228803 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:18.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.230955 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 29 00:34:18.231061 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.231000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 29 00:34:18.231000 audit[1187]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe5a11a00 a2=420 a3=0 items=0 ppid=1160 pid=1187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:18.231000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 29 00:34:18.232600 augenrules[1187]: No rules Oct 29 00:34:18.233325 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.234491 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:18.236579 systemd[1]: Starting modprobe@drm.service... Oct 29 00:34:18.238380 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:18.240191 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:18.240952 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.241077 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:18.242291 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 29 00:34:18.243262 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 29 00:34:18.244365 systemd[1]: Finished audit-rules.service. Oct 29 00:34:18.245497 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:18.245608 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:18.246789 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 29 00:34:18.246919 systemd[1]: Finished modprobe@drm.service. Oct 29 00:34:18.248038 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:18.248152 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:18.249446 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:18.249561 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:18.251091 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 29 00:34:18.251171 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.252158 systemd[1]: Finished ensure-sysext.service. Oct 29 00:34:18.259364 systemd-resolved[1169]: Positive Trust Anchors: Oct 29 00:34:18.259377 systemd-resolved[1169]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 29 00:34:18.259403 systemd-resolved[1169]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 29 00:34:18.266841 systemd[1]: Started systemd-timesyncd.service. Oct 29 00:34:18.267731 systemd-resolved[1169]: Defaulting to hostname 'linux'. Oct 29 00:34:18.267794 systemd-timesyncd[1170]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 29 00:34:18.267867 systemd-timesyncd[1170]: Initial clock synchronization to Wed 2025-10-29 00:34:18.337836 UTC. Oct 29 00:34:18.268106 systemd[1]: Reached target time-set.target. Oct 29 00:34:18.269213 systemd[1]: Started systemd-resolved.service. Oct 29 00:34:18.270050 systemd[1]: Reached target network.target. Oct 29 00:34:18.270796 systemd[1]: Reached target nss-lookup.target. Oct 29 00:34:18.271667 systemd[1]: Reached target sysinit.target. Oct 29 00:34:18.272552 systemd[1]: Started motdgen.path. Oct 29 00:34:18.273293 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 29 00:34:18.274566 systemd[1]: Started logrotate.timer. Oct 29 00:34:18.275419 systemd[1]: Started mdadm.timer. Oct 29 00:34:18.276115 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 29 00:34:18.277017 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 29 00:34:18.277052 systemd[1]: Reached target paths.target. Oct 29 00:34:18.277812 systemd[1]: Reached target timers.target. Oct 29 00:34:18.278930 systemd[1]: Listening on dbus.socket. Oct 29 00:34:18.280712 systemd[1]: Starting docker.socket... Oct 29 00:34:18.283991 systemd[1]: Listening on sshd.socket. Oct 29 00:34:18.284803 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:18.285253 systemd[1]: Listening on docker.socket. Oct 29 00:34:18.286086 systemd[1]: Reached target sockets.target. Oct 29 00:34:18.286847 systemd[1]: Reached target basic.target. Oct 29 00:34:18.287585 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.287620 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.288590 systemd[1]: Starting containerd.service... Oct 29 00:34:18.290301 systemd[1]: Starting dbus.service... Oct 29 00:34:18.292191 systemd[1]: Starting enable-oem-cloudinit.service... Oct 29 00:34:18.294023 systemd[1]: Starting extend-filesystems.service... Oct 29 00:34:18.295103 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 29 00:34:18.296419 jq[1204]: false Oct 29 00:34:18.296142 systemd[1]: Starting motdgen.service... Oct 29 00:34:18.297959 systemd[1]: Starting prepare-helm.service... Oct 29 00:34:18.299689 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 29 00:34:18.301926 systemd[1]: Starting sshd-keygen.service... Oct 29 00:34:18.305162 systemd[1]: Starting systemd-logind.service... Oct 29 00:34:18.305927 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:18.306017 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 29 00:34:18.306553 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 29 00:34:18.307571 systemd[1]: Starting update-engine.service... Oct 29 00:34:18.311247 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 29 00:34:18.314488 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 29 00:34:18.317513 extend-filesystems[1205]: Found loop1 Oct 29 00:34:18.317513 extend-filesystems[1205]: Found vda Oct 29 00:34:18.317513 extend-filesystems[1205]: Found vda1 Oct 29 00:34:18.317513 extend-filesystems[1205]: Found vda2 Oct 29 00:34:18.317513 extend-filesystems[1205]: Found vda3 Oct 29 00:34:18.317513 extend-filesystems[1205]: Found usr Oct 29 00:34:18.317513 extend-filesystems[1205]: Found vda4 Oct 29 00:34:18.317513 extend-filesystems[1205]: Found vda6 Oct 29 00:34:18.317513 extend-filesystems[1205]: Found vda7 Oct 29 00:34:18.317513 extend-filesystems[1205]: Found vda9 Oct 29 00:34:18.317513 extend-filesystems[1205]: Checking size of /dev/vda9 Oct 29 00:34:18.328931 jq[1222]: true Oct 29 00:34:18.314706 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 29 00:34:18.316030 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 29 00:34:18.316272 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 29 00:34:18.325362 systemd[1]: motdgen.service: Deactivated successfully. Oct 29 00:34:18.329497 jq[1229]: true Oct 29 00:34:18.325578 systemd[1]: Finished motdgen.service. Oct 29 00:34:18.331698 tar[1225]: linux-arm64/LICENSE Oct 29 00:34:18.331929 tar[1225]: linux-arm64/helm Oct 29 00:34:18.334931 dbus-daemon[1203]: [system] SELinux support is enabled Oct 29 00:34:18.335098 systemd[1]: Started dbus.service. Oct 29 00:34:18.337993 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 29 00:34:18.338033 systemd[1]: Reached target system-config.target. Oct 29 00:34:18.339025 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 29 00:34:18.339044 systemd[1]: Reached target user-config.target. Oct 29 00:34:18.349080 extend-filesystems[1205]: Resized partition /dev/vda9 Oct 29 00:34:18.352365 extend-filesystems[1243]: resize2fs 1.46.5 (30-Dec-2021) Oct 29 00:34:18.363133 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Oct 29 00:34:18.386637 update_engine[1221]: I1029 00:34:18.386333 1221 main.cc:92] Flatcar Update Engine starting Oct 29 00:34:18.390238 systemd[1]: Started update-engine.service. Oct 29 00:34:18.390365 update_engine[1221]: I1029 00:34:18.390327 1221 update_check_scheduler.cc:74] Next update check in 5m22s Oct 29 00:34:18.392785 systemd[1]: Started locksmithd.service. Oct 29 00:34:18.400976 systemd-logind[1215]: Watching system buttons on /dev/input/event0 (Power Button) Oct 29 00:34:18.401276 systemd-logind[1215]: New seat seat0. Oct 29 00:34:18.404214 systemd[1]: Started systemd-logind.service. Oct 29 00:34:18.414704 env[1227]: time="2025-10-29T00:34:18.414645120Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 29 00:34:18.417831 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Oct 29 00:34:18.433498 env[1227]: time="2025-10-29T00:34:18.432459440Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 29 00:34:18.433621 env[1227]: time="2025-10-29T00:34:18.433590560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:18.434941 env[1227]: time="2025-10-29T00:34:18.434902480Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 29 00:34:18.434941 env[1227]: time="2025-10-29T00:34:18.434939160Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:18.435249 env[1227]: time="2025-10-29T00:34:18.435223960Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 29 00:34:18.435308 env[1227]: time="2025-10-29T00:34:18.435249720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:18.435308 env[1227]: time="2025-10-29T00:34:18.435266400Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 29 00:34:18.435308 env[1227]: time="2025-10-29T00:34:18.435277320Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:18.435384 env[1227]: time="2025-10-29T00:34:18.435360840Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:18.435724 env[1227]: time="2025-10-29T00:34:18.435686160Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:18.435929 env[1227]: time="2025-10-29T00:34:18.435905960Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 29 00:34:18.435965 env[1227]: time="2025-10-29T00:34:18.435930240Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 29 00:34:18.436058 env[1227]: time="2025-10-29T00:34:18.436000200Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 29 00:34:18.436058 env[1227]: time="2025-10-29T00:34:18.436045520Z" level=info msg="metadata content store policy set" policy=shared Oct 29 00:34:18.436123 bash[1254]: Updated "/home/core/.ssh/authorized_keys" Oct 29 00:34:18.436516 extend-filesystems[1243]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Oct 29 00:34:18.436516 extend-filesystems[1243]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 29 00:34:18.436516 extend-filesystems[1243]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Oct 29 00:34:18.441986 extend-filesystems[1205]: Resized filesystem in /dev/vda9 Oct 29 00:34:18.437170 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 29 00:34:18.439389 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 29 00:34:18.439551 systemd[1]: Finished extend-filesystems.service. Oct 29 00:34:18.445032 env[1227]: time="2025-10-29T00:34:18.444997640Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 29 00:34:18.445096 env[1227]: time="2025-10-29T00:34:18.445038440Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 29 00:34:18.445096 env[1227]: time="2025-10-29T00:34:18.445062680Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 29 00:34:18.445139 env[1227]: time="2025-10-29T00:34:18.445092560Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 29 00:34:18.445139 env[1227]: time="2025-10-29T00:34:18.445108200Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 29 00:34:18.445139 env[1227]: time="2025-10-29T00:34:18.445130320Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 29 00:34:18.445245 env[1227]: time="2025-10-29T00:34:18.445143520Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 29 00:34:18.445584 env[1227]: time="2025-10-29T00:34:18.445556360Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 29 00:34:18.445616 env[1227]: time="2025-10-29T00:34:18.445593560Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 29 00:34:18.445616 env[1227]: time="2025-10-29T00:34:18.445608280Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 29 00:34:18.445662 env[1227]: time="2025-10-29T00:34:18.445621280Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 29 00:34:18.445662 env[1227]: time="2025-10-29T00:34:18.445637120Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 29 00:34:18.445813 env[1227]: time="2025-10-29T00:34:18.445795360Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 29 00:34:18.445930 env[1227]: time="2025-10-29T00:34:18.445913960Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 29 00:34:18.446176 env[1227]: time="2025-10-29T00:34:18.446159760Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 29 00:34:18.446200 env[1227]: time="2025-10-29T00:34:18.446189720Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446231 env[1227]: time="2025-10-29T00:34:18.446213760Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 29 00:34:18.446346 env[1227]: time="2025-10-29T00:34:18.446332760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446369 env[1227]: time="2025-10-29T00:34:18.446350360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446369 env[1227]: time="2025-10-29T00:34:18.446363840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446414 env[1227]: time="2025-10-29T00:34:18.446375880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446414 env[1227]: time="2025-10-29T00:34:18.446395400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446459 env[1227]: time="2025-10-29T00:34:18.446416760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446459 env[1227]: time="2025-10-29T00:34:18.446430040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446459 env[1227]: time="2025-10-29T00:34:18.446442480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446526 env[1227]: time="2025-10-29T00:34:18.446456240Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 29 00:34:18.446647 env[1227]: time="2025-10-29T00:34:18.446613720Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446676 env[1227]: time="2025-10-29T00:34:18.446664360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446699 env[1227]: time="2025-10-29T00:34:18.446679600Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.446699 env[1227]: time="2025-10-29T00:34:18.446692160Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 29 00:34:18.446738 env[1227]: time="2025-10-29T00:34:18.446715600Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 29 00:34:18.446738 env[1227]: time="2025-10-29T00:34:18.446730560Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 29 00:34:18.446779 env[1227]: time="2025-10-29T00:34:18.446748240Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 29 00:34:18.446800 env[1227]: time="2025-10-29T00:34:18.446790880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 29 00:34:18.447191 env[1227]: time="2025-10-29T00:34:18.447137760Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 29 00:34:18.447839 env[1227]: time="2025-10-29T00:34:18.447205600Z" level=info msg="Connect containerd service" Oct 29 00:34:18.447839 env[1227]: time="2025-10-29T00:34:18.447250160Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 29 00:34:18.448022 env[1227]: time="2025-10-29T00:34:18.447995680Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 29 00:34:18.450294 env[1227]: time="2025-10-29T00:34:18.449329760Z" level=info msg="Start subscribing containerd event" Oct 29 00:34:18.450294 env[1227]: time="2025-10-29T00:34:18.449401400Z" level=info msg="Start recovering state" Oct 29 00:34:18.450294 env[1227]: time="2025-10-29T00:34:18.449496400Z" level=info msg="Start event monitor" Oct 29 00:34:18.450294 env[1227]: time="2025-10-29T00:34:18.449519360Z" level=info msg="Start snapshots syncer" Oct 29 00:34:18.450294 env[1227]: time="2025-10-29T00:34:18.449530120Z" level=info msg="Start cni network conf syncer for default" Oct 29 00:34:18.450294 env[1227]: time="2025-10-29T00:34:18.449542280Z" level=info msg="Start streaming server" Oct 29 00:34:18.450513 env[1227]: time="2025-10-29T00:34:18.450424520Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 29 00:34:18.450513 env[1227]: time="2025-10-29T00:34:18.450483600Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 29 00:34:18.450623 systemd[1]: Started containerd.service. Oct 29 00:34:18.456545 env[1227]: time="2025-10-29T00:34:18.451779080Z" level=info msg="containerd successfully booted in 0.037795s" Oct 29 00:34:18.464373 locksmithd[1256]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 29 00:34:18.810105 tar[1225]: linux-arm64/README.md Oct 29 00:34:18.814240 systemd[1]: Finished prepare-helm.service. Oct 29 00:34:19.387357 systemd-networkd[1049]: eth0: Gained IPv6LL Oct 29 00:34:19.389061 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 29 00:34:19.390213 systemd[1]: Reached target network-online.target. Oct 29 00:34:19.392540 systemd[1]: Starting kubelet.service... Oct 29 00:34:19.999454 systemd[1]: Started kubelet.service. Oct 29 00:34:20.387881 kubelet[1272]: E1029 00:34:20.387765 1272 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 29 00:34:20.389903 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 29 00:34:20.390033 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 29 00:34:20.459765 sshd_keygen[1226]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 29 00:34:20.477303 systemd[1]: Finished sshd-keygen.service. Oct 29 00:34:20.479488 systemd[1]: Starting issuegen.service... Oct 29 00:34:20.483942 systemd[1]: issuegen.service: Deactivated successfully. Oct 29 00:34:20.484094 systemd[1]: Finished issuegen.service. Oct 29 00:34:20.486099 systemd[1]: Starting systemd-user-sessions.service... Oct 29 00:34:20.492057 systemd[1]: Finished systemd-user-sessions.service. Oct 29 00:34:20.494118 systemd[1]: Started getty@tty1.service. Oct 29 00:34:20.496038 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 29 00:34:20.497016 systemd[1]: Reached target getty.target. Oct 29 00:34:20.497847 systemd[1]: Reached target multi-user.target. Oct 29 00:34:20.499707 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 29 00:34:20.506172 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 29 00:34:20.506319 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 29 00:34:20.507365 systemd[1]: Startup finished in 542ms (kernel) + 4.360s (initrd) + 5.592s (userspace) = 10.495s. Oct 29 00:34:23.778658 systemd[1]: Created slice system-sshd.slice. Oct 29 00:34:23.779759 systemd[1]: Started sshd@0-10.0.0.78:22-10.0.0.1:43208.service. Oct 29 00:34:23.839988 sshd[1294]: Accepted publickey for core from 10.0.0.1 port 43208 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:23.842002 sshd[1294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:23.850644 systemd[1]: Created slice user-500.slice. Oct 29 00:34:23.851806 systemd[1]: Starting user-runtime-dir@500.service... Oct 29 00:34:23.854179 systemd-logind[1215]: New session 1 of user core. Oct 29 00:34:23.860028 systemd[1]: Finished user-runtime-dir@500.service. Oct 29 00:34:23.861433 systemd[1]: Starting user@500.service... Oct 29 00:34:23.864236 (systemd)[1297]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:23.925132 systemd[1297]: Queued start job for default target default.target. Oct 29 00:34:23.925620 systemd[1297]: Reached target paths.target. Oct 29 00:34:23.925652 systemd[1297]: Reached target sockets.target. Oct 29 00:34:23.925664 systemd[1297]: Reached target timers.target. Oct 29 00:34:23.925674 systemd[1297]: Reached target basic.target. Oct 29 00:34:23.925715 systemd[1297]: Reached target default.target. Oct 29 00:34:23.925741 systemd[1297]: Startup finished in 55ms. Oct 29 00:34:23.925813 systemd[1]: Started user@500.service. Oct 29 00:34:23.926879 systemd[1]: Started session-1.scope. Oct 29 00:34:23.982606 systemd[1]: Started sshd@1-10.0.0.78:22-10.0.0.1:43216.service. Oct 29 00:34:24.025750 sshd[1306]: Accepted publickey for core from 10.0.0.1 port 43216 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:24.027348 sshd[1306]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:24.032084 systemd-logind[1215]: New session 2 of user core. Oct 29 00:34:24.032902 systemd[1]: Started session-2.scope. Oct 29 00:34:24.087756 sshd[1306]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:24.090945 systemd[1]: sshd@1-10.0.0.78:22-10.0.0.1:43216.service: Deactivated successfully. Oct 29 00:34:24.091545 systemd[1]: session-2.scope: Deactivated successfully. Oct 29 00:34:24.092062 systemd-logind[1215]: Session 2 logged out. Waiting for processes to exit. Oct 29 00:34:24.093150 systemd[1]: Started sshd@2-10.0.0.78:22-10.0.0.1:43228.service. Oct 29 00:34:24.093730 systemd-logind[1215]: Removed session 2. Oct 29 00:34:24.136097 sshd[1312]: Accepted publickey for core from 10.0.0.1 port 43228 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:24.137382 sshd[1312]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:24.141106 systemd-logind[1215]: New session 3 of user core. Oct 29 00:34:24.141904 systemd[1]: Started session-3.scope. Oct 29 00:34:24.192097 sshd[1312]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:24.194748 systemd[1]: sshd@2-10.0.0.78:22-10.0.0.1:43228.service: Deactivated successfully. Oct 29 00:34:24.195367 systemd[1]: session-3.scope: Deactivated successfully. Oct 29 00:34:24.195879 systemd-logind[1215]: Session 3 logged out. Waiting for processes to exit. Oct 29 00:34:24.196972 systemd[1]: Started sshd@3-10.0.0.78:22-10.0.0.1:43230.service. Oct 29 00:34:24.197560 systemd-logind[1215]: Removed session 3. Oct 29 00:34:24.241052 sshd[1319]: Accepted publickey for core from 10.0.0.1 port 43230 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:24.242272 sshd[1319]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:24.245706 systemd-logind[1215]: New session 4 of user core. Oct 29 00:34:24.246507 systemd[1]: Started session-4.scope. Oct 29 00:34:24.300201 sshd[1319]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:24.303956 systemd[1]: Started sshd@4-10.0.0.78:22-10.0.0.1:43240.service. Oct 29 00:34:24.304547 systemd[1]: sshd@3-10.0.0.78:22-10.0.0.1:43230.service: Deactivated successfully. Oct 29 00:34:24.305321 systemd[1]: session-4.scope: Deactivated successfully. Oct 29 00:34:24.305957 systemd-logind[1215]: Session 4 logged out. Waiting for processes to exit. Oct 29 00:34:24.307011 systemd-logind[1215]: Removed session 4. Oct 29 00:34:24.346137 sshd[1324]: Accepted publickey for core from 10.0.0.1 port 43240 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:24.347401 sshd[1324]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:24.350995 systemd-logind[1215]: New session 5 of user core. Oct 29 00:34:24.351951 systemd[1]: Started session-5.scope. Oct 29 00:34:24.411260 sudo[1328]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 29 00:34:24.411504 sudo[1328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 29 00:34:24.423044 dbus-daemon[1203]: avc: received setenforce notice (enforcing=1) Oct 29 00:34:24.425515 sudo[1328]: pam_unix(sudo:session): session closed for user root Oct 29 00:34:24.428701 sshd[1324]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:24.432485 systemd[1]: sshd@4-10.0.0.78:22-10.0.0.1:43240.service: Deactivated successfully. Oct 29 00:34:24.433448 systemd[1]: session-5.scope: Deactivated successfully. Oct 29 00:34:24.434367 systemd-logind[1215]: Session 5 logged out. Waiting for processes to exit. Oct 29 00:34:24.436184 systemd[1]: Started sshd@5-10.0.0.78:22-10.0.0.1:43242.service. Oct 29 00:34:24.437354 systemd-logind[1215]: Removed session 5. Oct 29 00:34:24.485705 sshd[1332]: Accepted publickey for core from 10.0.0.1 port 43242 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:24.487190 sshd[1332]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:24.490604 systemd-logind[1215]: New session 6 of user core. Oct 29 00:34:24.492686 systemd[1]: Started session-6.scope. Oct 29 00:34:24.547153 sudo[1336]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 29 00:34:24.547653 sudo[1336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 29 00:34:24.550413 sudo[1336]: pam_unix(sudo:session): session closed for user root Oct 29 00:34:24.555695 sudo[1335]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 29 00:34:24.555967 sudo[1335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 29 00:34:24.564534 systemd[1]: Stopping audit-rules.service... Oct 29 00:34:24.565000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 29 00:34:24.568175 auditctl[1339]: No rules Oct 29 00:34:24.568505 systemd[1]: audit-rules.service: Deactivated successfully. Oct 29 00:34:24.568666 systemd[1]: Stopped audit-rules.service. Oct 29 00:34:24.570094 systemd[1]: Starting audit-rules.service... Oct 29 00:34:24.571939 kernel: kauditd_printk_skb: 120 callbacks suppressed Oct 29 00:34:24.571998 kernel: audit: type=1305 audit(1761698064.565:197): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 29 00:34:24.572016 kernel: audit: type=1300 audit(1761698064.565:197): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdcc30ce0 a2=420 a3=0 items=0 ppid=1 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:24.565000 audit[1339]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdcc30ce0 a2=420 a3=0 items=0 ppid=1 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:24.578953 kernel: audit: type=1327 audit(1761698064.565:197): proctitle=2F7362696E2F617564697463746C002D44 Oct 29 00:34:24.579011 kernel: audit: type=1131 audit(1761698064.567:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.565000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 29 00:34:24.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.586887 augenrules[1356]: No rules Oct 29 00:34:24.587408 systemd[1]: Finished audit-rules.service. Oct 29 00:34:24.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.589284 sudo[1335]: pam_unix(sudo:session): session closed for user root Oct 29 00:34:24.588000 audit[1335]: USER_END pid=1335 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.597061 kernel: audit: type=1130 audit(1761698064.586:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.597118 kernel: audit: type=1106 audit(1761698064.588:200): pid=1335 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.599853 kernel: audit: type=1104 audit(1761698064.588:201): pid=1335 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.588000 audit[1335]: CRED_DISP pid=1335 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.597238 sshd[1332]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:24.599814 systemd[1]: Started sshd@6-10.0.0.78:22-10.0.0.1:43248.service. Oct 29 00:34:24.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.78:22-10.0.0.1:43248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.602982 kernel: audit: type=1130 audit(1761698064.599:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.78:22-10.0.0.1:43248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.602000 audit[1332]: USER_END pid=1332 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:24.605670 systemd[1]: sshd@5-10.0.0.78:22-10.0.0.1:43242.service: Deactivated successfully. Oct 29 00:34:24.606332 systemd[1]: session-6.scope: Deactivated successfully. Oct 29 00:34:24.607293 kernel: audit: type=1106 audit(1761698064.602:203): pid=1332 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:24.607349 kernel: audit: type=1104 audit(1761698064.602:204): pid=1332 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:24.602000 audit[1332]: CRED_DISP pid=1332 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:24.608874 systemd-logind[1215]: Session 6 logged out. Waiting for processes to exit. Oct 29 00:34:24.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.78:22-10.0.0.1:43242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.610286 systemd-logind[1215]: Removed session 6. Oct 29 00:34:24.641000 audit[1361]: USER_ACCT pid=1361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:24.643302 sshd[1361]: Accepted publickey for core from 10.0.0.1 port 43248 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:24.642000 audit[1361]: CRED_ACQ pid=1361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:24.642000 audit[1361]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf5b2920 a2=3 a3=1 items=0 ppid=1 pid=1361 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:24.642000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:34:24.644534 sshd[1361]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:24.648947 systemd[1]: Started session-7.scope. Oct 29 00:34:24.649402 systemd-logind[1215]: New session 7 of user core. Oct 29 00:34:24.651000 audit[1361]: USER_START pid=1361 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:24.653000 audit[1364]: CRED_ACQ pid=1364 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:24.701000 audit[1365]: USER_ACCT pid=1365 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.701000 audit[1365]: CRED_REFR pid=1365 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.702211 sudo[1365]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 29 00:34:24.702434 sudo[1365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 29 00:34:24.703000 audit[1365]: USER_START pid=1365 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:24.750357 systemd[1]: Starting docker.service... Oct 29 00:34:24.811162 env[1377]: time="2025-10-29T00:34:24.809595990Z" level=info msg="Starting up" Oct 29 00:34:24.812491 env[1377]: time="2025-10-29T00:34:24.812388449Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 29 00:34:24.812590 env[1377]: time="2025-10-29T00:34:24.812567611Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 29 00:34:24.812664 env[1377]: time="2025-10-29T00:34:24.812646846Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 29 00:34:24.812716 env[1377]: time="2025-10-29T00:34:24.812702575Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 29 00:34:24.814865 env[1377]: time="2025-10-29T00:34:24.814837692Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 29 00:34:24.814865 env[1377]: time="2025-10-29T00:34:24.814860715Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 29 00:34:24.814982 env[1377]: time="2025-10-29T00:34:24.814875421Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 29 00:34:24.814982 env[1377]: time="2025-10-29T00:34:24.814884823Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 29 00:34:24.983732 env[1377]: time="2025-10-29T00:34:24.983685154Z" level=info msg="Loading containers: start." Oct 29 00:34:25.028000 audit[1410]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.028000 audit[1410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffea2afdf0 a2=0 a3=1 items=0 ppid=1377 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.028000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 29 00:34:25.029000 audit[1412]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.029000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffeece4690 a2=0 a3=1 items=0 ppid=1377 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.029000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 29 00:34:25.031000 audit[1414]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.031000 audit[1414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffffe41eb0 a2=0 a3=1 items=0 ppid=1377 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.031000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 29 00:34:25.033000 audit[1416]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.033000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc9ed1590 a2=0 a3=1 items=0 ppid=1377 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.033000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 29 00:34:25.036000 audit[1418]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.036000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffced3d930 a2=0 a3=1 items=0 ppid=1377 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.036000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 29 00:34:25.062000 audit[1423]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.062000 audit[1423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffeee41ae0 a2=0 a3=1 items=0 ppid=1377 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.062000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 29 00:34:25.071000 audit[1425]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.071000 audit[1425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdcd163d0 a2=0 a3=1 items=0 ppid=1377 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.071000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 29 00:34:25.073000 audit[1427]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.073000 audit[1427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffeff40e20 a2=0 a3=1 items=0 ppid=1377 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.073000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 29 00:34:25.075000 audit[1429]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.075000 audit[1429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffc942ada0 a2=0 a3=1 items=0 ppid=1377 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.075000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:25.084000 audit[1433]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.084000 audit[1433]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdfba0120 a2=0 a3=1 items=0 ppid=1377 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.084000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:25.093000 audit[1434]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.093000 audit[1434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe339c5b0 a2=0 a3=1 items=0 ppid=1377 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.093000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:25.104867 kernel: Initializing XFRM netlink socket Oct 29 00:34:25.127504 env[1377]: time="2025-10-29T00:34:25.127421625Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 29 00:34:25.142000 audit[1442]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.142000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffffac35cb0 a2=0 a3=1 items=0 ppid=1377 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.142000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 29 00:34:25.157000 audit[1445]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.157000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffcb4cd010 a2=0 a3=1 items=0 ppid=1377 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.157000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 29 00:34:25.160000 audit[1448]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.160000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd25ecd20 a2=0 a3=1 items=0 ppid=1377 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.160000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 29 00:34:25.162000 audit[1450]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.162000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc6dc0c00 a2=0 a3=1 items=0 ppid=1377 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.162000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 29 00:34:25.164000 audit[1452]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.164000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc01925f0 a2=0 a3=1 items=0 ppid=1377 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.164000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 29 00:34:25.167000 audit[1454]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.167000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffcfcce2d0 a2=0 a3=1 items=0 ppid=1377 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.167000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 29 00:34:25.169000 audit[1456]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.169000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff9e00340 a2=0 a3=1 items=0 ppid=1377 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.169000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 29 00:34:25.179000 audit[1459]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.179000 audit[1459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff522be90 a2=0 a3=1 items=0 ppid=1377 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.179000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 29 00:34:25.181000 audit[1461]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.181000 audit[1461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffdb64b020 a2=0 a3=1 items=0 ppid=1377 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.181000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 29 00:34:25.183000 audit[1463]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1463 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.183000 audit[1463]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffff4d1ec50 a2=0 a3=1 items=0 ppid=1377 pid=1463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.183000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 29 00:34:25.185000 audit[1465]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1465 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.185000 audit[1465]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe5207e40 a2=0 a3=1 items=0 ppid=1377 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.185000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 29 00:34:25.186911 systemd-networkd[1049]: docker0: Link UP Oct 29 00:34:25.204000 audit[1469]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1469 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.204000 audit[1469]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcdfe7200 a2=0 a3=1 items=0 ppid=1377 pid=1469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.204000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:25.214000 audit[1470]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1470 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:25.214000 audit[1470]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffda81b40 a2=0 a3=1 items=0 ppid=1377 pid=1470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.214000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:25.216166 env[1377]: time="2025-10-29T00:34:25.216122386Z" level=info msg="Loading containers: done." Oct 29 00:34:25.230378 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2986808593-merged.mount: Deactivated successfully. Oct 29 00:34:25.238204 env[1377]: time="2025-10-29T00:34:25.238146976Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 29 00:34:25.238339 env[1377]: time="2025-10-29T00:34:25.238329451Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 29 00:34:25.238460 env[1377]: time="2025-10-29T00:34:25.238423058Z" level=info msg="Daemon has completed initialization" Oct 29 00:34:25.253580 systemd[1]: Started docker.service. Oct 29 00:34:25.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.261079 env[1377]: time="2025-10-29T00:34:25.261028845Z" level=info msg="API listen on /run/docker.sock" Oct 29 00:34:25.917883 env[1227]: time="2025-10-29T00:34:25.917524521Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\"" Oct 29 00:34:26.464018 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount18401934.mount: Deactivated successfully. Oct 29 00:34:28.486645 env[1227]: time="2025-10-29T00:34:28.486590819Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:28.490120 env[1227]: time="2025-10-29T00:34:28.490082398Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a7fd297b49102b08dc3d8d4fd7f1538bcf21d3131eae8bf62ba26ce3283237f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:28.492377 env[1227]: time="2025-10-29T00:34:28.492345186Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:28.494358 env[1227]: time="2025-10-29T00:34:28.494330324Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:1b9c6c00bc1fe86860e72efb8e4148f9e436a132eba4ca636ca4f48d61d6dfb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:28.495121 env[1227]: time="2025-10-29T00:34:28.495091766Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\" returns image reference \"sha256:6a7fd297b49102b08dc3d8d4fd7f1538bcf21d3131eae8bf62ba26ce3283237f\"" Oct 29 00:34:28.496900 env[1227]: time="2025-10-29T00:34:28.496871123Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\"" Oct 29 00:34:29.923796 env[1227]: time="2025-10-29T00:34:29.923740910Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:29.924883 env[1227]: time="2025-10-29T00:34:29.924851385Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2dd4c25a937008b7b8a6cdca70d816403b5078b51550926721b7a7762139cd23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:29.927400 env[1227]: time="2025-10-29T00:34:29.927365048Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:29.929613 env[1227]: time="2025-10-29T00:34:29.929585638Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:1082a6ab67fb46397314dd36b36cb197ba4a4c5365033e9ad22bc7edaaaabd5c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:29.930299 env[1227]: time="2025-10-29T00:34:29.930259348Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\" returns image reference \"sha256:2dd4c25a937008b7b8a6cdca70d816403b5078b51550926721b7a7762139cd23\"" Oct 29 00:34:29.930827 env[1227]: time="2025-10-29T00:34:29.930795822Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\"" Oct 29 00:34:30.640832 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 29 00:34:30.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:30.641014 systemd[1]: Stopped kubelet.service. Oct 29 00:34:30.642526 systemd[1]: Starting kubelet.service... Oct 29 00:34:30.644165 kernel: kauditd_printk_skb: 84 callbacks suppressed Oct 29 00:34:30.644227 kernel: audit: type=1130 audit(1761698070.640:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:30.644247 kernel: audit: type=1131 audit(1761698070.640:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:30.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:30.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:30.833222 systemd[1]: Started kubelet.service. Oct 29 00:34:30.836846 kernel: audit: type=1130 audit(1761698070.832:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:30.902571 kubelet[1514]: E1029 00:34:30.902212 1514 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 29 00:34:30.908838 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 29 00:34:30.908974 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 29 00:34:30.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 29 00:34:30.912838 kernel: audit: type=1131 audit(1761698070.908:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 29 00:34:31.390787 env[1227]: time="2025-10-29T00:34:31.390669016Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:31.392224 env[1227]: time="2025-10-29T00:34:31.392188614Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e600beaed8620718e0650dd2721266869ce1d737488c004a869333273e6ec15,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:31.394906 env[1227]: time="2025-10-29T00:34:31.394875710Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:31.396046 env[1227]: time="2025-10-29T00:34:31.396020848Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:3e7b57c9d9f06b77f0064e5be7f3df61e0151101160acd5fdecce911df28a189,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:31.396940 env[1227]: time="2025-10-29T00:34:31.396910697Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\" returns image reference \"sha256:5e600beaed8620718e0650dd2721266869ce1d737488c004a869333273e6ec15\"" Oct 29 00:34:31.397692 env[1227]: time="2025-10-29T00:34:31.397663544Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\"" Oct 29 00:34:32.557604 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount404345827.mount: Deactivated successfully. Oct 29 00:34:33.314153 env[1227]: time="2025-10-29T00:34:33.314106752Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:33.387491 env[1227]: time="2025-10-29T00:34:33.387448884Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:021a8d45ab0c346664e47d95595ff5180ce90a22a681ea27904c65ae90788e70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:33.416137 env[1227]: time="2025-10-29T00:34:33.416073928Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:33.430591 env[1227]: time="2025-10-29T00:34:33.430528722Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:71445ec84ad98bd52a7784865a9d31b1b50b56092d3f7699edc39eefd71befe1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:33.431193 env[1227]: time="2025-10-29T00:34:33.431145034Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\" returns image reference \"sha256:021a8d45ab0c346664e47d95595ff5180ce90a22a681ea27904c65ae90788e70\"" Oct 29 00:34:33.431994 env[1227]: time="2025-10-29T00:34:33.431964741Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Oct 29 00:34:34.002641 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2183948431.mount: Deactivated successfully. Oct 29 00:34:35.071018 env[1227]: time="2025-10-29T00:34:35.070968003Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:35.072611 env[1227]: time="2025-10-29T00:34:35.072582873Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:35.074285 env[1227]: time="2025-10-29T00:34:35.074253720Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:35.076128 env[1227]: time="2025-10-29T00:34:35.076101230Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:35.077085 env[1227]: time="2025-10-29T00:34:35.077036357Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Oct 29 00:34:35.077559 env[1227]: time="2025-10-29T00:34:35.077537235Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Oct 29 00:34:35.489052 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3058294534.mount: Deactivated successfully. Oct 29 00:34:35.496489 env[1227]: time="2025-10-29T00:34:35.496389778Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:35.498539 env[1227]: time="2025-10-29T00:34:35.498494714Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:35.500384 env[1227]: time="2025-10-29T00:34:35.500337459Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:35.501744 env[1227]: time="2025-10-29T00:34:35.501697986Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:35.502953 env[1227]: time="2025-10-29T00:34:35.502908278Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Oct 29 00:34:35.503443 env[1227]: time="2025-10-29T00:34:35.503406513Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Oct 29 00:34:35.955381 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2448839503.mount: Deactivated successfully. Oct 29 00:34:38.948787 env[1227]: time="2025-10-29T00:34:38.948724713Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:38.950531 env[1227]: time="2025-10-29T00:34:38.950486013Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:38.958152 env[1227]: time="2025-10-29T00:34:38.957508599Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:38.959527 env[1227]: time="2025-10-29T00:34:38.959501620Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:38.962669 env[1227]: time="2025-10-29T00:34:38.962630948Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Oct 29 00:34:41.159948 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 29 00:34:41.160115 systemd[1]: Stopped kubelet.service. Oct 29 00:34:41.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:41.161503 systemd[1]: Starting kubelet.service... Oct 29 00:34:41.162833 kernel: audit: type=1130 audit(1761698081.159:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:41.162890 kernel: audit: type=1131 audit(1761698081.159:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:41.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:41.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:41.255380 systemd[1]: Started kubelet.service. Oct 29 00:34:41.258851 kernel: audit: type=1130 audit(1761698081.254:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:41.285604 kubelet[1549]: E1029 00:34:41.285552 1549 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 29 00:34:41.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 29 00:34:41.287638 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 29 00:34:41.287758 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 29 00:34:41.290847 kernel: audit: type=1131 audit(1761698081.287:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 29 00:34:46.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.014265 systemd[1]: Stopped kubelet.service. Oct 29 00:34:46.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.018423 systemd[1]: Starting kubelet.service... Oct 29 00:34:46.021618 kernel: audit: type=1130 audit(1761698086.012:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.021686 kernel: audit: type=1131 audit(1761698086.012:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.048311 systemd[1]: Reloading. Oct 29 00:34:46.118442 /usr/lib/systemd/system-generators/torcx-generator[1583]: time="2025-10-29T00:34:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 29 00:34:46.118477 /usr/lib/systemd/system-generators/torcx-generator[1583]: time="2025-10-29T00:34:46Z" level=info msg="torcx already run" Oct 29 00:34:46.233629 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 29 00:34:46.233796 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 29 00:34:46.249175 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 29 00:34:46.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303588 kernel: audit: type=1400 audit(1761698086.297:249): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303648 kernel: audit: type=1400 audit(1761698086.297:250): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303669 kernel: audit: type=1400 audit(1761698086.297:251): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308177 kernel: audit: type=1400 audit(1761698086.297:252): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308245 kernel: audit: type=1400 audit(1761698086.297:253): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.312860 kernel: audit: type=1400 audit(1761698086.297:254): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.312919 kernel: audit: type=1400 audit(1761698086.297:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.315706 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 29 00:34:46.315770 kernel: audit: type=1400 audit(1761698086.297:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318101 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 29 00:34:46.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.301000 audit: BPF prog-id=40 op=LOAD Oct 29 00:34:46.301000 audit: BPF prog-id=24 op=UNLOAD Oct 29 00:34:46.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303000 audit: BPF prog-id=41 op=LOAD Oct 29 00:34:46.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit: BPF prog-id=42 op=LOAD Oct 29 00:34:46.305000 audit: BPF prog-id=25 op=UNLOAD Oct 29 00:34:46.305000 audit: BPF prog-id=26 op=UNLOAD Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit: BPF prog-id=43 op=LOAD Oct 29 00:34:46.308000 audit: BPF prog-id=27 op=UNLOAD Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit: BPF prog-id=44 op=LOAD Oct 29 00:34:46.310000 audit: BPF prog-id=33 op=UNLOAD Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.312000 audit: BPF prog-id=45 op=LOAD Oct 29 00:34:46.312000 audit: BPF prog-id=35 op=UNLOAD Oct 29 00:34:46.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.317000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit: BPF prog-id=46 op=LOAD Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit: BPF prog-id=47 op=LOAD Oct 29 00:34:46.318000 audit: BPF prog-id=36 op=UNLOAD Oct 29 00:34:46.318000 audit: BPF prog-id=37 op=UNLOAD Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit: BPF prog-id=48 op=LOAD Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.318000 audit: BPF prog-id=49 op=LOAD Oct 29 00:34:46.318000 audit: BPF prog-id=28 op=UNLOAD Oct 29 00:34:46.318000 audit: BPF prog-id=29 op=UNLOAD Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.320000 audit: BPF prog-id=50 op=LOAD Oct 29 00:34:46.320000 audit: BPF prog-id=38 op=UNLOAD Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.321000 audit: BPF prog-id=51 op=LOAD Oct 29 00:34:46.321000 audit: BPF prog-id=34 op=UNLOAD Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit: BPF prog-id=52 op=LOAD Oct 29 00:34:46.322000 audit: BPF prog-id=30 op=UNLOAD Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit: BPF prog-id=53 op=LOAD Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.322000 audit: BPF prog-id=54 op=LOAD Oct 29 00:34:46.322000 audit: BPF prog-id=31 op=UNLOAD Oct 29 00:34:46.322000 audit: BPF prog-id=32 op=UNLOAD Oct 29 00:34:46.339520 systemd[1]: Started kubelet.service. Oct 29 00:34:46.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.340868 systemd[1]: Stopping kubelet.service... Oct 29 00:34:46.341101 systemd[1]: kubelet.service: Deactivated successfully. Oct 29 00:34:46.341265 systemd[1]: Stopped kubelet.service. Oct 29 00:34:46.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.342807 systemd[1]: Starting kubelet.service... Oct 29 00:34:46.443976 systemd[1]: Started kubelet.service. Oct 29 00:34:46.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.498982 kubelet[1628]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 29 00:34:46.498982 kubelet[1628]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Oct 29 00:34:46.498982 kubelet[1628]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 29 00:34:46.499370 kubelet[1628]: I1029 00:34:46.499024 1628 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 29 00:34:47.253732 kubelet[1628]: I1029 00:34:47.253682 1628 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Oct 29 00:34:47.253732 kubelet[1628]: I1029 00:34:47.253716 1628 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 29 00:34:47.253960 kubelet[1628]: I1029 00:34:47.253943 1628 server.go:956] "Client rotation is on, will bootstrap in background" Oct 29 00:34:47.282148 kubelet[1628]: I1029 00:34:47.282105 1628 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 29 00:34:47.282363 kubelet[1628]: E1029 00:34:47.282335 1628 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.78:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.78:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Oct 29 00:34:47.292069 kubelet[1628]: E1029 00:34:47.292028 1628 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Oct 29 00:34:47.292211 kubelet[1628]: I1029 00:34:47.292198 1628 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Oct 29 00:34:47.294616 kubelet[1628]: I1029 00:34:47.294594 1628 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 29 00:34:47.295775 kubelet[1628]: I1029 00:34:47.295729 1628 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 29 00:34:47.295927 kubelet[1628]: I1029 00:34:47.295769 1628 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Oct 29 00:34:47.296012 kubelet[1628]: I1029 00:34:47.295993 1628 topology_manager.go:138] "Creating topology manager with none policy" Oct 29 00:34:47.296012 kubelet[1628]: I1029 00:34:47.296002 1628 container_manager_linux.go:303] "Creating device plugin manager" Oct 29 00:34:47.296213 kubelet[1628]: I1029 00:34:47.296201 1628 state_mem.go:36] "Initialized new in-memory state store" Oct 29 00:34:47.299347 kubelet[1628]: I1029 00:34:47.299319 1628 kubelet.go:480] "Attempting to sync node with API server" Oct 29 00:34:47.299347 kubelet[1628]: I1029 00:34:47.299344 1628 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 29 00:34:47.299453 kubelet[1628]: I1029 00:34:47.299367 1628 kubelet.go:386] "Adding apiserver pod source" Oct 29 00:34:47.302042 kubelet[1628]: I1029 00:34:47.302006 1628 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 29 00:34:47.303041 kubelet[1628]: I1029 00:34:47.303016 1628 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 29 00:34:47.303706 kubelet[1628]: I1029 00:34:47.303678 1628 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Oct 29 00:34:47.303811 kubelet[1628]: W1029 00:34:47.303795 1628 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 29 00:34:47.305953 kubelet[1628]: I1029 00:34:47.305898 1628 watchdog_linux.go:99] "Systemd watchdog is not enabled" Oct 29 00:34:47.305953 kubelet[1628]: I1029 00:34:47.305935 1628 server.go:1289] "Started kubelet" Oct 29 00:34:47.320040 kubelet[1628]: E1029 00:34:47.319999 1628 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.78:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.78:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Oct 29 00:34:47.320143 kubelet[1628]: E1029 00:34:47.320098 1628 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.78:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.78:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Oct 29 00:34:47.320187 kubelet[1628]: I1029 00:34:47.320145 1628 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Oct 29 00:34:47.320482 kubelet[1628]: I1029 00:34:47.320454 1628 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 29 00:34:47.320534 kubelet[1628]: I1029 00:34:47.320517 1628 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Oct 29 00:34:47.319000 audit[1628]: AVC avc: denied { mac_admin } for pid=1628 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:47.319000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:47.319000 audit[1628]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000636bd0 a1=40006326c0 a2=4000636ba0 a3=25 items=0 ppid=1 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.319000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:47.319000 audit[1628]: AVC avc: denied { mac_admin } for pid=1628 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:47.319000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:47.319000 audit[1628]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40007baa80 a1=40006326d8 a2=4000636c60 a3=25 items=0 ppid=1 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.319000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:47.321021 kubelet[1628]: I1029 00:34:47.320708 1628 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Oct 29 00:34:47.321021 kubelet[1628]: I1029 00:34:47.320743 1628 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Oct 29 00:34:47.321021 kubelet[1628]: I1029 00:34:47.320806 1628 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 29 00:34:47.321413 kubelet[1628]: I1029 00:34:47.321395 1628 server.go:317] "Adding debug handlers to kubelet server" Oct 29 00:34:47.322777 kubelet[1628]: I1029 00:34:47.322752 1628 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Oct 29 00:34:47.326000 audit[1645]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.326000 audit[1645]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd1cf11a0 a2=0 a3=1 items=0 ppid=1628 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.326000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 29 00:34:47.328371 kubelet[1628]: E1029 00:34:47.328163 1628 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:47.328371 kubelet[1628]: I1029 00:34:47.328238 1628 volume_manager.go:297] "Starting Kubelet Volume Manager" Oct 29 00:34:47.328636 kubelet[1628]: I1029 00:34:47.328458 1628 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Oct 29 00:34:47.328636 kubelet[1628]: I1029 00:34:47.328515 1628 reconciler.go:26] "Reconciler: start to sync state" Oct 29 00:34:47.328830 kubelet[1628]: E1029 00:34:47.328789 1628 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.78:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.78:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Oct 29 00:34:47.329072 kubelet[1628]: E1029 00:34:47.329039 1628 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.78:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.78:6443: connect: connection refused" interval="200ms" Oct 29 00:34:47.329779 kubelet[1628]: E1029 00:34:47.327682 1628 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.78:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.78:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1872cf13975a9f1b default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-10-29 00:34:47.305912091 +0000 UTC m=+0.851299051,LastTimestamp:2025-10-29 00:34:47.305912091 +0000 UTC m=+0.851299051,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Oct 29 00:34:47.330142 kubelet[1628]: I1029 00:34:47.330121 1628 factory.go:223] Registration of the systemd container factory successfully Oct 29 00:34:47.330249 kubelet[1628]: I1029 00:34:47.330230 1628 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Oct 29 00:34:47.329000 audit[1646]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.329000 audit[1646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffce68e70 a2=0 a3=1 items=0 ppid=1628 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.329000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 29 00:34:47.331586 kubelet[1628]: E1029 00:34:47.331555 1628 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 29 00:34:47.332060 kubelet[1628]: I1029 00:34:47.332038 1628 factory.go:223] Registration of the containerd container factory successfully Oct 29 00:34:47.331000 audit[1648]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.331000 audit[1648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff28af400 a2=0 a3=1 items=0 ppid=1628 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.331000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 29 00:34:47.333000 audit[1650]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.333000 audit[1650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcc536ac0 a2=0 a3=1 items=0 ppid=1628 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.333000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 29 00:34:47.341000 audit[1658]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1658 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.341000 audit[1658]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff05d1f10 a2=0 a3=1 items=0 ppid=1628 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.341000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 29 00:34:47.342690 kubelet[1628]: I1029 00:34:47.342653 1628 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Oct 29 00:34:47.342000 audit[1660]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1660 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.342000 audit[1660]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffebf73f90 a2=0 a3=1 items=0 ppid=1628 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.342000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 29 00:34:47.342000 audit[1659]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1659 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:34:47.342000 audit[1659]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdc045b30 a2=0 a3=1 items=0 ppid=1628 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.342000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 29 00:34:47.344426 kubelet[1628]: I1029 00:34:47.343795 1628 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Oct 29 00:34:47.344426 kubelet[1628]: I1029 00:34:47.343828 1628 status_manager.go:230] "Starting to sync pod status with apiserver" Oct 29 00:34:47.344426 kubelet[1628]: I1029 00:34:47.343846 1628 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Oct 29 00:34:47.344426 kubelet[1628]: I1029 00:34:47.343853 1628 kubelet.go:2436] "Starting kubelet main sync loop" Oct 29 00:34:47.344426 kubelet[1628]: E1029 00:34:47.343890 1628 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 29 00:34:47.344426 kubelet[1628]: E1029 00:34:47.344418 1628 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.78:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.78:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Oct 29 00:34:47.344000 audit[1662]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1662 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.344000 audit[1662]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcfe98e80 a2=0 a3=1 items=0 ppid=1628 pid=1662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.344000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 29 00:34:47.344000 audit[1663]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1663 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:34:47.344000 audit[1663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff03f6990 a2=0 a3=1 items=0 ppid=1628 pid=1663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.344000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 29 00:34:47.345000 audit[1665]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1665 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.345000 audit[1665]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd7242930 a2=0 a3=1 items=0 ppid=1628 pid=1665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.345000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 29 00:34:47.347291 kubelet[1628]: I1029 00:34:47.347275 1628 cpu_manager.go:221] "Starting CPU manager" policy="none" Oct 29 00:34:47.346000 audit[1666]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1666 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:34:47.346000 audit[1666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe5465010 a2=0 a3=1 items=0 ppid=1628 pid=1666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.346000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 29 00:34:47.347491 kubelet[1628]: I1029 00:34:47.347478 1628 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Oct 29 00:34:47.347558 kubelet[1628]: I1029 00:34:47.347549 1628 state_mem.go:36] "Initialized new in-memory state store" Oct 29 00:34:47.347000 audit[1667]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1667 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:34:47.347000 audit[1667]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc28cf880 a2=0 a3=1 items=0 ppid=1628 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.347000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 29 00:34:47.420758 kubelet[1628]: I1029 00:34:47.420728 1628 policy_none.go:49] "None policy: Start" Oct 29 00:34:47.420956 kubelet[1628]: I1029 00:34:47.420945 1628 memory_manager.go:186] "Starting memorymanager" policy="None" Oct 29 00:34:47.421023 kubelet[1628]: I1029 00:34:47.421014 1628 state_mem.go:35] "Initializing new in-memory state store" Oct 29 00:34:47.426012 systemd[1]: Created slice kubepods.slice. Oct 29 00:34:47.428468 kubelet[1628]: E1029 00:34:47.428451 1628 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:47.430018 systemd[1]: Created slice kubepods-burstable.slice. Oct 29 00:34:47.432256 systemd[1]: Created slice kubepods-besteffort.slice. Oct 29 00:34:47.444016 kubelet[1628]: E1029 00:34:47.443982 1628 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 29 00:34:47.445617 kubelet[1628]: E1029 00:34:47.445599 1628 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Oct 29 00:34:47.444000 audit[1628]: AVC avc: denied { mac_admin } for pid=1628 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:47.444000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:47.444000 audit[1628]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ef5ce0 a1=4000f4c4b0 a2=4000ef5cb0 a3=25 items=0 ppid=1 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.444000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:47.445862 kubelet[1628]: E1029 00:34:47.445685 1628 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Oct 29 00:34:47.445862 kubelet[1628]: I1029 00:34:47.445787 1628 eviction_manager.go:189] "Eviction manager: starting control loop" Oct 29 00:34:47.445862 kubelet[1628]: I1029 00:34:47.445800 1628 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Oct 29 00:34:47.446675 kubelet[1628]: E1029 00:34:47.446652 1628 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Oct 29 00:34:47.446726 kubelet[1628]: E1029 00:34:47.446689 1628 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 29 00:34:47.446794 kubelet[1628]: I1029 00:34:47.446781 1628 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 29 00:34:47.530872 kubelet[1628]: E1029 00:34:47.530070 1628 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.78:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.78:6443: connect: connection refused" interval="400ms" Oct 29 00:34:47.547125 kubelet[1628]: I1029 00:34:47.547081 1628 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:47.547565 kubelet[1628]: E1029 00:34:47.547542 1628 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.78:6443/api/v1/nodes\": dial tcp 10.0.0.78:6443: connect: connection refused" node="localhost" Oct 29 00:34:47.659590 systemd[1]: Created slice kubepods-burstable-pod90123c22c5352b621947e72760ab7908.slice. Oct 29 00:34:47.672853 kubelet[1628]: E1029 00:34:47.672766 1628 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:47.678047 systemd[1]: Created slice kubepods-burstable-pod20c890a246d840d308022312da9174cb.slice. Oct 29 00:34:47.679557 kubelet[1628]: E1029 00:34:47.679523 1628 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:47.689140 systemd[1]: Created slice kubepods-burstable-podd13d96f639b65e57f439b4396b605564.slice. Oct 29 00:34:47.691703 kubelet[1628]: E1029 00:34:47.691684 1628 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:47.731031 kubelet[1628]: I1029 00:34:47.730997 1628 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.731031 kubelet[1628]: I1029 00:34:47.731032 1628 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.731161 kubelet[1628]: I1029 00:34:47.731051 1628 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.731161 kubelet[1628]: I1029 00:34:47.731066 1628 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/90123c22c5352b621947e72760ab7908-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"90123c22c5352b621947e72760ab7908\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:47.731161 kubelet[1628]: I1029 00:34:47.731081 1628 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.731161 kubelet[1628]: I1029 00:34:47.731096 1628 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.731161 kubelet[1628]: I1029 00:34:47.731109 1628 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d13d96f639b65e57f439b4396b605564-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d13d96f639b65e57f439b4396b605564\") " pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:47.731305 kubelet[1628]: I1029 00:34:47.731123 1628 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/90123c22c5352b621947e72760ab7908-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"90123c22c5352b621947e72760ab7908\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:47.731305 kubelet[1628]: I1029 00:34:47.731141 1628 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/90123c22c5352b621947e72760ab7908-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"90123c22c5352b621947e72760ab7908\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:47.734975 kubelet[1628]: E1029 00:34:47.734797 1628 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.78:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.78:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1872cf13975a9f1b default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-10-29 00:34:47.305912091 +0000 UTC m=+0.851299051,LastTimestamp:2025-10-29 00:34:47.305912091 +0000 UTC m=+0.851299051,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Oct 29 00:34:47.749348 kubelet[1628]: I1029 00:34:47.748983 1628 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:47.749348 kubelet[1628]: E1029 00:34:47.749247 1628 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.78:6443/api/v1/nodes\": dial tcp 10.0.0.78:6443: connect: connection refused" node="localhost" Oct 29 00:34:47.931569 kubelet[1628]: E1029 00:34:47.931452 1628 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.78:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.78:6443: connect: connection refused" interval="800ms" Oct 29 00:34:47.973889 kubelet[1628]: E1029 00:34:47.973803 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:47.975275 env[1227]: time="2025-10-29T00:34:47.974608982Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:90123c22c5352b621947e72760ab7908,Namespace:kube-system,Attempt:0,}" Oct 29 00:34:47.980045 kubelet[1628]: E1029 00:34:47.980021 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:47.980395 env[1227]: time="2025-10-29T00:34:47.980364062Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:20c890a246d840d308022312da9174cb,Namespace:kube-system,Attempt:0,}" Oct 29 00:34:47.992036 kubelet[1628]: E1029 00:34:47.992005 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:47.993267 env[1227]: time="2025-10-29T00:34:47.993232904Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d13d96f639b65e57f439b4396b605564,Namespace:kube-system,Attempt:0,}" Oct 29 00:34:48.151718 kubelet[1628]: I1029 00:34:48.151369 1628 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:48.151718 kubelet[1628]: E1029 00:34:48.151661 1628 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.78:6443/api/v1/nodes\": dial tcp 10.0.0.78:6443: connect: connection refused" node="localhost" Oct 29 00:34:48.305977 kubelet[1628]: E1029 00:34:48.305868 1628 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.78:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.78:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Oct 29 00:34:48.501286 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount923326696.mount: Deactivated successfully. Oct 29 00:34:48.508154 env[1227]: time="2025-10-29T00:34:48.508100765Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.512043 env[1227]: time="2025-10-29T00:34:48.512008998Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.514451 env[1227]: time="2025-10-29T00:34:48.514410636Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.517567 env[1227]: time="2025-10-29T00:34:48.517530645Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.520393 env[1227]: time="2025-10-29T00:34:48.520353279Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.524241 env[1227]: time="2025-10-29T00:34:48.524206742Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.526060 env[1227]: time="2025-10-29T00:34:48.526023954Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.527976 env[1227]: time="2025-10-29T00:34:48.527938143Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.531260 env[1227]: time="2025-10-29T00:34:48.531233944Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.535537 env[1227]: time="2025-10-29T00:34:48.535478838Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.537540 env[1227]: time="2025-10-29T00:34:48.537502727Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.549653 env[1227]: time="2025-10-29T00:34:48.549604934Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.570476 env[1227]: time="2025-10-29T00:34:48.570261821Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:34:48.570476 env[1227]: time="2025-10-29T00:34:48.570320872Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:34:48.570476 env[1227]: time="2025-10-29T00:34:48.570387284Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:34:48.570861 env[1227]: time="2025-10-29T00:34:48.570647852Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:34:48.570861 env[1227]: time="2025-10-29T00:34:48.570675577Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:34:48.570941 env[1227]: time="2025-10-29T00:34:48.570414289Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:34:48.571122 env[1227]: time="2025-10-29T00:34:48.571076530Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1b1105188445cf63f9f59bd6548c87ab5af63613305bf990e0226cc7b82b1084 pid=1692 runtime=io.containerd.runc.v2 Oct 29 00:34:48.571182 env[1227]: time="2025-10-29T00:34:48.571060607Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c6459d26372be8cca25a53aeacad32b784308b4115e09d080fc1dcf5e32a11d7 pid=1694 runtime=io.containerd.runc.v2 Oct 29 00:34:48.572196 env[1227]: time="2025-10-29T00:34:48.571962332Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:34:48.572196 env[1227]: time="2025-10-29T00:34:48.572035225Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:34:48.572196 env[1227]: time="2025-10-29T00:34:48.572046747Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:34:48.572862 env[1227]: time="2025-10-29T00:34:48.572682303Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0b2102afe24c528beb78d819eab94ec94aa0111ff54cc3bc48001b4db8b4802e pid=1693 runtime=io.containerd.runc.v2 Oct 29 00:34:48.587087 systemd[1]: Started cri-containerd-c6459d26372be8cca25a53aeacad32b784308b4115e09d080fc1dcf5e32a11d7.scope. Oct 29 00:34:48.593858 systemd[1]: Started cri-containerd-0b2102afe24c528beb78d819eab94ec94aa0111ff54cc3bc48001b4db8b4802e.scope. Oct 29 00:34:48.594783 systemd[1]: Started cri-containerd-1b1105188445cf63f9f59bd6548c87ab5af63613305bf990e0226cc7b82b1084.scope. Oct 29 00:34:48.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit: BPF prog-id=55 op=LOAD Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1693 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323130326166653234633532386265623738643831396561623934 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1693 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323130326166653234633532386265623738643831396561623934 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit: BPF prog-id=56 op=LOAD Oct 29 00:34:48.621000 audit[1722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1693 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323130326166653234633532386265623738643831396561623934 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit: BPF prog-id=57 op=LOAD Oct 29 00:34:48.621000 audit[1722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1693 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323130326166653234633532386265623738643831396561623934 Oct 29 00:34:48.621000 audit: BPF prog-id=57 op=UNLOAD Oct 29 00:34:48.621000 audit: BPF prog-id=56 op=UNLOAD Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.621000 audit: BPF prog-id=58 op=LOAD Oct 29 00:34:48.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.622000 audit: BPF prog-id=59 op=LOAD Oct 29 00:34:48.621000 audit[1722]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1693 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323130326166653234633532386265623738643831396561623934 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1692 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313130353138383434356366363366396635396264363534386338 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1692 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313130353138383434356366363366396635396264363534386338 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.624000 audit: BPF prog-id=60 op=LOAD Oct 29 00:34:48.624000 audit[1723]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1692 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313130353138383434356366363366396635396264363534386338 Oct 29 00:34:48.625000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.625000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.625000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.625000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.625000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.625000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.625000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.625000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.625000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.625000 audit: BPF prog-id=61 op=LOAD Oct 29 00:34:48.625000 audit[1723]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1692 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313130353138383434356366363366396635396264363534386338 Oct 29 00:34:48.625000 audit: BPF prog-id=61 op=UNLOAD Oct 29 00:34:48.626000 audit: BPF prog-id=60 op=UNLOAD Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { perfmon } for pid=1723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit[1723]: AVC avc: denied { bpf } for pid=1723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.626000 audit: BPF prog-id=62 op=LOAD Oct 29 00:34:48.626000 audit[1723]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1692 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313130353138383434356366363366396635396264363534386338 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.629000 audit: BPF prog-id=63 op=LOAD Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1694 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336343539643236333732626538636361323561353361656163616433 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1694 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336343539643236333732626538636361323561353361656163616433 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit: BPF prog-id=64 op=LOAD Oct 29 00:34:48.630000 audit[1721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1694 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336343539643236333732626538636361323561353361656163616433 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit: BPF prog-id=65 op=LOAD Oct 29 00:34:48.630000 audit[1721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1694 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336343539643236333732626538636361323561353361656163616433 Oct 29 00:34:48.630000 audit: BPF prog-id=65 op=UNLOAD Oct 29 00:34:48.630000 audit: BPF prog-id=64 op=UNLOAD Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.630000 audit: BPF prog-id=66 op=LOAD Oct 29 00:34:48.630000 audit[1721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1694 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336343539643236333732626538636361323561353361656163616433 Oct 29 00:34:48.651851 env[1227]: time="2025-10-29T00:34:48.651708875Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:20c890a246d840d308022312da9174cb,Namespace:kube-system,Attempt:0,} returns sandbox id \"c6459d26372be8cca25a53aeacad32b784308b4115e09d080fc1dcf5e32a11d7\"" Oct 29 00:34:48.654271 kubelet[1628]: E1029 00:34:48.654239 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:48.654632 env[1227]: time="2025-10-29T00:34:48.654594802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d13d96f639b65e57f439b4396b605564,Namespace:kube-system,Attempt:0,} returns sandbox id \"0b2102afe24c528beb78d819eab94ec94aa0111ff54cc3bc48001b4db8b4802e\"" Oct 29 00:34:48.655090 kubelet[1628]: E1029 00:34:48.655067 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:48.659290 env[1227]: time="2025-10-29T00:34:48.659257772Z" level=info msg="CreateContainer within sandbox \"0b2102afe24c528beb78d819eab94ec94aa0111ff54cc3bc48001b4db8b4802e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 29 00:34:48.659551 env[1227]: time="2025-10-29T00:34:48.659523341Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:90123c22c5352b621947e72760ab7908,Namespace:kube-system,Attempt:0,} returns sandbox id \"1b1105188445cf63f9f59bd6548c87ab5af63613305bf990e0226cc7b82b1084\"" Oct 29 00:34:48.660345 env[1227]: time="2025-10-29T00:34:48.660300482Z" level=info msg="CreateContainer within sandbox \"c6459d26372be8cca25a53aeacad32b784308b4115e09d080fc1dcf5e32a11d7\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 29 00:34:48.660559 kubelet[1628]: E1029 00:34:48.660537 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:48.664022 env[1227]: time="2025-10-29T00:34:48.663974832Z" level=info msg="CreateContainer within sandbox \"1b1105188445cf63f9f59bd6548c87ab5af63613305bf990e0226cc7b82b1084\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 29 00:34:48.670849 kubelet[1628]: E1029 00:34:48.670781 1628 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.78:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.78:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Oct 29 00:34:48.677346 env[1227]: time="2025-10-29T00:34:48.677294101Z" level=info msg="CreateContainer within sandbox \"c6459d26372be8cca25a53aeacad32b784308b4115e09d080fc1dcf5e32a11d7\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"8a60f80cc6c0b3488ece20bf8429931c0b290281cd514ef39c821705589ac0d8\"" Oct 29 00:34:48.678118 env[1227]: time="2025-10-29T00:34:48.678066642Z" level=info msg="StartContainer for \"8a60f80cc6c0b3488ece20bf8429931c0b290281cd514ef39c821705589ac0d8\"" Oct 29 00:34:48.680573 env[1227]: time="2025-10-29T00:34:48.680518930Z" level=info msg="CreateContainer within sandbox \"1b1105188445cf63f9f59bd6548c87ab5af63613305bf990e0226cc7b82b1084\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e67976f58162abb551edd04643e0b0987ef6b73253c745b837b8478821dad11f\"" Oct 29 00:34:48.681104 env[1227]: time="2025-10-29T00:34:48.681034304Z" level=info msg="StartContainer for \"e67976f58162abb551edd04643e0b0987ef6b73253c745b837b8478821dad11f\"" Oct 29 00:34:48.681251 env[1227]: time="2025-10-29T00:34:48.681211096Z" level=info msg="CreateContainer within sandbox \"0b2102afe24c528beb78d819eab94ec94aa0111ff54cc3bc48001b4db8b4802e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e19ffc100dcff681010d49fe56541ec2102e576381238610457090f267dfed6b\"" Oct 29 00:34:48.681590 env[1227]: time="2025-10-29T00:34:48.681560280Z" level=info msg="StartContainer for \"e19ffc100dcff681010d49fe56541ec2102e576381238610457090f267dfed6b\"" Oct 29 00:34:48.695700 systemd[1]: Started cri-containerd-8a60f80cc6c0b3488ece20bf8429931c0b290281cd514ef39c821705589ac0d8.scope. Oct 29 00:34:48.697903 systemd[1]: Started cri-containerd-e67976f58162abb551edd04643e0b0987ef6b73253c745b837b8478821dad11f.scope. Oct 29 00:34:48.709716 systemd[1]: Started cri-containerd-e19ffc100dcff681010d49fe56541ec2102e576381238610457090f267dfed6b.scope. Oct 29 00:34:48.721201 kubelet[1628]: E1029 00:34:48.721160 1628 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.78:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.78:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.721000 audit: BPF prog-id=67 op=LOAD Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c9b38 a2=10 a3=0 items=0 ppid=1694 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861363066383063633663306233343838656365323062663834323939 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c95a0 a2=3c a3=0 items=0 ppid=1694 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861363066383063633663306233343838656365323062663834323939 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.722000 audit: BPF prog-id=68 op=LOAD Oct 29 00:34:48.722000 audit[1807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c98e0 a2=78 a3=0 items=0 ppid=1694 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861363066383063633663306233343838656365323062663834323939 Oct 29 00:34:48.723000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.723000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.723000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.723000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.723000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.723000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.723000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.723000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.723000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.723000 audit: BPF prog-id=69 op=LOAD Oct 29 00:34:48.723000 audit[1807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c9670 a2=78 a3=0 items=0 ppid=1694 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861363066383063633663306233343838656365323062663834323939 Oct 29 00:34:48.723000 audit: BPF prog-id=69 op=UNLOAD Oct 29 00:34:48.724000 audit: BPF prog-id=68 op=UNLOAD Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.724000 audit: BPF prog-id=70 op=LOAD Oct 29 00:34:48.724000 audit[1807]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c9b40 a2=78 a3=0 items=0 ppid=1694 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861363066383063633663306233343838656365323062663834323939 Oct 29 00:34:48.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit: BPF prog-id=71 op=LOAD Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1692 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373937366635383136326162623535316564643034363433653062 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1692 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373937366635383136326162623535316564643034363433653062 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.729000 audit: BPF prog-id=72 op=LOAD Oct 29 00:34:48.729000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1692 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373937366635383136326162623535316564643034363433653062 Oct 29 00:34:48.730000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.730000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.730000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.730000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.730000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.730000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.730000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.730000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.730000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.730000 audit: BPF prog-id=73 op=LOAD Oct 29 00:34:48.730000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1692 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373937366635383136326162623535316564643034363433653062 Oct 29 00:34:48.730000 audit: BPF prog-id=73 op=UNLOAD Oct 29 00:34:48.730000 audit: BPF prog-id=72 op=UNLOAD Oct 29 00:34:48.732267 kubelet[1628]: E1029 00:34:48.732222 1628 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.78:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.78:6443: connect: connection refused" interval="1.6s" Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.731000 audit: BPF prog-id=74 op=LOAD Oct 29 00:34:48.731000 audit[1826]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1692 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536373937366635383136326162623535316564643034363433653062 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.733000 audit: BPF prog-id=75 op=LOAD Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1693 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531396666633130306463666636383130313064343966653536353431 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1693 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531396666633130306463666636383130313064343966653536353431 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.735000 audit: BPF prog-id=76 op=LOAD Oct 29 00:34:48.735000 audit[1820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1693 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531396666633130306463666636383130313064343966653536353431 Oct 29 00:34:48.736000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.736000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.736000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.736000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.736000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.736000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.736000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.736000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.736000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.736000 audit: BPF prog-id=77 op=LOAD Oct 29 00:34:48.736000 audit[1820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1693 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531396666633130306463666636383130313064343966653536353431 Oct 29 00:34:48.737000 audit: BPF prog-id=77 op=UNLOAD Oct 29 00:34:48.737000 audit: BPF prog-id=76 op=UNLOAD Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { perfmon } for pid=1820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit[1820]: AVC avc: denied { bpf } for pid=1820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.737000 audit: BPF prog-id=78 op=LOAD Oct 29 00:34:48.737000 audit[1820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1693 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531396666633130306463666636383130313064343966653536353431 Oct 29 00:34:48.757123 env[1227]: time="2025-10-29T00:34:48.756988396Z" level=info msg="StartContainer for \"e67976f58162abb551edd04643e0b0987ef6b73253c745b837b8478821dad11f\" returns successfully" Oct 29 00:34:48.757759 env[1227]: time="2025-10-29T00:34:48.757459402Z" level=info msg="StartContainer for \"8a60f80cc6c0b3488ece20bf8429931c0b290281cd514ef39c821705589ac0d8\" returns successfully" Oct 29 00:34:48.771093 env[1227]: time="2025-10-29T00:34:48.771021195Z" level=info msg="StartContainer for \"e19ffc100dcff681010d49fe56541ec2102e576381238610457090f267dfed6b\" returns successfully" Oct 29 00:34:48.953104 kubelet[1628]: I1029 00:34:48.953010 1628 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:49.350459 kubelet[1628]: E1029 00:34:49.350367 1628 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:49.350574 kubelet[1628]: E1029 00:34:49.350490 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:49.352334 kubelet[1628]: E1029 00:34:49.352311 1628 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:49.352515 kubelet[1628]: E1029 00:34:49.352500 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:49.354265 kubelet[1628]: E1029 00:34:49.354242 1628 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:49.354435 kubelet[1628]: E1029 00:34:49.354421 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:50.092000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.092000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40048c0940 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:34:50.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.092000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.092000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40044941b0 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:34:50.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.092000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.092000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=40042471d0 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:34:50.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.093000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.093000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4004247230 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:34:50.093000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.097000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.097000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4002c10f80 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:34:50.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.098000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.098000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=40041e9650 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:34:50.098000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.234772 kubelet[1628]: I1029 00:34:50.234733 1628 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Oct 29 00:34:50.235204 kubelet[1628]: E1029 00:34:50.235186 1628 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Oct 29 00:34:50.244214 kubelet[1628]: E1029 00:34:50.244177 1628 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:50.344689 kubelet[1628]: E1029 00:34:50.344575 1628 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:50.356136 kubelet[1628]: E1029 00:34:50.356090 1628 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:50.356283 kubelet[1628]: E1029 00:34:50.356220 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:50.356452 kubelet[1628]: E1029 00:34:50.356431 1628 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:50.356546 kubelet[1628]: E1029 00:34:50.356523 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:50.356853 kubelet[1628]: E1029 00:34:50.356799 1628 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:50.356919 kubelet[1628]: E1029 00:34:50.356901 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:50.445166 kubelet[1628]: E1029 00:34:50.445128 1628 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:50.545395 kubelet[1628]: E1029 00:34:50.545350 1628 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:50.646530 kubelet[1628]: E1029 00:34:50.646426 1628 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:50.747190 kubelet[1628]: E1029 00:34:50.747151 1628 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:50.788000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.788000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.788000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000077650 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:34:50.788000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:50.788000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000295be0 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:34:50.788000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:50.848287 kubelet[1628]: E1029 00:34:50.848231 1628 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:50.929194 kubelet[1628]: I1029 00:34:50.929078 1628 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:50.934114 kubelet[1628]: E1029 00:34:50.934080 1628 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:50.934114 kubelet[1628]: I1029 00:34:50.934111 1628 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:50.935799 kubelet[1628]: E1029 00:34:50.935772 1628 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:50.935799 kubelet[1628]: I1029 00:34:50.935800 1628 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:50.937713 kubelet[1628]: E1029 00:34:50.937690 1628 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:51.304589 kubelet[1628]: I1029 00:34:51.304491 1628 apiserver.go:52] "Watching apiserver" Oct 29 00:34:51.328723 kubelet[1628]: I1029 00:34:51.328691 1628 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Oct 29 00:34:51.356387 kubelet[1628]: I1029 00:34:51.356359 1628 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:51.361342 kubelet[1628]: E1029 00:34:51.361315 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:52.358439 kubelet[1628]: E1029 00:34:52.358407 1628 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:52.400778 systemd[1]: Reloading. Oct 29 00:34:52.442544 /usr/lib/systemd/system-generators/torcx-generator[1940]: time="2025-10-29T00:34:52Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 29 00:34:52.442575 /usr/lib/systemd/system-generators/torcx-generator[1940]: time="2025-10-29T00:34:52Z" level=info msg="torcx already run" Oct 29 00:34:52.490272 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 29 00:34:52.490291 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 29 00:34:52.505522 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 29 00:34:52.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.567902 kernel: kauditd_printk_skb: 581 callbacks suppressed Oct 29 00:34:52.567973 kernel: audit: type=1400 audit(1761698092.564:554): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.568012 kernel: audit: type=1400 audit(1761698092.567:555): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572512 kernel: audit: type=1400 audit(1761698092.567:556): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572562 kernel: audit: type=1400 audit(1761698092.567:557): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.577133 kernel: audit: type=1400 audit(1761698092.567:558): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.579535 kernel: audit: type=1400 audit(1761698092.567:559): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.579595 kernel: audit: type=1400 audit(1761698092.567:560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.584246 kernel: audit: type=1400 audit(1761698092.567:561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.584286 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 29 00:34:52.584307 kernel: audit: type=1400 audit(1761698092.567:562): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.570000 audit: BPF prog-id=79 op=LOAD Oct 29 00:34:52.570000 audit: BPF prog-id=40 op=UNLOAD Oct 29 00:34:52.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572000 audit: BPF prog-id=80 op=LOAD Oct 29 00:34:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit: BPF prog-id=81 op=LOAD Oct 29 00:34:52.574000 audit: BPF prog-id=41 op=UNLOAD Oct 29 00:34:52.574000 audit: BPF prog-id=42 op=UNLOAD Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.576000 audit: BPF prog-id=82 op=LOAD Oct 29 00:34:52.576000 audit: BPF prog-id=43 op=UNLOAD Oct 29 00:34:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.579000 audit: BPF prog-id=83 op=LOAD Oct 29 00:34:52.579000 audit: BPF prog-id=44 op=UNLOAD Oct 29 00:34:52.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.581000 audit: BPF prog-id=84 op=LOAD Oct 29 00:34:52.581000 audit: BPF prog-id=45 op=UNLOAD Oct 29 00:34:52.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit: BPF prog-id=86 op=LOAD Oct 29 00:34:52.587000 audit: BPF prog-id=46 op=UNLOAD Oct 29 00:34:52.587000 audit: BPF prog-id=47 op=UNLOAD Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit: BPF prog-id=87 op=LOAD Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit: BPF prog-id=88 op=LOAD Oct 29 00:34:52.587000 audit: BPF prog-id=48 op=UNLOAD Oct 29 00:34:52.587000 audit: BPF prog-id=49 op=UNLOAD Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.587000 audit: BPF prog-id=89 op=LOAD Oct 29 00:34:52.587000 audit: BPF prog-id=71 op=UNLOAD Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.588000 audit: BPF prog-id=90 op=LOAD Oct 29 00:34:52.588000 audit: BPF prog-id=63 op=UNLOAD Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit: BPF prog-id=91 op=LOAD Oct 29 00:34:52.589000 audit: BPF prog-id=55 op=UNLOAD Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit: BPF prog-id=92 op=LOAD Oct 29 00:34:52.590000 audit: BPF prog-id=50 op=UNLOAD Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.590000 audit: BPF prog-id=93 op=LOAD Oct 29 00:34:52.590000 audit: BPF prog-id=59 op=UNLOAD Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.591000 audit: BPF prog-id=94 op=LOAD Oct 29 00:34:52.591000 audit: BPF prog-id=75 op=UNLOAD Oct 29 00:34:52.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit: BPF prog-id=95 op=LOAD Oct 29 00:34:52.593000 audit: BPF prog-id=67 op=UNLOAD Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit: BPF prog-id=96 op=LOAD Oct 29 00:34:52.593000 audit: BPF prog-id=51 op=UNLOAD Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit: BPF prog-id=97 op=LOAD Oct 29 00:34:52.594000 audit: BPF prog-id=52 op=UNLOAD Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit: BPF prog-id=98 op=LOAD Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.594000 audit: BPF prog-id=99 op=LOAD Oct 29 00:34:52.594000 audit: BPF prog-id=53 op=UNLOAD Oct 29 00:34:52.594000 audit: BPF prog-id=54 op=UNLOAD Oct 29 00:34:52.614716 systemd[1]: Stopping kubelet.service... Oct 29 00:34:52.642189 systemd[1]: kubelet.service: Deactivated successfully. Oct 29 00:34:52.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:52.642412 systemd[1]: Stopped kubelet.service. Oct 29 00:34:52.642478 systemd[1]: kubelet.service: Consumed 1.168s CPU time. Oct 29 00:34:52.644813 systemd[1]: Starting kubelet.service... Oct 29 00:34:52.737801 systemd[1]: Started kubelet.service. Oct 29 00:34:52.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:52.770147 kubelet[1982]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 29 00:34:52.770147 kubelet[1982]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Oct 29 00:34:52.770147 kubelet[1982]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 29 00:34:52.770477 kubelet[1982]: I1029 00:34:52.770195 1982 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 29 00:34:52.778542 kubelet[1982]: I1029 00:34:52.778465 1982 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Oct 29 00:34:52.778542 kubelet[1982]: I1029 00:34:52.778497 1982 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 29 00:34:52.778733 kubelet[1982]: I1029 00:34:52.778715 1982 server.go:956] "Client rotation is on, will bootstrap in background" Oct 29 00:34:52.779907 kubelet[1982]: I1029 00:34:52.779870 1982 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Oct 29 00:34:52.783561 kubelet[1982]: I1029 00:34:52.782405 1982 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 29 00:34:52.786909 kubelet[1982]: E1029 00:34:52.786879 1982 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Oct 29 00:34:52.787079 kubelet[1982]: I1029 00:34:52.787062 1982 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Oct 29 00:34:52.792966 kubelet[1982]: I1029 00:34:52.792947 1982 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 29 00:34:52.793291 kubelet[1982]: I1029 00:34:52.793264 1982 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 29 00:34:52.793519 kubelet[1982]: I1029 00:34:52.793361 1982 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Oct 29 00:34:52.793944 kubelet[1982]: I1029 00:34:52.793922 1982 topology_manager.go:138] "Creating topology manager with none policy" Oct 29 00:34:52.794040 kubelet[1982]: I1029 00:34:52.794029 1982 container_manager_linux.go:303] "Creating device plugin manager" Oct 29 00:34:52.795920 kubelet[1982]: I1029 00:34:52.795900 1982 state_mem.go:36] "Initialized new in-memory state store" Oct 29 00:34:52.796184 kubelet[1982]: I1029 00:34:52.796172 1982 kubelet.go:480] "Attempting to sync node with API server" Oct 29 00:34:52.796749 kubelet[1982]: I1029 00:34:52.796723 1982 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 29 00:34:52.796906 kubelet[1982]: I1029 00:34:52.796893 1982 kubelet.go:386] "Adding apiserver pod source" Oct 29 00:34:52.797083 kubelet[1982]: I1029 00:34:52.797073 1982 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 29 00:34:52.798746 kubelet[1982]: I1029 00:34:52.798727 1982 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 29 00:34:52.799402 kubelet[1982]: I1029 00:34:52.799378 1982 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Oct 29 00:34:52.811262 kubelet[1982]: I1029 00:34:52.811221 1982 watchdog_linux.go:99] "Systemd watchdog is not enabled" Oct 29 00:34:52.812965 kubelet[1982]: I1029 00:34:52.812926 1982 server.go:1289] "Started kubelet" Oct 29 00:34:52.816839 kubelet[1982]: I1029 00:34:52.816769 1982 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Oct 29 00:34:52.817213 kubelet[1982]: I1029 00:34:52.817191 1982 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 29 00:34:52.817372 kubelet[1982]: I1029 00:34:52.817351 1982 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Oct 29 00:34:52.818322 kubelet[1982]: I1029 00:34:52.818298 1982 server.go:317] "Adding debug handlers to kubelet server" Oct 29 00:34:52.818000 audit[1982]: AVC avc: denied { mac_admin } for pid=1982 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.818000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:52.818000 audit[1982]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000af2030 a1=4000357c68 a2=4000af2000 a3=25 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:52.818000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:52.818000 audit[1982]: AVC avc: denied { mac_admin } for pid=1982 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.818000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:52.818000 audit[1982]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009fcfc0 a1=4000357c80 a2=4000af20c0 a3=25 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:52.818000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:52.820140 kubelet[1982]: I1029 00:34:52.819780 1982 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Oct 29 00:34:52.820140 kubelet[1982]: E1029 00:34:52.819869 1982 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 29 00:34:52.820140 kubelet[1982]: I1029 00:34:52.819993 1982 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Oct 29 00:34:52.820140 kubelet[1982]: I1029 00:34:52.820062 1982 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 29 00:34:52.820140 kubelet[1982]: I1029 00:34:52.820100 1982 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Oct 29 00:34:52.820424 kubelet[1982]: I1029 00:34:52.820392 1982 volume_manager.go:297] "Starting Kubelet Volume Manager" Oct 29 00:34:52.821170 kubelet[1982]: I1029 00:34:52.821129 1982 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Oct 29 00:34:52.821327 kubelet[1982]: I1029 00:34:52.821307 1982 reconciler.go:26] "Reconciler: start to sync state" Oct 29 00:34:52.824507 kubelet[1982]: I1029 00:34:52.821543 1982 factory.go:223] Registration of the systemd container factory successfully Oct 29 00:34:52.824507 kubelet[1982]: I1029 00:34:52.821652 1982 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Oct 29 00:34:52.824507 kubelet[1982]: I1029 00:34:52.823417 1982 factory.go:223] Registration of the containerd container factory successfully Oct 29 00:34:52.848735 kubelet[1982]: I1029 00:34:52.848682 1982 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Oct 29 00:34:52.849903 kubelet[1982]: I1029 00:34:52.849882 1982 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Oct 29 00:34:52.850013 kubelet[1982]: I1029 00:34:52.850001 1982 status_manager.go:230] "Starting to sync pod status with apiserver" Oct 29 00:34:52.850084 kubelet[1982]: I1029 00:34:52.850071 1982 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Oct 29 00:34:52.850164 kubelet[1982]: I1029 00:34:52.850154 1982 kubelet.go:2436] "Starting kubelet main sync loop" Oct 29 00:34:52.850293 kubelet[1982]: E1029 00:34:52.850272 1982 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 29 00:34:52.852485 kubelet[1982]: I1029 00:34:52.852456 1982 cpu_manager.go:221] "Starting CPU manager" policy="none" Oct 29 00:34:52.852485 kubelet[1982]: I1029 00:34:52.852481 1982 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Oct 29 00:34:52.852584 kubelet[1982]: I1029 00:34:52.852506 1982 state_mem.go:36] "Initialized new in-memory state store" Oct 29 00:34:52.852693 kubelet[1982]: I1029 00:34:52.852674 1982 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 29 00:34:52.852748 kubelet[1982]: I1029 00:34:52.852693 1982 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 29 00:34:52.852748 kubelet[1982]: I1029 00:34:52.852713 1982 policy_none.go:49] "None policy: Start" Oct 29 00:34:52.852748 kubelet[1982]: I1029 00:34:52.852724 1982 memory_manager.go:186] "Starting memorymanager" policy="None" Oct 29 00:34:52.852748 kubelet[1982]: I1029 00:34:52.852733 1982 state_mem.go:35] "Initializing new in-memory state store" Oct 29 00:34:52.853082 kubelet[1982]: I1029 00:34:52.852921 1982 state_mem.go:75] "Updated machine memory state" Oct 29 00:34:52.856000 audit[1982]: AVC avc: denied { mac_admin } for pid=1982 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:52.856000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:52.856000 audit[1982]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b9ef60 a1=40003575c0 a2=4000b9ef30 a3=25 items=0 ppid=1 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:52.856000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:52.857741 kubelet[1982]: E1029 00:34:52.857461 1982 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Oct 29 00:34:52.857741 kubelet[1982]: E1029 00:34:52.857531 1982 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Oct 29 00:34:52.857741 kubelet[1982]: I1029 00:34:52.857688 1982 eviction_manager.go:189] "Eviction manager: starting control loop" Oct 29 00:34:52.857741 kubelet[1982]: I1029 00:34:52.857701 1982 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Oct 29 00:34:52.858887 kubelet[1982]: I1029 00:34:52.858870 1982 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 29 00:34:52.859045 kubelet[1982]: E1029 00:34:52.858876 1982 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Oct 29 00:34:52.951221 kubelet[1982]: I1029 00:34:52.951100 1982 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:52.951221 kubelet[1982]: I1029 00:34:52.951178 1982 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:52.951363 kubelet[1982]: I1029 00:34:52.951271 1982 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:52.957693 kubelet[1982]: E1029 00:34:52.957645 1982 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:52.965873 kubelet[1982]: I1029 00:34:52.965806 1982 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:52.979577 kubelet[1982]: I1029 00:34:52.979538 1982 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Oct 29 00:34:52.979852 kubelet[1982]: I1029 00:34:52.979800 1982 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Oct 29 00:34:53.122467 kubelet[1982]: I1029 00:34:53.122407 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.122467 kubelet[1982]: I1029 00:34:53.122460 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d13d96f639b65e57f439b4396b605564-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d13d96f639b65e57f439b4396b605564\") " pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:53.122638 kubelet[1982]: I1029 00:34:53.122481 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/90123c22c5352b621947e72760ab7908-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"90123c22c5352b621947e72760ab7908\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:53.122638 kubelet[1982]: I1029 00:34:53.122497 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.122638 kubelet[1982]: I1029 00:34:53.122515 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/90123c22c5352b621947e72760ab7908-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"90123c22c5352b621947e72760ab7908\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:53.122638 kubelet[1982]: I1029 00:34:53.122531 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/90123c22c5352b621947e72760ab7908-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"90123c22c5352b621947e72760ab7908\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:53.122638 kubelet[1982]: I1029 00:34:53.122546 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.122747 kubelet[1982]: I1029 00:34:53.122560 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.122747 kubelet[1982]: I1029 00:34:53.122573 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.257609 kubelet[1982]: E1029 00:34:53.257490 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:53.257609 kubelet[1982]: E1029 00:34:53.257490 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:53.258642 kubelet[1982]: E1029 00:34:53.257850 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:53.798209 kubelet[1982]: I1029 00:34:53.798169 1982 apiserver.go:52] "Watching apiserver" Oct 29 00:34:53.822167 kubelet[1982]: I1029 00:34:53.822131 1982 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Oct 29 00:34:53.861072 kubelet[1982]: E1029 00:34:53.860952 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:53.861197 kubelet[1982]: I1029 00:34:53.861097 1982 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:53.862654 kubelet[1982]: E1029 00:34:53.861449 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:53.880919 kubelet[1982]: E1029 00:34:53.880872 1982 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:53.881806 kubelet[1982]: E1029 00:34:53.881767 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:53.895803 kubelet[1982]: I1029 00:34:53.895742 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.8957131230000002 podStartE2EDuration="1.895713123s" podCreationTimestamp="2025-10-29 00:34:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:34:53.894980896 +0000 UTC m=+1.153808634" watchObservedRunningTime="2025-10-29 00:34:53.895713123 +0000 UTC m=+1.154540981" Oct 29 00:34:53.915368 kubelet[1982]: I1029 00:34:53.915302 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.915286239 podStartE2EDuration="2.915286239s" podCreationTimestamp="2025-10-29 00:34:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:34:53.906110517 +0000 UTC m=+1.164938255" watchObservedRunningTime="2025-10-29 00:34:53.915286239 +0000 UTC m=+1.174113977" Oct 29 00:34:53.924918 kubelet[1982]: I1029 00:34:53.924858 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.924843437 podStartE2EDuration="1.924843437s" podCreationTimestamp="2025-10-29 00:34:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:34:53.915981103 +0000 UTC m=+1.174808841" watchObservedRunningTime="2025-10-29 00:34:53.924843437 +0000 UTC m=+1.183671175" Oct 29 00:34:54.862618 kubelet[1982]: E1029 00:34:54.862577 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:54.862963 kubelet[1982]: E1029 00:34:54.862770 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:54.863184 kubelet[1982]: E1029 00:34:54.863166 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:54.968000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:54.968000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40005d2e40 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:34:54.968000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:54.970000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:54.970000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40005d2e60 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:34:54.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:54.970000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:54.970000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40005d3000 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:34:54.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:54.970000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:54.970000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40005d3020 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:34:54.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:57.719833 kubelet[1982]: E1029 00:34:57.719789 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:57.854000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 29 00:34:57.855881 kernel: kauditd_printk_skb: 274 callbacks suppressed Oct 29 00:34:57.855932 kernel: audit: type=1400 audit(1761698097.854:800): avc: denied { watch } for pid=1847 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 29 00:34:57.854000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40000e9980 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:34:57.865464 kernel: audit: type=1300 audit(1761698097.854:800): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40000e9980 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:34:57.865529 kernel: audit: type=1327 audit(1761698097.854:800): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:57.854000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:59.658505 kubelet[1982]: I1029 00:34:59.658476 1982 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 29 00:34:59.658916 env[1227]: time="2025-10-29T00:34:59.658878296Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 29 00:34:59.659172 kubelet[1982]: I1029 00:34:59.659077 1982 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 29 00:35:00.633813 systemd[1]: Created slice kubepods-besteffort-podb63a6f79_e3aa_4b22_8c2d_220dc2f17777.slice. Oct 29 00:35:00.670051 kubelet[1982]: I1029 00:35:00.670005 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b63a6f79-e3aa-4b22-8c2d-220dc2f17777-xtables-lock\") pod \"kube-proxy-rz4tq\" (UID: \"b63a6f79-e3aa-4b22-8c2d-220dc2f17777\") " pod="kube-system/kube-proxy-rz4tq" Oct 29 00:35:00.670051 kubelet[1982]: I1029 00:35:00.670045 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b63a6f79-e3aa-4b22-8c2d-220dc2f17777-lib-modules\") pod \"kube-proxy-rz4tq\" (UID: \"b63a6f79-e3aa-4b22-8c2d-220dc2f17777\") " pod="kube-system/kube-proxy-rz4tq" Oct 29 00:35:00.670393 kubelet[1982]: I1029 00:35:00.670065 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5qth6\" (UniqueName: \"kubernetes.io/projected/b63a6f79-e3aa-4b22-8c2d-220dc2f17777-kube-api-access-5qth6\") pod \"kube-proxy-rz4tq\" (UID: \"b63a6f79-e3aa-4b22-8c2d-220dc2f17777\") " pod="kube-system/kube-proxy-rz4tq" Oct 29 00:35:00.670393 kubelet[1982]: I1029 00:35:00.670084 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/b63a6f79-e3aa-4b22-8c2d-220dc2f17777-kube-proxy\") pod \"kube-proxy-rz4tq\" (UID: \"b63a6f79-e3aa-4b22-8c2d-220dc2f17777\") " pod="kube-system/kube-proxy-rz4tq" Oct 29 00:35:00.778859 kubelet[1982]: I1029 00:35:00.778827 1982 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Oct 29 00:35:00.846337 systemd[1]: Created slice kubepods-besteffort-pod2c218a00_0b16_4a9d_8087_50b573290fdf.slice. Oct 29 00:35:00.871647 kubelet[1982]: I1029 00:35:00.871601 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jj6v5\" (UniqueName: \"kubernetes.io/projected/2c218a00-0b16-4a9d-8087-50b573290fdf-kube-api-access-jj6v5\") pod \"tigera-operator-7dcd859c48-9729l\" (UID: \"2c218a00-0b16-4a9d-8087-50b573290fdf\") " pod="tigera-operator/tigera-operator-7dcd859c48-9729l" Oct 29 00:35:00.871781 kubelet[1982]: I1029 00:35:00.871660 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/2c218a00-0b16-4a9d-8087-50b573290fdf-var-lib-calico\") pod \"tigera-operator-7dcd859c48-9729l\" (UID: \"2c218a00-0b16-4a9d-8087-50b573290fdf\") " pod="tigera-operator/tigera-operator-7dcd859c48-9729l" Oct 29 00:35:00.941646 kubelet[1982]: E1029 00:35:00.941413 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:00.942240 env[1227]: time="2025-10-29T00:35:00.942201233Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rz4tq,Uid:b63a6f79-e3aa-4b22-8c2d-220dc2f17777,Namespace:kube-system,Attempt:0,}" Oct 29 00:35:00.956851 env[1227]: time="2025-10-29T00:35:00.956776705Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:00.957003 env[1227]: time="2025-10-29T00:35:00.956827148Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:00.957074 env[1227]: time="2025-10-29T00:35:00.957047442Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:00.957348 env[1227]: time="2025-10-29T00:35:00.957300377Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/00e3a10ec5a6679bd3afbce7ca9a2755ddbd71fafd12a35b9928e40de7c49431 pid=2043 runtime=io.containerd.runc.v2 Oct 29 00:35:00.969781 systemd[1]: Started cri-containerd-00e3a10ec5a6679bd3afbce7ca9a2755ddbd71fafd12a35b9928e40de7c49431.scope. Oct 29 00:35:00.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.990313 kernel: audit: type=1400 audit(1761698100.984:801): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.990360 kernel: audit: type=1400 audit(1761698100.984:802): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.990377 kernel: audit: type=1400 audit(1761698100.984:803): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.995373 kernel: audit: type=1400 audit(1761698100.984:804): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.995416 kernel: audit: type=1400 audit(1761698100.984:805): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.000643 kernel: audit: type=1400 audit(1761698100.984:806): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.000681 kernel: audit: type=1400 audit(1761698100.984:807): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.987000 audit: BPF prog-id=100 op=LOAD Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653361313065633561363637396264336166626365376361396132 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653361313065633561363637396264336166626365376361396132 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.991000 audit: BPF prog-id=101 op=LOAD Oct 29 00:35:00.991000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653361313065633561363637396264336166626365376361396132 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit: BPF prog-id=102 op=LOAD Oct 29 00:35:00.992000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653361313065633561363637396264336166626365376361396132 Oct 29 00:35:00.992000 audit: BPF prog-id=102 op=UNLOAD Oct 29 00:35:00.992000 audit: BPF prog-id=101 op=UNLOAD Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.992000 audit: BPF prog-id=103 op=LOAD Oct 29 00:35:00.992000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653361313065633561363637396264336166626365376361396132 Oct 29 00:35:01.012874 env[1227]: time="2025-10-29T00:35:01.012832334Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rz4tq,Uid:b63a6f79-e3aa-4b22-8c2d-220dc2f17777,Namespace:kube-system,Attempt:0,} returns sandbox id \"00e3a10ec5a6679bd3afbce7ca9a2755ddbd71fafd12a35b9928e40de7c49431\"" Oct 29 00:35:01.014091 kubelet[1982]: E1029 00:35:01.013576 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:01.021909 env[1227]: time="2025-10-29T00:35:01.021869390Z" level=info msg="CreateContainer within sandbox \"00e3a10ec5a6679bd3afbce7ca9a2755ddbd71fafd12a35b9928e40de7c49431\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 29 00:35:01.034286 env[1227]: time="2025-10-29T00:35:01.034240484Z" level=info msg="CreateContainer within sandbox \"00e3a10ec5a6679bd3afbce7ca9a2755ddbd71fafd12a35b9928e40de7c49431\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"4e37a667545ccc8703ca4771ace6d660b3f8780f26283694567990689e61eb42\"" Oct 29 00:35:01.035147 env[1227]: time="2025-10-29T00:35:01.035042172Z" level=info msg="StartContainer for \"4e37a667545ccc8703ca4771ace6d660b3f8780f26283694567990689e61eb42\"" Oct 29 00:35:01.049699 systemd[1]: Started cri-containerd-4e37a667545ccc8703ca4771ace6d660b3f8780f26283694567990689e61eb42.scope. Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2043 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465333761363637353435636363383730336361343737316163653664 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.073000 audit: BPF prog-id=104 op=LOAD Oct 29 00:35:01.073000 audit[2082]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2043 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465333761363637353435636363383730336361343737316163653664 Oct 29 00:35:01.074000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.074000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.074000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.074000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.074000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.074000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.074000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.074000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.074000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.074000 audit: BPF prog-id=105 op=LOAD Oct 29 00:35:01.074000 audit[2082]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2043 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465333761363637353435636363383730336361343737316163653664 Oct 29 00:35:01.075000 audit: BPF prog-id=105 op=UNLOAD Oct 29 00:35:01.075000 audit: BPF prog-id=104 op=UNLOAD Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.075000 audit: BPF prog-id=106 op=LOAD Oct 29 00:35:01.075000 audit[2082]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2043 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465333761363637353435636363383730336361343737316163653664 Oct 29 00:35:01.090807 env[1227]: time="2025-10-29T00:35:01.090761560Z" level=info msg="StartContainer for \"4e37a667545ccc8703ca4771ace6d660b3f8780f26283694567990689e61eb42\" returns successfully" Oct 29 00:35:01.150020 env[1227]: time="2025-10-29T00:35:01.149963835Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-9729l,Uid:2c218a00-0b16-4a9d-8087-50b573290fdf,Namespace:tigera-operator,Attempt:0,}" Oct 29 00:35:01.163863 env[1227]: time="2025-10-29T00:35:01.163769495Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:01.164009 env[1227]: time="2025-10-29T00:35:01.163809377Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:01.164009 env[1227]: time="2025-10-29T00:35:01.163838739Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:01.164102 env[1227]: time="2025-10-29T00:35:01.164026710Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9b1c26d73d953e0d77c9c31f6ddc4fee97bb6886ca0f7d134fe55dcd6c6fcefb pid=2123 runtime=io.containerd.runc.v2 Oct 29 00:35:01.174391 systemd[1]: Started cri-containerd-9b1c26d73d953e0d77c9c31f6ddc4fee97bb6886ca0f7d134fe55dcd6c6fcefb.scope. Oct 29 00:35:01.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit: BPF prog-id=107 op=LOAD Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316332366437336439353365306437376339633331663664646334 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316332366437336439353365306437376339633331663664646334 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit: BPF prog-id=108 op=LOAD Oct 29 00:35:01.191000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316332366437336439353365306437376339633331663664646334 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.191000 audit: BPF prog-id=109 op=LOAD Oct 29 00:35:01.191000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316332366437336439353365306437376339633331663664646334 Oct 29 00:35:01.191000 audit: BPF prog-id=109 op=UNLOAD Oct 29 00:35:01.192000 audit: BPF prog-id=108 op=UNLOAD Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { perfmon } for pid=2132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit[2132]: AVC avc: denied { bpf } for pid=2132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.192000 audit: BPF prog-id=110 op=LOAD Oct 29 00:35:01.192000 audit[2132]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2123 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962316332366437336439353365306437376339633331663664646334 Oct 29 00:35:01.212692 env[1227]: time="2025-10-29T00:35:01.212634916Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-9729l,Uid:2c218a00-0b16-4a9d-8087-50b573290fdf,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"9b1c26d73d953e0d77c9c31f6ddc4fee97bb6886ca0f7d134fe55dcd6c6fcefb\"" Oct 29 00:35:01.216651 env[1227]: time="2025-10-29T00:35:01.216584550Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Oct 29 00:35:01.236000 audit[2187]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.236000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc977c580 a2=0 a3=1 items=0 ppid=2093 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.236000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 29 00:35:01.238000 audit[2188]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.238000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6cab6d0 a2=0 a3=1 items=0 ppid=2093 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.238000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 29 00:35:01.239000 audit[2193]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.239000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd5d821d0 a2=0 a3=1 items=0 ppid=2093 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.239000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 29 00:35:01.239000 audit[2191]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.239000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0efef10 a2=0 a3=1 items=0 ppid=2093 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.239000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 29 00:35:01.241000 audit[2194]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.241000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe51ef610 a2=0 a3=1 items=0 ppid=2093 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.241000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 29 00:35:01.242000 audit[2195]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.242000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffebe1d0f0 a2=0 a3=1 items=0 ppid=2093 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.242000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 29 00:35:01.339000 audit[2196]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.339000 audit[2196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdbf8c650 a2=0 a3=1 items=0 ppid=2093 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 29 00:35:01.341000 audit[2198]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.341000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffefe78ba0 a2=0 a3=1 items=0 ppid=2093 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.341000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 29 00:35:01.344000 audit[2201]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.344000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc47488d0 a2=0 a3=1 items=0 ppid=2093 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.344000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 29 00:35:01.345000 audit[2202]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.345000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc39e0c90 a2=0 a3=1 items=0 ppid=2093 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.345000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 29 00:35:01.347000 audit[2204]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.347000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffee631a00 a2=0 a3=1 items=0 ppid=2093 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 29 00:35:01.349000 audit[2205]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.349000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1f2adc0 a2=0 a3=1 items=0 ppid=2093 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 29 00:35:01.351000 audit[2207]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.351000 audit[2207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdb0c6420 a2=0 a3=1 items=0 ppid=2093 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.351000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 29 00:35:01.354000 audit[2210]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.354000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdc4b0340 a2=0 a3=1 items=0 ppid=2093 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.354000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 29 00:35:01.355000 audit[2211]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.355000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd86ecd0 a2=0 a3=1 items=0 ppid=2093 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.355000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 29 00:35:01.357000 audit[2213]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.357000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcf7c51b0 a2=0 a3=1 items=0 ppid=2093 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.357000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 29 00:35:01.358000 audit[2214]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.358000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe7746fb0 a2=0 a3=1 items=0 ppid=2093 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.358000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 29 00:35:01.360000 audit[2216]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.360000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc2f5b070 a2=0 a3=1 items=0 ppid=2093 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.360000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 29 00:35:01.363000 audit[2219]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.363000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc72a51b0 a2=0 a3=1 items=0 ppid=2093 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.363000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 29 00:35:01.366000 audit[2222]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.366000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff1e17ee0 a2=0 a3=1 items=0 ppid=2093 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.366000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 29 00:35:01.367000 audit[2223]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.367000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdabe9ff0 a2=0 a3=1 items=0 ppid=2093 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.367000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 29 00:35:01.370000 audit[2225]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.370000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffc08d00d0 a2=0 a3=1 items=0 ppid=2093 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.370000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 29 00:35:01.373000 audit[2228]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.373000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcd8cc880 a2=0 a3=1 items=0 ppid=2093 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.373000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 29 00:35:01.374000 audit[2229]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.374000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9206c60 a2=0 a3=1 items=0 ppid=2093 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.374000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 29 00:35:01.376000 audit[2231]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.376000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffcf2be060 a2=0 a3=1 items=0 ppid=2093 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.376000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 29 00:35:01.400000 audit[2237]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:01.400000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd46e5aa0 a2=0 a3=1 items=0 ppid=2093 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.400000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:01.412000 audit[2237]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:01.412000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffd46e5aa0 a2=0 a3=1 items=0 ppid=2093 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.412000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:01.413000 audit[2242]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.413000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd71445f0 a2=0 a3=1 items=0 ppid=2093 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.413000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 29 00:35:01.415000 audit[2244]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.415000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe2d83410 a2=0 a3=1 items=0 ppid=2093 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.415000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 29 00:35:01.421000 audit[2247]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.421000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff7295460 a2=0 a3=1 items=0 ppid=2093 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.421000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 29 00:35:01.422000 audit[2248]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.422000 audit[2248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffde655e80 a2=0 a3=1 items=0 ppid=2093 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.422000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 29 00:35:01.425000 audit[2250]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2250 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.425000 audit[2250]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffec560040 a2=0 a3=1 items=0 ppid=2093 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 29 00:35:01.426000 audit[2251]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.426000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff3b5b5f0 a2=0 a3=1 items=0 ppid=2093 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.426000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 29 00:35:01.429000 audit[2253]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.429000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffda54da70 a2=0 a3=1 items=0 ppid=2093 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.429000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 29 00:35:01.432000 audit[2256]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.432000 audit[2256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd7c29a20 a2=0 a3=1 items=0 ppid=2093 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 29 00:35:01.433000 audit[2257]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.433000 audit[2257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffefabf7e0 a2=0 a3=1 items=0 ppid=2093 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 29 00:35:01.436000 audit[2259]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2259 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.436000 audit[2259]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff8555390 a2=0 a3=1 items=0 ppid=2093 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.436000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 29 00:35:01.437000 audit[2260]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.437000 audit[2260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcdc57360 a2=0 a3=1 items=0 ppid=2093 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.437000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 29 00:35:01.439000 audit[2262]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.439000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff4ef9740 a2=0 a3=1 items=0 ppid=2093 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.439000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 29 00:35:01.442000 audit[2265]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2265 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.442000 audit[2265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe2055310 a2=0 a3=1 items=0 ppid=2093 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.442000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 29 00:35:01.446000 audit[2268]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.446000 audit[2268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc6a84740 a2=0 a3=1 items=0 ppid=2093 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.446000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 29 00:35:01.447000 audit[2269]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.447000 audit[2269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffeb279b50 a2=0 a3=1 items=0 ppid=2093 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.447000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 29 00:35:01.449000 audit[2271]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2271 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.449000 audit[2271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffffaa37810 a2=0 a3=1 items=0 ppid=2093 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.449000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 29 00:35:01.452000 audit[2274]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2274 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.452000 audit[2274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffce89a560 a2=0 a3=1 items=0 ppid=2093 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.452000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 29 00:35:01.453000 audit[2275]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2275 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.453000 audit[2275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcbede510 a2=0 a3=1 items=0 ppid=2093 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.453000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 29 00:35:01.455000 audit[2277]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.455000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffff2dbd8d0 a2=0 a3=1 items=0 ppid=2093 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.455000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 29 00:35:01.457000 audit[2278]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.457000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe6b19270 a2=0 a3=1 items=0 ppid=2093 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.457000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 29 00:35:01.459000 audit[2280]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.459000 audit[2280]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffe0be3f0 a2=0 a3=1 items=0 ppid=2093 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.459000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 29 00:35:01.462000 audit[2283]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.462000 audit[2283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd80ff540 a2=0 a3=1 items=0 ppid=2093 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.462000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 29 00:35:01.465000 audit[2285]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 29 00:35:01.465000 audit[2285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=fffff682b850 a2=0 a3=1 items=0 ppid=2093 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.465000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:01.465000 audit[2285]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 29 00:35:01.465000 audit[2285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffff682b850 a2=0 a3=1 items=0 ppid=2093 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.465000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:01.881234 kubelet[1982]: E1029 00:35:01.880685 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:01.891358 kubelet[1982]: I1029 00:35:01.891193 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-rz4tq" podStartSLOduration=1.8911778 podStartE2EDuration="1.8911778s" podCreationTimestamp="2025-10-29 00:35:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:35:01.890993309 +0000 UTC m=+9.149821047" watchObservedRunningTime="2025-10-29 00:35:01.8911778 +0000 UTC m=+9.150005538" Oct 29 00:35:02.140262 kubelet[1982]: E1029 00:35:02.139368 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:02.669312 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1945554390.mount: Deactivated successfully. Oct 29 00:35:02.881460 kubelet[1982]: E1029 00:35:02.881309 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:03.882485 kubelet[1982]: E1029 00:35:03.882456 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:04.015329 update_engine[1221]: I1029 00:35:04.014932 1221 update_attempter.cc:509] Updating boot flags... Oct 29 00:35:04.721255 kubelet[1982]: E1029 00:35:04.721150 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:05.687963 env[1227]: time="2025-10-29T00:35:05.687913997Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:05.689799 env[1227]: time="2025-10-29T00:35:05.689754166Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:05.691621 env[1227]: time="2025-10-29T00:35:05.691591935Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:05.693229 env[1227]: time="2025-10-29T00:35:05.693193533Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:05.693786 env[1227]: time="2025-10-29T00:35:05.693759920Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b\"" Oct 29 00:35:05.697598 env[1227]: time="2025-10-29T00:35:05.697564945Z" level=info msg="CreateContainer within sandbox \"9b1c26d73d953e0d77c9c31f6ddc4fee97bb6886ca0f7d134fe55dcd6c6fcefb\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 29 00:35:05.706465 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2280163427.mount: Deactivated successfully. Oct 29 00:35:05.710072 env[1227]: time="2025-10-29T00:35:05.710019788Z" level=info msg="CreateContainer within sandbox \"9b1c26d73d953e0d77c9c31f6ddc4fee97bb6886ca0f7d134fe55dcd6c6fcefb\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"a0459f87d4e6ffab014f413a703edbe560f0b76973825fcbab7cc117ba192b1a\"" Oct 29 00:35:05.710790 env[1227]: time="2025-10-29T00:35:05.710761344Z" level=info msg="StartContainer for \"a0459f87d4e6ffab014f413a703edbe560f0b76973825fcbab7cc117ba192b1a\"" Oct 29 00:35:05.731520 systemd[1]: Started cri-containerd-a0459f87d4e6ffab014f413a703edbe560f0b76973825fcbab7cc117ba192b1a.scope. Oct 29 00:35:05.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.751226 kernel: kauditd_printk_skb: 303 callbacks suppressed Oct 29 00:35:05.751278 kernel: audit: type=1400 audit(1761698105.748:894): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.757182 kernel: audit: type=1400 audit(1761698105.748:895): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.760143 kernel: audit: type=1400 audit(1761698105.748:896): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.760280 kernel: audit: type=1400 audit(1761698105.748:897): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.765343 kernel: audit: type=1400 audit(1761698105.748:898): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.765400 kernel: audit: type=1400 audit(1761698105.748:899): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.770601 kernel: audit: type=1400 audit(1761698105.748:900): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.770842 kernel: audit: type=1400 audit(1761698105.748:901): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.775778 kernel: audit: type=1400 audit(1761698105.748:902): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.775861 kernel: audit: type=1400 audit(1761698105.749:903): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.749000 audit: BPF prog-id=111 op=LOAD Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2123 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:05.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343539663837643465366666616230313466343133613730336564 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2123 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:05.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343539663837643465366666616230313466343133613730336564 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.752000 audit: BPF prog-id=112 op=LOAD Oct 29 00:35:05.752000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2123 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:05.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343539663837643465366666616230313466343133613730336564 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit: BPF prog-id=113 op=LOAD Oct 29 00:35:05.755000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2123 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:05.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343539663837643465366666616230313466343133613730336564 Oct 29 00:35:05.755000 audit: BPF prog-id=113 op=UNLOAD Oct 29 00:35:05.755000 audit: BPF prog-id=112 op=UNLOAD Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:05.755000 audit: BPF prog-id=114 op=LOAD Oct 29 00:35:05.755000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2123 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:05.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130343539663837643465366666616230313466343133613730336564 Oct 29 00:35:05.787085 env[1227]: time="2025-10-29T00:35:05.787012079Z" level=info msg="StartContainer for \"a0459f87d4e6ffab014f413a703edbe560f0b76973825fcbab7cc117ba192b1a\" returns successfully" Oct 29 00:35:07.732943 kubelet[1982]: E1029 00:35:07.732899 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:07.747137 kubelet[1982]: I1029 00:35:07.747066 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-9729l" podStartSLOduration=3.2684182809999998 podStartE2EDuration="7.747033887s" podCreationTimestamp="2025-10-29 00:35:00 +0000 UTC" firstStartedPulling="2025-10-29 00:35:01.216028157 +0000 UTC m=+8.474855855" lastFinishedPulling="2025-10-29 00:35:05.694643723 +0000 UTC m=+12.953471461" observedRunningTime="2025-10-29 00:35:05.904880791 +0000 UTC m=+13.163708529" watchObservedRunningTime="2025-10-29 00:35:07.747033887 +0000 UTC m=+15.005861625" Oct 29 00:35:07.898464 kubelet[1982]: E1029 00:35:07.898427 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:11.125131 sudo[1365]: pam_unix(sudo:session): session closed for user root Oct 29 00:35:11.124000 audit[1365]: USER_END pid=1365 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:35:11.126445 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 29 00:35:11.126520 kernel: audit: type=1106 audit(1761698111.124:912): pid=1365 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:35:11.129397 sshd[1361]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:11.124000 audit[1365]: CRED_DISP pid=1365 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:35:11.132152 systemd-logind[1215]: Session 7 logged out. Waiting for processes to exit. Oct 29 00:35:11.132327 systemd[1]: session-7.scope: Deactivated successfully. Oct 29 00:35:11.132870 kernel: audit: type=1104 audit(1761698111.124:913): pid=1365 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:35:11.132908 kernel: audit: type=1106 audit(1761698111.129:914): pid=1361 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:11.129000 audit[1361]: USER_END pid=1361 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:11.132502 systemd[1]: session-7.scope: Consumed 8.843s CPU time. Oct 29 00:35:11.133357 systemd-logind[1215]: Removed session 7. Oct 29 00:35:11.133609 systemd[1]: sshd@6-10.0.0.78:22-10.0.0.1:43248.service: Deactivated successfully. Oct 29 00:35:11.129000 audit[1361]: CRED_DISP pid=1361 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:11.141853 kernel: audit: type=1104 audit(1761698111.129:915): pid=1361 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:11.141916 kernel: audit: type=1131 audit(1761698111.132:916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.78:22-10.0.0.1:43248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:11.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.78:22-10.0.0.1:43248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:13.207000 audit[2393]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.207000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdf361a60 a2=0 a3=1 items=0 ppid=2093 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.215292 kernel: audit: type=1325 audit(1761698113.207:917): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.215400 kernel: audit: type=1300 audit(1761698113.207:917): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdf361a60 a2=0 a3=1 items=0 ppid=2093 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.215510 kernel: audit: type=1327 audit(1761698113.207:917): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.207000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.222000 audit[2393]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.222000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf361a60 a2=0 a3=1 items=0 ppid=2093 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.229192 kernel: audit: type=1325 audit(1761698113.222:918): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.229297 kernel: audit: type=1300 audit(1761698113.222:918): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf361a60 a2=0 a3=1 items=0 ppid=2093 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.222000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.244000 audit[2395]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.244000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff73ed110 a2=0 a3=1 items=0 ppid=2093 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.244000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.252000 audit[2395]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.252000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff73ed110 a2=0 a3=1 items=0 ppid=2093 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.252000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:16.070000 audit[2397]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:16.070000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeb6658e0 a2=0 a3=1 items=0 ppid=2093 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:16.070000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:16.075000 audit[2397]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:16.075000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeb6658e0 a2=0 a3=1 items=0 ppid=2093 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:16.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:16.096000 audit[2399]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:16.096000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc4a8fbe0 a2=0 a3=1 items=0 ppid=2093 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:16.096000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:16.104000 audit[2399]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:16.104000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc4a8fbe0 a2=0 a3=1 items=0 ppid=2093 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:16.104000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:17.119000 audit[2401]: NETFILTER_CFG table=filter:97 family=2 entries=19 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:17.120993 kernel: kauditd_printk_skb: 19 callbacks suppressed Oct 29 00:35:17.121063 kernel: audit: type=1325 audit(1761698117.119:925): table=filter:97 family=2 entries=19 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:17.119000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdf506240 a2=0 a3=1 items=0 ppid=2093 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:17.126729 kernel: audit: type=1300 audit(1761698117.119:925): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdf506240 a2=0 a3=1 items=0 ppid=2093 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:17.119000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:17.128753 kernel: audit: type=1327 audit(1761698117.119:925): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:17.130000 audit[2401]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:17.130000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf506240 a2=0 a3=1 items=0 ppid=2093 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:17.138193 kernel: audit: type=1325 audit(1761698117.130:926): table=nat:98 family=2 entries=12 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:17.138260 kernel: audit: type=1300 audit(1761698117.130:926): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdf506240 a2=0 a3=1 items=0 ppid=2093 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:17.138294 kernel: audit: type=1327 audit(1761698117.130:926): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:17.130000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:18.556000 audit[2403]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:18.556000 audit[2403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe2c73ad0 a2=0 a3=1 items=0 ppid=2093 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:18.564132 kernel: audit: type=1325 audit(1761698118.556:927): table=filter:99 family=2 entries=21 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:18.564251 kernel: audit: type=1300 audit(1761698118.556:927): arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe2c73ad0 a2=0 a3=1 items=0 ppid=2093 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:18.564281 kernel: audit: type=1327 audit(1761698118.556:927): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:18.556000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:18.566000 audit[2403]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:18.566000 audit[2403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe2c73ad0 a2=0 a3=1 items=0 ppid=2093 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:18.566000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:18.570850 kernel: audit: type=1325 audit(1761698118.566:928): table=nat:100 family=2 entries=12 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:18.607113 systemd[1]: Created slice kubepods-besteffort-pod0b541e8f_bc09_401a_a7ef_8bcefdcb57b8.slice. Oct 29 00:35:18.696450 kubelet[1982]: I1029 00:35:18.696403 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0b541e8f-bc09-401a-a7ef-8bcefdcb57b8-tigera-ca-bundle\") pod \"calico-typha-56d779fdb5-pdhxz\" (UID: \"0b541e8f-bc09-401a-a7ef-8bcefdcb57b8\") " pod="calico-system/calico-typha-56d779fdb5-pdhxz" Oct 29 00:35:18.696450 kubelet[1982]: I1029 00:35:18.696455 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/0b541e8f-bc09-401a-a7ef-8bcefdcb57b8-typha-certs\") pod \"calico-typha-56d779fdb5-pdhxz\" (UID: \"0b541e8f-bc09-401a-a7ef-8bcefdcb57b8\") " pod="calico-system/calico-typha-56d779fdb5-pdhxz" Oct 29 00:35:18.696871 kubelet[1982]: I1029 00:35:18.696473 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-94n94\" (UniqueName: \"kubernetes.io/projected/0b541e8f-bc09-401a-a7ef-8bcefdcb57b8-kube-api-access-94n94\") pod \"calico-typha-56d779fdb5-pdhxz\" (UID: \"0b541e8f-bc09-401a-a7ef-8bcefdcb57b8\") " pod="calico-system/calico-typha-56d779fdb5-pdhxz" Oct 29 00:35:18.774713 systemd[1]: Created slice kubepods-besteffort-pod4ea9b65c_34ec_4537_add0_dbf3ddf6c0b5.slice. Oct 29 00:35:18.796621 kubelet[1982]: I1029 00:35:18.796578 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-grd8b\" (UniqueName: \"kubernetes.io/projected/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-kube-api-access-grd8b\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796621 kubelet[1982]: I1029 00:35:18.796628 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-policysync\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796803 kubelet[1982]: I1029 00:35:18.796645 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-tigera-ca-bundle\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796803 kubelet[1982]: I1029 00:35:18.796661 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-var-run-calico\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796803 kubelet[1982]: I1029 00:35:18.796681 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-cni-bin-dir\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796803 kubelet[1982]: I1029 00:35:18.796696 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-cni-net-dir\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796803 kubelet[1982]: I1029 00:35:18.796723 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-node-certs\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796948 kubelet[1982]: I1029 00:35:18.796747 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-cni-log-dir\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796948 kubelet[1982]: I1029 00:35:18.796761 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-lib-modules\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796948 kubelet[1982]: I1029 00:35:18.796775 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-var-lib-calico\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796948 kubelet[1982]: I1029 00:35:18.796795 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-flexvol-driver-host\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.796948 kubelet[1982]: I1029 00:35:18.796810 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5-xtables-lock\") pod \"calico-node-57h69\" (UID: \"4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5\") " pod="calico-system/calico-node-57h69" Oct 29 00:35:18.909535 kubelet[1982]: E1029 00:35:18.909345 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:18.909925 kubelet[1982]: E1029 00:35:18.909788 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.909925 kubelet[1982]: W1029 00:35:18.909811 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.910601 env[1227]: time="2025-10-29T00:35:18.910216370Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-56d779fdb5-pdhxz,Uid:0b541e8f-bc09-401a-a7ef-8bcefdcb57b8,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:18.913372 kubelet[1982]: E1029 00:35:18.912663 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.914616 kubelet[1982]: E1029 00:35:18.914398 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.914616 kubelet[1982]: W1029 00:35:18.914434 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.914616 kubelet[1982]: E1029 00:35:18.914452 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.915133 kubelet[1982]: E1029 00:35:18.914886 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.915133 kubelet[1982]: W1029 00:35:18.914897 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.915133 kubelet[1982]: E1029 00:35:18.914909 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.915911 kubelet[1982]: E1029 00:35:18.915211 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.915911 kubelet[1982]: W1029 00:35:18.915227 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.915911 kubelet[1982]: E1029 00:35:18.915252 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.915911 kubelet[1982]: E1029 00:35:18.915602 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.915911 kubelet[1982]: W1029 00:35:18.915614 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.915911 kubelet[1982]: E1029 00:35:18.915625 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.916256 kubelet[1982]: E1029 00:35:18.916214 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.916256 kubelet[1982]: W1029 00:35:18.916231 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.916501 kubelet[1982]: E1029 00:35:18.916267 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.926537 kubelet[1982]: E1029 00:35:18.924296 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.926537 kubelet[1982]: W1029 00:35:18.924318 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.926537 kubelet[1982]: E1029 00:35:18.924336 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.944841 env[1227]: time="2025-10-29T00:35:18.944660955Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:18.944841 env[1227]: time="2025-10-29T00:35:18.944708276Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:18.944841 env[1227]: time="2025-10-29T00:35:18.944718956Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:18.945083 env[1227]: time="2025-10-29T00:35:18.944871121Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/45bf4945ae607213be7fd9d483aa522287670e046af9b45b2d57ec9631c02fcf pid=2423 runtime=io.containerd.runc.v2 Oct 29 00:35:18.964134 kubelet[1982]: E1029 00:35:18.964090 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:18.976837 systemd[1]: Started cri-containerd-45bf4945ae607213be7fd9d483aa522287670e046af9b45b2d57ec9631c02fcf.scope. Oct 29 00:35:18.982110 kubelet[1982]: E1029 00:35:18.982084 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.982293 kubelet[1982]: W1029 00:35:18.982276 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.982375 kubelet[1982]: E1029 00:35:18.982361 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.982625 kubelet[1982]: E1029 00:35:18.982609 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.982746 kubelet[1982]: W1029 00:35:18.982705 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.982812 kubelet[1982]: E1029 00:35:18.982800 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.983078 kubelet[1982]: E1029 00:35:18.983060 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.983171 kubelet[1982]: W1029 00:35:18.983158 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.983232 kubelet[1982]: E1029 00:35:18.983221 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.984953 kubelet[1982]: E1029 00:35:18.984933 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.986112 kubelet[1982]: W1029 00:35:18.985081 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.986112 kubelet[1982]: E1029 00:35:18.985099 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.986112 kubelet[1982]: E1029 00:35:18.985317 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.986112 kubelet[1982]: W1029 00:35:18.985327 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.986112 kubelet[1982]: E1029 00:35:18.985336 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.986112 kubelet[1982]: E1029 00:35:18.985489 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.986112 kubelet[1982]: W1029 00:35:18.985497 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.986112 kubelet[1982]: E1029 00:35:18.985506 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.986521 kubelet[1982]: E1029 00:35:18.986503 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.986598 kubelet[1982]: W1029 00:35:18.986584 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.986663 kubelet[1982]: E1029 00:35:18.986651 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.986979 kubelet[1982]: E1029 00:35:18.986963 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.987080 kubelet[1982]: W1029 00:35:18.987064 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.987151 kubelet[1982]: E1029 00:35:18.987138 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.987396 kubelet[1982]: E1029 00:35:18.987382 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.987510 kubelet[1982]: W1029 00:35:18.987494 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.987591 kubelet[1982]: E1029 00:35:18.987578 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.987806 kubelet[1982]: E1029 00:35:18.987793 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.987910 kubelet[1982]: W1029 00:35:18.987891 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.987982 kubelet[1982]: E1029 00:35:18.987970 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.988505 kubelet[1982]: E1029 00:35:18.988487 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.988601 kubelet[1982]: W1029 00:35:18.988587 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.988668 kubelet[1982]: E1029 00:35:18.988656 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.989701 kubelet[1982]: E1029 00:35:18.989683 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.989811 kubelet[1982]: W1029 00:35:18.989796 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.989892 kubelet[1982]: E1029 00:35:18.989880 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.990923 kubelet[1982]: E1029 00:35:18.990905 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.991025 kubelet[1982]: W1029 00:35:18.991012 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.991095 kubelet[1982]: E1029 00:35:18.991083 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.991373 kubelet[1982]: E1029 00:35:18.991359 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.991472 kubelet[1982]: W1029 00:35:18.991459 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.991541 kubelet[1982]: E1029 00:35:18.991529 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.991761 kubelet[1982]: E1029 00:35:18.991746 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.992456 kubelet[1982]: W1029 00:35:18.991873 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.992575 kubelet[1982]: E1029 00:35:18.992559 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.992845 kubelet[1982]: E1029 00:35:18.992822 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.992937 kubelet[1982]: W1029 00:35:18.992923 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.992998 kubelet[1982]: E1029 00:35:18.992987 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.993231 kubelet[1982]: E1029 00:35:18.993218 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.993315 kubelet[1982]: W1029 00:35:18.993302 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.993384 kubelet[1982]: E1029 00:35:18.993372 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.993609 kubelet[1982]: E1029 00:35:18.993598 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.993680 kubelet[1982]: W1029 00:35:18.993669 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.993745 kubelet[1982]: E1029 00:35:18.993733 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.993997 kubelet[1982]: E1029 00:35:18.993983 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.994088 kubelet[1982]: W1029 00:35:18.994075 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.994154 kubelet[1982]: E1029 00:35:18.994143 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.994374 kubelet[1982]: E1029 00:35:18.994360 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.994466 kubelet[1982]: W1029 00:35:18.994453 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.994537 kubelet[1982]: E1029 00:35:18.994525 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.998754 kubelet[1982]: E1029 00:35:18.998737 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:18.998893 kubelet[1982]: W1029 00:35:18.998879 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:18.998961 kubelet[1982]: E1029 00:35:18.998949 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:18.999050 kubelet[1982]: I1029 00:35:18.999034 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/9522c2ec-7e06-406b-83b4-e2c84866af00-registration-dir\") pod \"csi-node-driver-v7x7q\" (UID: \"9522c2ec-7e06-406b-83b4-e2c84866af00\") " pod="calico-system/csi-node-driver-v7x7q" Oct 29 00:35:18.999917 kubelet[1982]: E1029 00:35:18.999899 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.000043 kubelet[1982]: W1029 00:35:18.999998 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.000105 kubelet[1982]: E1029 00:35:19.000094 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.000186 kubelet[1982]: I1029 00:35:19.000173 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/9522c2ec-7e06-406b-83b4-e2c84866af00-socket-dir\") pod \"csi-node-driver-v7x7q\" (UID: \"9522c2ec-7e06-406b-83b4-e2c84866af00\") " pod="calico-system/csi-node-driver-v7x7q" Oct 29 00:35:19.000415 kubelet[1982]: E1029 00:35:19.000397 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.000415 kubelet[1982]: W1029 00:35:19.000415 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.000588 kubelet[1982]: E1029 00:35:19.000435 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.000619 kubelet[1982]: E1029 00:35:19.000601 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.000619 kubelet[1982]: W1029 00:35:19.000610 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.000669 kubelet[1982]: E1029 00:35:19.000618 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.000807 kubelet[1982]: E1029 00:35:19.000795 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.000880 kubelet[1982]: W1029 00:35:19.000808 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.000880 kubelet[1982]: E1029 00:35:19.000829 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.003837 kubelet[1982]: E1029 00:35:19.003789 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.003837 kubelet[1982]: W1029 00:35:19.003812 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.003837 kubelet[1982]: E1029 00:35:19.003834 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.004000 audit: BPF prog-id=115 op=LOAD Oct 29 00:35:19.004000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.005621 kubelet[1982]: E1029 00:35:19.005601 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.005621 kubelet[1982]: W1029 00:35:19.005618 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.005700 kubelet[1982]: E1029 00:35:19.005640 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.005700 kubelet[1982]: I1029 00:35:19.005666 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p7pvs\" (UniqueName: \"kubernetes.io/projected/9522c2ec-7e06-406b-83b4-e2c84866af00-kube-api-access-p7pvs\") pod \"csi-node-driver-v7x7q\" (UID: \"9522c2ec-7e06-406b-83b4-e2c84866af00\") " pod="calico-system/csi-node-driver-v7x7q" Oct 29 00:35:19.006119 kubelet[1982]: E1029 00:35:19.005912 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.006119 kubelet[1982]: W1029 00:35:19.005938 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.006119 kubelet[1982]: E1029 00:35:19.005956 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.006119 kubelet[1982]: I1029 00:35:19.005972 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/9522c2ec-7e06-406b-83b4-e2c84866af00-varrun\") pod \"csi-node-driver-v7x7q\" (UID: \"9522c2ec-7e06-406b-83b4-e2c84866af00\") " pod="calico-system/csi-node-driver-v7x7q" Oct 29 00:35:19.004000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435626634393435616536303732313362653766643964343833616135 Oct 29 00:35:19.007989 kubelet[1982]: E1029 00:35:19.007363 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.007989 kubelet[1982]: W1029 00:35:19.007381 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.007989 kubelet[1982]: E1029 00:35:19.007395 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.007989 kubelet[1982]: I1029 00:35:19.007415 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/9522c2ec-7e06-406b-83b4-e2c84866af00-kubelet-dir\") pod \"csi-node-driver-v7x7q\" (UID: \"9522c2ec-7e06-406b-83b4-e2c84866af00\") " pod="calico-system/csi-node-driver-v7x7q" Oct 29 00:35:19.007989 kubelet[1982]: E1029 00:35:19.007696 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.007989 kubelet[1982]: W1029 00:35:19.007707 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.007989 kubelet[1982]: E1029 00:35:19.007717 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.007989 kubelet[1982]: E1029 00:35:19.007960 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.007989 kubelet[1982]: W1029 00:35:19.007969 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.008245 kubelet[1982]: E1029 00:35:19.007980 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.007000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008419 kubelet[1982]: E1029 00:35:19.008350 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.008419 kubelet[1982]: W1029 00:35:19.008361 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.008419 kubelet[1982]: E1029 00:35:19.008373 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.007000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.008652 kubelet[1982]: E1029 00:35:19.008642 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.008652 kubelet[1982]: W1029 00:35:19.008651 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.008718 kubelet[1982]: E1029 00:35:19.008660 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435626634393435616536303732313362653766643964343833616135 Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008941 kubelet[1982]: E1029 00:35:19.008926 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.008941 kubelet[1982]: W1029 00:35:19.008935 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.009005 kubelet[1982]: E1029 00:35:19.008942 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009128 kubelet[1982]: E1029 00:35:19.009113 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.009128 kubelet[1982]: W1029 00:35:19.009125 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.009243 kubelet[1982]: E1029 00:35:19.009133 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.008000 audit: BPF prog-id=116 op=LOAD Oct 29 00:35:19.008000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435626634393435616536303732313362653766643964343833616135 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit: BPF prog-id=117 op=LOAD Oct 29 00:35:19.009000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435626634393435616536303732313362653766643964343833616135 Oct 29 00:35:19.009000 audit: BPF prog-id=117 op=UNLOAD Oct 29 00:35:19.009000 audit: BPF prog-id=116 op=UNLOAD Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.009000 audit: BPF prog-id=118 op=LOAD Oct 29 00:35:19.009000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435626634393435616536303732313362653766643964343833616135 Oct 29 00:35:19.039661 env[1227]: time="2025-10-29T00:35:19.039615081Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-56d779fdb5-pdhxz,Uid:0b541e8f-bc09-401a-a7ef-8bcefdcb57b8,Namespace:calico-system,Attempt:0,} returns sandbox id \"45bf4945ae607213be7fd9d483aa522287670e046af9b45b2d57ec9631c02fcf\"" Oct 29 00:35:19.040896 kubelet[1982]: E1029 00:35:19.040856 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:19.042479 env[1227]: time="2025-10-29T00:35:19.042438195Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Oct 29 00:35:19.077252 kubelet[1982]: E1029 00:35:19.077215 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:19.078014 env[1227]: time="2025-10-29T00:35:19.077978575Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-57h69,Uid:4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:19.091954 env[1227]: time="2025-10-29T00:35:19.091881502Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:19.091954 env[1227]: time="2025-10-29T00:35:19.091931024Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:19.091954 env[1227]: time="2025-10-29T00:35:19.091941264Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:19.092207 env[1227]: time="2025-10-29T00:35:19.092142269Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/441c2ff8e0fcce01d7fd94a391bdc745819f10c818fdddde9345c826b903f95d pid=2496 runtime=io.containerd.runc.v2 Oct 29 00:35:19.102470 systemd[1]: Started cri-containerd-441c2ff8e0fcce01d7fd94a391bdc745819f10c818fdddde9345c826b903f95d.scope. Oct 29 00:35:19.108748 kubelet[1982]: E1029 00:35:19.108718 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.108748 kubelet[1982]: W1029 00:35:19.108742 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.108950 kubelet[1982]: E1029 00:35:19.108778 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.109105 kubelet[1982]: E1029 00:35:19.109086 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.109105 kubelet[1982]: W1029 00:35:19.109102 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.109178 kubelet[1982]: E1029 00:35:19.109113 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.109436 kubelet[1982]: E1029 00:35:19.109403 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.109476 kubelet[1982]: W1029 00:35:19.109435 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.109476 kubelet[1982]: E1029 00:35:19.109468 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.109720 kubelet[1982]: E1029 00:35:19.109707 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.109720 kubelet[1982]: W1029 00:35:19.109720 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.109788 kubelet[1982]: E1029 00:35:19.109730 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.109914 kubelet[1982]: E1029 00:35:19.109902 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.109947 kubelet[1982]: W1029 00:35:19.109927 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.109947 kubelet[1982]: E1029 00:35:19.109939 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.110214 kubelet[1982]: E1029 00:35:19.110199 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.110214 kubelet[1982]: W1029 00:35:19.110212 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.110276 kubelet[1982]: E1029 00:35:19.110222 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.110467 kubelet[1982]: E1029 00:35:19.110452 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.110500 kubelet[1982]: W1029 00:35:19.110466 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.110500 kubelet[1982]: E1029 00:35:19.110491 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.110764 kubelet[1982]: E1029 00:35:19.110730 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.110838 kubelet[1982]: W1029 00:35:19.110764 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.110838 kubelet[1982]: E1029 00:35:19.110778 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.111032 kubelet[1982]: E1029 00:35:19.111017 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.111069 kubelet[1982]: W1029 00:35:19.111034 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.111069 kubelet[1982]: E1029 00:35:19.111061 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.111290 kubelet[1982]: E1029 00:35:19.111261 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.111290 kubelet[1982]: W1029 00:35:19.111286 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.111365 kubelet[1982]: E1029 00:35:19.111296 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.111568 kubelet[1982]: E1029 00:35:19.111554 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.111568 kubelet[1982]: W1029 00:35:19.111567 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.111641 kubelet[1982]: E1029 00:35:19.111576 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.111784 kubelet[1982]: E1029 00:35:19.111772 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.111784 kubelet[1982]: W1029 00:35:19.111783 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.111868 kubelet[1982]: E1029 00:35:19.111792 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.112025 kubelet[1982]: E1029 00:35:19.112012 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.112060 kubelet[1982]: W1029 00:35:19.112025 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.112060 kubelet[1982]: E1029 00:35:19.112034 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.113036 kubelet[1982]: E1029 00:35:19.112321 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.113036 kubelet[1982]: W1029 00:35:19.112337 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.113036 kubelet[1982]: E1029 00:35:19.112360 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.113036 kubelet[1982]: E1029 00:35:19.112624 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.113036 kubelet[1982]: W1029 00:35:19.112636 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.113036 kubelet[1982]: E1029 00:35:19.112646 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.113036 kubelet[1982]: E1029 00:35:19.112921 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.113036 kubelet[1982]: W1029 00:35:19.112936 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.113036 kubelet[1982]: E1029 00:35:19.112948 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.113484 kubelet[1982]: E1029 00:35:19.113364 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.113484 kubelet[1982]: W1029 00:35:19.113377 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.113484 kubelet[1982]: E1029 00:35:19.113387 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.113785 kubelet[1982]: E1029 00:35:19.113652 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.113785 kubelet[1982]: W1029 00:35:19.113665 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.113785 kubelet[1982]: E1029 00:35:19.113676 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.114120 kubelet[1982]: E1029 00:35:19.113987 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.114120 kubelet[1982]: W1029 00:35:19.114000 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.114120 kubelet[1982]: E1029 00:35:19.114011 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.114421 kubelet[1982]: E1029 00:35:19.114295 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.114421 kubelet[1982]: W1029 00:35:19.114306 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.114421 kubelet[1982]: E1029 00:35:19.114316 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.114876 kubelet[1982]: E1029 00:35:19.114597 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.114876 kubelet[1982]: W1029 00:35:19.114610 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.114876 kubelet[1982]: E1029 00:35:19.114620 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.114997 kubelet[1982]: E1029 00:35:19.114956 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.114997 kubelet[1982]: W1029 00:35:19.114969 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.114997 kubelet[1982]: E1029 00:35:19.114981 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.115161 kubelet[1982]: E1029 00:35:19.115142 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.115187 kubelet[1982]: W1029 00:35:19.115170 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.115187 kubelet[1982]: E1029 00:35:19.115180 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.115999 kubelet[1982]: E1029 00:35:19.115434 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.115999 kubelet[1982]: W1029 00:35:19.115450 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.115999 kubelet[1982]: E1029 00:35:19.115460 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.115999 kubelet[1982]: E1029 00:35:19.115751 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.115999 kubelet[1982]: W1029 00:35:19.115763 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.115999 kubelet[1982]: E1029 00:35:19.115774 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.117000 audit: BPF prog-id=119 op=LOAD Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2496 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434316332666638653066636365303164376664393461333931626463 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2496 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434316332666638653066636365303164376664393461333931626463 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit: BPF prog-id=120 op=LOAD Oct 29 00:35:19.118000 audit[2506]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2496 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434316332666638653066636365303164376664393461333931626463 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit: BPF prog-id=121 op=LOAD Oct 29 00:35:19.118000 audit[2506]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2496 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434316332666638653066636365303164376664393461333931626463 Oct 29 00:35:19.118000 audit: BPF prog-id=121 op=UNLOAD Oct 29 00:35:19.118000 audit: BPF prog-id=120 op=UNLOAD Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:19.118000 audit: BPF prog-id=122 op=LOAD Oct 29 00:35:19.118000 audit[2506]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2496 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434316332666638653066636365303164376664393461333931626463 Oct 29 00:35:19.134531 kubelet[1982]: E1029 00:35:19.134504 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:19.134531 kubelet[1982]: W1029 00:35:19.134530 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:19.134691 kubelet[1982]: E1029 00:35:19.134550 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:19.135949 env[1227]: time="2025-10-29T00:35:19.135913306Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-57h69,Uid:4ea9b65c-34ec-4537-add0-dbf3ddf6c0b5,Namespace:calico-system,Attempt:0,} returns sandbox id \"441c2ff8e0fcce01d7fd94a391bdc745819f10c818fdddde9345c826b903f95d\"" Oct 29 00:35:19.136564 kubelet[1982]: E1029 00:35:19.136544 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:19.578000 audit[2557]: NETFILTER_CFG table=filter:101 family=2 entries=22 op=nft_register_rule pid=2557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:19.578000 audit[2557]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe86644c0 a2=0 a3=1 items=0 ppid=2093 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.578000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:19.587000 audit[2557]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=2557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:19.587000 audit[2557]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe86644c0 a2=0 a3=1 items=0 ppid=2093 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:19.587000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:20.285241 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3357778345.mount: Deactivated successfully. Oct 29 00:35:20.852757 kubelet[1982]: E1029 00:35:20.852700 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:21.229932 env[1227]: time="2025-10-29T00:35:21.229796617Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:21.232107 env[1227]: time="2025-10-29T00:35:21.232058512Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:21.233334 env[1227]: time="2025-10-29T00:35:21.233296063Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:21.235450 env[1227]: time="2025-10-29T00:35:21.235409515Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:21.235907 env[1227]: time="2025-10-29T00:35:21.235875686Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b\"" Oct 29 00:35:21.237644 env[1227]: time="2025-10-29T00:35:21.237618649Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Oct 29 00:35:21.255822 env[1227]: time="2025-10-29T00:35:21.255760376Z" level=info msg="CreateContainer within sandbox \"45bf4945ae607213be7fd9d483aa522287670e046af9b45b2d57ec9631c02fcf\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 29 00:35:21.273765 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1827006692.mount: Deactivated successfully. Oct 29 00:35:21.277841 env[1227]: time="2025-10-29T00:35:21.277090461Z" level=info msg="CreateContainer within sandbox \"45bf4945ae607213be7fd9d483aa522287670e046af9b45b2d57ec9631c02fcf\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"98cc760552ad8feee9993cab25516894b1b6bad6a57c3d343177919247c6016e\"" Oct 29 00:35:21.278564 env[1227]: time="2025-10-29T00:35:21.278535816Z" level=info msg="StartContainer for \"98cc760552ad8feee9993cab25516894b1b6bad6a57c3d343177919247c6016e\"" Oct 29 00:35:21.305488 systemd[1]: Started cri-containerd-98cc760552ad8feee9993cab25516894b1b6bad6a57c3d343177919247c6016e.scope. Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.323000 audit: BPF prog-id=123 op=LOAD Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2423 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938636337363035353261643866656565393939336361623235353136 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2423 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938636337363035353261643866656565393939336361623235353136 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit: BPF prog-id=124 op=LOAD Oct 29 00:35:21.324000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2423 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938636337363035353261643866656565393939336361623235353136 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit: BPF prog-id=125 op=LOAD Oct 29 00:35:21.324000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2423 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938636337363035353261643866656565393939336361623235353136 Oct 29 00:35:21.324000 audit: BPF prog-id=125 op=UNLOAD Oct 29 00:35:21.324000 audit: BPF prog-id=124 op=UNLOAD Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.324000 audit: BPF prog-id=126 op=LOAD Oct 29 00:35:21.324000 audit[2568]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2423 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938636337363035353261643866656565393939336361623235353136 Oct 29 00:35:21.344896 env[1227]: time="2025-10-29T00:35:21.344850249Z" level=info msg="StartContainer for \"98cc760552ad8feee9993cab25516894b1b6bad6a57c3d343177919247c6016e\" returns successfully" Oct 29 00:35:21.946852 kubelet[1982]: E1029 00:35:21.945944 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:22.015683 kubelet[1982]: E1029 00:35:22.015630 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.015683 kubelet[1982]: W1029 00:35:22.015665 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.016912 kubelet[1982]: E1029 00:35:22.016851 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.017202 kubelet[1982]: E1029 00:35:22.017167 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.017202 kubelet[1982]: W1029 00:35:22.017181 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.017202 kubelet[1982]: E1029 00:35:22.017194 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.017423 kubelet[1982]: E1029 00:35:22.017391 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.017423 kubelet[1982]: W1029 00:35:22.017403 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.017423 kubelet[1982]: E1029 00:35:22.017411 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.017602 kubelet[1982]: E1029 00:35:22.017590 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.017602 kubelet[1982]: W1029 00:35:22.017601 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.017655 kubelet[1982]: E1029 00:35:22.017610 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.017808 kubelet[1982]: E1029 00:35:22.017795 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.017808 kubelet[1982]: W1029 00:35:22.017805 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.017891 kubelet[1982]: E1029 00:35:22.017832 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.017981 kubelet[1982]: E1029 00:35:22.017970 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.018015 kubelet[1982]: W1029 00:35:22.017986 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.018015 kubelet[1982]: E1029 00:35:22.017995 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.018134 kubelet[1982]: E1029 00:35:22.018124 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.018161 kubelet[1982]: W1029 00:35:22.018140 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.018161 kubelet[1982]: E1029 00:35:22.018147 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.018282 kubelet[1982]: E1029 00:35:22.018272 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.018312 kubelet[1982]: W1029 00:35:22.018281 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.018312 kubelet[1982]: E1029 00:35:22.018297 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.018485 kubelet[1982]: E1029 00:35:22.018467 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.018485 kubelet[1982]: W1029 00:35:22.018484 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.018549 kubelet[1982]: E1029 00:35:22.018494 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.018739 kubelet[1982]: E1029 00:35:22.018717 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.018739 kubelet[1982]: W1029 00:35:22.018738 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.018805 kubelet[1982]: E1029 00:35:22.018747 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.019059 kubelet[1982]: E1029 00:35:22.019025 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.019059 kubelet[1982]: W1029 00:35:22.019038 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.019059 kubelet[1982]: E1029 00:35:22.019057 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.019222 kubelet[1982]: E1029 00:35:22.019210 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.019222 kubelet[1982]: W1029 00:35:22.019221 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.019276 kubelet[1982]: E1029 00:35:22.019229 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.019529 kubelet[1982]: E1029 00:35:22.019501 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.019529 kubelet[1982]: W1029 00:35:22.019516 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.019529 kubelet[1982]: E1029 00:35:22.019526 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.019705 kubelet[1982]: E1029 00:35:22.019688 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.019705 kubelet[1982]: W1029 00:35:22.019699 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.019705 kubelet[1982]: E1029 00:35:22.019706 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.019880 kubelet[1982]: E1029 00:35:22.019868 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.019880 kubelet[1982]: W1029 00:35:22.019878 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.019954 kubelet[1982]: E1029 00:35:22.019886 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.038281 kubelet[1982]: E1029 00:35:22.038250 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.038281 kubelet[1982]: W1029 00:35:22.038272 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.038451 kubelet[1982]: E1029 00:35:22.038293 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.038492 kubelet[1982]: E1029 00:35:22.038458 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.038492 kubelet[1982]: W1029 00:35:22.038466 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.038492 kubelet[1982]: E1029 00:35:22.038474 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.038663 kubelet[1982]: E1029 00:35:22.038643 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.038663 kubelet[1982]: W1029 00:35:22.038657 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.038733 kubelet[1982]: E1029 00:35:22.038666 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.038896 kubelet[1982]: E1029 00:35:22.038882 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.038896 kubelet[1982]: W1029 00:35:22.038894 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.038974 kubelet[1982]: E1029 00:35:22.038903 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.039105 kubelet[1982]: E1029 00:35:22.039093 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.039105 kubelet[1982]: W1029 00:35:22.039102 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.039173 kubelet[1982]: E1029 00:35:22.039109 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.039257 kubelet[1982]: E1029 00:35:22.039246 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.039257 kubelet[1982]: W1029 00:35:22.039255 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.039320 kubelet[1982]: E1029 00:35:22.039262 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.039433 kubelet[1982]: E1029 00:35:22.039422 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.039433 kubelet[1982]: W1029 00:35:22.039434 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.039500 kubelet[1982]: E1029 00:35:22.039442 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.039812 kubelet[1982]: E1029 00:35:22.039796 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.039866 kubelet[1982]: W1029 00:35:22.039811 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.039866 kubelet[1982]: E1029 00:35:22.039833 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.040014 kubelet[1982]: E1029 00:35:22.040001 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.040014 kubelet[1982]: W1029 00:35:22.040012 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.040068 kubelet[1982]: E1029 00:35:22.040021 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.040243 kubelet[1982]: E1029 00:35:22.040230 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.040270 kubelet[1982]: W1029 00:35:22.040243 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.040270 kubelet[1982]: E1029 00:35:22.040252 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.042694 kubelet[1982]: E1029 00:35:22.042609 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.042694 kubelet[1982]: W1029 00:35:22.042629 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.042694 kubelet[1982]: E1029 00:35:22.042642 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.043605 kubelet[1982]: E1029 00:35:22.042925 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.043676 kubelet[1982]: W1029 00:35:22.043611 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.043676 kubelet[1982]: E1029 00:35:22.043630 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.045640 kubelet[1982]: E1029 00:35:22.045618 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.045640 kubelet[1982]: W1029 00:35:22.045635 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.045755 kubelet[1982]: E1029 00:35:22.045647 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.046924 kubelet[1982]: E1029 00:35:22.046905 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.046924 kubelet[1982]: W1029 00:35:22.046922 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.047015 kubelet[1982]: E1029 00:35:22.046941 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.047164 kubelet[1982]: E1029 00:35:22.047150 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.047211 kubelet[1982]: W1029 00:35:22.047164 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.047211 kubelet[1982]: E1029 00:35:22.047175 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.047929 kubelet[1982]: E1029 00:35:22.047900 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.047929 kubelet[1982]: W1029 00:35:22.047915 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.047929 kubelet[1982]: E1029 00:35:22.047929 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.048903 kubelet[1982]: E1029 00:35:22.048879 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.048903 kubelet[1982]: W1029 00:35:22.048895 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.048903 kubelet[1982]: E1029 00:35:22.048907 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.051911 kubelet[1982]: E1029 00:35:22.051852 1982 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:22.051911 kubelet[1982]: W1029 00:35:22.051870 1982 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:22.051911 kubelet[1982]: E1029 00:35:22.051883 1982 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:22.404392 env[1227]: time="2025-10-29T00:35:22.404337995Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:22.406424 env[1227]: time="2025-10-29T00:35:22.406392004Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:22.407886 env[1227]: time="2025-10-29T00:35:22.407857479Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:22.409618 env[1227]: time="2025-10-29T00:35:22.409586880Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:22.410259 env[1227]: time="2025-10-29T00:35:22.410230215Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640\"" Oct 29 00:35:22.414571 env[1227]: time="2025-10-29T00:35:22.414514237Z" level=info msg="CreateContainer within sandbox \"441c2ff8e0fcce01d7fd94a391bdc745819f10c818fdddde9345c826b903f95d\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 29 00:35:22.431177 env[1227]: time="2025-10-29T00:35:22.431122952Z" level=info msg="CreateContainer within sandbox \"441c2ff8e0fcce01d7fd94a391bdc745819f10c818fdddde9345c826b903f95d\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"92a2e6506cacaf8f92dfec0821a201b329d6e4324bd90212684a2e5e4bfc8d9b\"" Oct 29 00:35:22.431785 env[1227]: time="2025-10-29T00:35:22.431759807Z" level=info msg="StartContainer for \"92a2e6506cacaf8f92dfec0821a201b329d6e4324bd90212684a2e5e4bfc8d9b\"" Oct 29 00:35:22.452184 systemd[1]: Started cri-containerd-92a2e6506cacaf8f92dfec0821a201b329d6e4324bd90212684a2e5e4bfc8d9b.scope. Oct 29 00:35:22.468000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.470436 kernel: kauditd_printk_skb: 179 callbacks suppressed Oct 29 00:35:22.470506 kernel: audit: type=1400 audit(1761698122.468:985): avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.468000 audit[2643]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2496 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.476900 kernel: audit: type=1300 audit(1761698122.468:985): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2496 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613265363530366361636166386639326466656330383231613230 Oct 29 00:35:22.480404 kernel: audit: type=1327 audit(1761698122.468:985): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613265363530366361636166386639326466656330383231613230 Oct 29 00:35:22.480473 kernel: audit: type=1400 audit(1761698122.471:986): avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.485869 kernel: audit: type=1400 audit(1761698122.471:986): avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.488774 kernel: audit: type=1400 audit(1761698122.471:986): avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.491192 kernel: audit: type=1400 audit(1761698122.471:986): avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.493634 kernel: audit: type=1400 audit(1761698122.471:986): avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.496083 kernel: audit: type=1400 audit(1761698122.471:986): avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.498480 kernel: audit: type=1400 audit(1761698122.471:986): avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.471000 audit: BPF prog-id=127 op=LOAD Oct 29 00:35:22.471000 audit[2643]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2496 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613265363530366361636166386639326466656330383231613230 Oct 29 00:35:22.472000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.472000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.472000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.472000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.472000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.472000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.472000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.472000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.472000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.472000 audit: BPF prog-id=128 op=LOAD Oct 29 00:35:22.472000 audit[2643]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2496 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613265363530366361636166386639326466656330383231613230 Oct 29 00:35:22.476000 audit: BPF prog-id=128 op=UNLOAD Oct 29 00:35:22.476000 audit: BPF prog-id=127 op=UNLOAD Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { perfmon } for pid=2643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit[2643]: AVC avc: denied { bpf } for pid=2643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.476000 audit: BPF prog-id=129 op=LOAD Oct 29 00:35:22.476000 audit[2643]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2496 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932613265363530366361636166386639326466656330383231613230 Oct 29 00:35:22.504447 env[1227]: time="2025-10-29T00:35:22.504401975Z" level=info msg="StartContainer for \"92a2e6506cacaf8f92dfec0821a201b329d6e4324bd90212684a2e5e4bfc8d9b\" returns successfully" Oct 29 00:35:22.512688 systemd[1]: cri-containerd-92a2e6506cacaf8f92dfec0821a201b329d6e4324bd90212684a2e5e4bfc8d9b.scope: Deactivated successfully. Oct 29 00:35:22.517000 audit: BPF prog-id=129 op=UNLOAD Oct 29 00:35:22.632227 env[1227]: time="2025-10-29T00:35:22.632181175Z" level=info msg="shim disconnected" id=92a2e6506cacaf8f92dfec0821a201b329d6e4324bd90212684a2e5e4bfc8d9b Oct 29 00:35:22.632227 env[1227]: time="2025-10-29T00:35:22.632225176Z" level=warning msg="cleaning up after shim disconnected" id=92a2e6506cacaf8f92dfec0821a201b329d6e4324bd90212684a2e5e4bfc8d9b namespace=k8s.io Oct 29 00:35:22.632453 env[1227]: time="2025-10-29T00:35:22.632235057Z" level=info msg="cleaning up dead shim" Oct 29 00:35:22.639975 env[1227]: time="2025-10-29T00:35:22.639930240Z" level=warning msg="cleanup warnings time=\"2025-10-29T00:35:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2682 runtime=io.containerd.runc.v2\n" Oct 29 00:35:22.851425 kubelet[1982]: E1029 00:35:22.851379 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:22.938177 kubelet[1982]: I1029 00:35:22.938144 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Oct 29 00:35:22.938428 kubelet[1982]: E1029 00:35:22.938408 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:22.939704 kubelet[1982]: E1029 00:35:22.939006 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:22.940328 env[1227]: time="2025-10-29T00:35:22.940294705Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Oct 29 00:35:22.958082 kubelet[1982]: I1029 00:35:22.958009 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-56d779fdb5-pdhxz" podStartSLOduration=2.762516385 podStartE2EDuration="4.957994487s" podCreationTimestamp="2025-10-29 00:35:18 +0000 UTC" firstStartedPulling="2025-10-29 00:35:19.041797299 +0000 UTC m=+26.300624997" lastFinishedPulling="2025-10-29 00:35:21.237275361 +0000 UTC m=+28.496103099" observedRunningTime="2025-10-29 00:35:21.968698604 +0000 UTC m=+29.227526342" watchObservedRunningTime="2025-10-29 00:35:22.957994487 +0000 UTC m=+30.216822225" Oct 29 00:35:23.244274 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-92a2e6506cacaf8f92dfec0821a201b329d6e4324bd90212684a2e5e4bfc8d9b-rootfs.mount: Deactivated successfully. Oct 29 00:35:24.852431 kubelet[1982]: E1029 00:35:24.852384 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:25.975454 env[1227]: time="2025-10-29T00:35:25.974958793Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:25.976397 env[1227]: time="2025-10-29T00:35:25.976352503Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:25.980072 env[1227]: time="2025-10-29T00:35:25.979130163Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:25.980813 env[1227]: time="2025-10-29T00:35:25.980780959Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:25.981386 env[1227]: time="2025-10-29T00:35:25.981352931Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2\"" Oct 29 00:35:25.989601 env[1227]: time="2025-10-29T00:35:25.989533668Z" level=info msg="CreateContainer within sandbox \"441c2ff8e0fcce01d7fd94a391bdc745819f10c818fdddde9345c826b903f95d\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 29 00:35:26.007112 env[1227]: time="2025-10-29T00:35:26.007063243Z" level=info msg="CreateContainer within sandbox \"441c2ff8e0fcce01d7fd94a391bdc745819f10c818fdddde9345c826b903f95d\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"47b901cb720606ea80c45a74e806f04b25f2d36d43b1cc50f96fe909c2ec7e16\"" Oct 29 00:35:26.008862 env[1227]: time="2025-10-29T00:35:26.007598054Z" level=info msg="StartContainer for \"47b901cb720606ea80c45a74e806f04b25f2d36d43b1cc50f96fe909c2ec7e16\"" Oct 29 00:35:26.032501 systemd[1]: Started cri-containerd-47b901cb720606ea80c45a74e806f04b25f2d36d43b1cc50f96fe909c2ec7e16.scope. Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400023d5a0 a2=3c a3=0 items=0 ppid=2496 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:26.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437623930316362373230363036656138306334356137346538303666 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.051000 audit: BPF prog-id=130 op=LOAD Oct 29 00:35:26.051000 audit[2706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400023d8e0 a2=78 a3=0 items=0 ppid=2496 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:26.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437623930316362373230363036656138306334356137346538303666 Oct 29 00:35:26.052000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.052000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.052000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.052000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.052000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.052000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.052000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.052000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.052000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.052000 audit: BPF prog-id=131 op=LOAD Oct 29 00:35:26.052000 audit[2706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400023d670 a2=78 a3=0 items=0 ppid=2496 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:26.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437623930316362373230363036656138306334356137346538303666 Oct 29 00:35:26.053000 audit: BPF prog-id=131 op=UNLOAD Oct 29 00:35:26.053000 audit: BPF prog-id=130 op=UNLOAD Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { perfmon } for pid=2706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit[2706]: AVC avc: denied { bpf } for pid=2706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:26.053000 audit: BPF prog-id=132 op=LOAD Oct 29 00:35:26.053000 audit[2706]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400023db40 a2=78 a3=0 items=0 ppid=2496 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:26.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437623930316362373230363036656138306334356137346538303666 Oct 29 00:35:26.071355 env[1227]: time="2025-10-29T00:35:26.071307591Z" level=info msg="StartContainer for \"47b901cb720606ea80c45a74e806f04b25f2d36d43b1cc50f96fe909c2ec7e16\" returns successfully" Oct 29 00:35:26.611783 env[1227]: time="2025-10-29T00:35:26.611725327Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 29 00:35:26.614023 systemd[1]: cri-containerd-47b901cb720606ea80c45a74e806f04b25f2d36d43b1cc50f96fe909c2ec7e16.scope: Deactivated successfully. Oct 29 00:35:26.619000 audit: BPF prog-id=132 op=UNLOAD Oct 29 00:35:26.633699 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-47b901cb720606ea80c45a74e806f04b25f2d36d43b1cc50f96fe909c2ec7e16-rootfs.mount: Deactivated successfully. Oct 29 00:35:26.637578 kubelet[1982]: I1029 00:35:26.637242 1982 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Oct 29 00:35:26.661883 env[1227]: time="2025-10-29T00:35:26.661833578Z" level=info msg="shim disconnected" id=47b901cb720606ea80c45a74e806f04b25f2d36d43b1cc50f96fe909c2ec7e16 Oct 29 00:35:26.661883 env[1227]: time="2025-10-29T00:35:26.661882379Z" level=warning msg="cleaning up after shim disconnected" id=47b901cb720606ea80c45a74e806f04b25f2d36d43b1cc50f96fe909c2ec7e16 namespace=k8s.io Oct 29 00:35:26.662190 env[1227]: time="2025-10-29T00:35:26.661892980Z" level=info msg="cleaning up dead shim" Oct 29 00:35:26.672167 env[1227]: time="2025-10-29T00:35:26.672121354Z" level=warning msg="cleanup warnings time=\"2025-10-29T00:35:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2746 runtime=io.containerd.runc.v2\n" Oct 29 00:35:26.700136 systemd[1]: Created slice kubepods-besteffort-pod1cb90272_e579_4d3e_853a_0d02317a9f36.slice. Oct 29 00:35:26.706416 systemd[1]: Created slice kubepods-besteffort-pod4c8785a3_edfa_416a_9abb_6a5e8713af25.slice. Oct 29 00:35:26.709963 systemd[1]: Created slice kubepods-burstable-podfdba9f1f_ced4_486c_bbb9_2da28071f6cb.slice. Oct 29 00:35:26.714947 systemd[1]: Created slice kubepods-besteffort-pod50a44f58_1837_43d6_9581_aa2468ce50ce.slice. Oct 29 00:35:26.722638 systemd[1]: Created slice kubepods-besteffort-pod4d0f98b5_229e_4f67_a068_6905ca873422.slice. Oct 29 00:35:26.732511 systemd[1]: Created slice kubepods-besteffort-podc7a94bd2_06d9_4b3b_bb0e_0a6995839dda.slice. Oct 29 00:35:26.738311 systemd[1]: Created slice kubepods-burstable-pod5138df2c_bd88_45eb_bbe6_65f2f2a1ce22.slice. Oct 29 00:35:26.744879 systemd[1]: Created slice kubepods-besteffort-podff489a5d_a848_4924_bf2e_dc0075ba3a95.slice. Oct 29 00:35:26.767300 kubelet[1982]: I1029 00:35:26.767259 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j7c9q\" (UniqueName: \"kubernetes.io/projected/c7a94bd2-06d9-4b3b-bb0e-0a6995839dda-kube-api-access-j7c9q\") pod \"calico-apiserver-5cc878fd98-2kfdl\" (UID: \"c7a94bd2-06d9-4b3b-bb0e-0a6995839dda\") " pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" Oct 29 00:35:26.767300 kubelet[1982]: I1029 00:35:26.767296 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-99z7h\" (UniqueName: \"kubernetes.io/projected/5138df2c-bd88-45eb-bbe6-65f2f2a1ce22-kube-api-access-99z7h\") pod \"coredns-674b8bbfcf-w6z9v\" (UID: \"5138df2c-bd88-45eb-bbe6-65f2f2a1ce22\") " pod="kube-system/coredns-674b8bbfcf-w6z9v" Oct 29 00:35:26.767517 kubelet[1982]: I1029 00:35:26.767318 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7tnkx\" (UniqueName: \"kubernetes.io/projected/fdba9f1f-ced4-486c-bbb9-2da28071f6cb-kube-api-access-7tnkx\") pod \"coredns-674b8bbfcf-nqdlc\" (UID: \"fdba9f1f-ced4-486c-bbb9-2da28071f6cb\") " pod="kube-system/coredns-674b8bbfcf-nqdlc" Oct 29 00:35:26.767517 kubelet[1982]: I1029 00:35:26.767337 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1cb90272-e579-4d3e-853a-0d02317a9f36-tigera-ca-bundle\") pod \"calico-kube-controllers-b97b6d78f-whrv6\" (UID: \"1cb90272-e579-4d3e-853a-0d02317a9f36\") " pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" Oct 29 00:35:26.767517 kubelet[1982]: I1029 00:35:26.767353 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2xcld\" (UniqueName: \"kubernetes.io/projected/1cb90272-e579-4d3e-853a-0d02317a9f36-kube-api-access-2xcld\") pod \"calico-kube-controllers-b97b6d78f-whrv6\" (UID: \"1cb90272-e579-4d3e-853a-0d02317a9f36\") " pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" Oct 29 00:35:26.767517 kubelet[1982]: I1029 00:35:26.767374 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jg4g9\" (UniqueName: \"kubernetes.io/projected/50a44f58-1837-43d6-9581-aa2468ce50ce-kube-api-access-jg4g9\") pod \"calico-apiserver-5cc84f4489-jjgxv\" (UID: \"50a44f58-1837-43d6-9581-aa2468ce50ce\") " pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" Oct 29 00:35:26.767517 kubelet[1982]: I1029 00:35:26.767455 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/50a44f58-1837-43d6-9581-aa2468ce50ce-calico-apiserver-certs\") pod \"calico-apiserver-5cc84f4489-jjgxv\" (UID: \"50a44f58-1837-43d6-9581-aa2468ce50ce\") " pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" Oct 29 00:35:26.771236 kubelet[1982]: I1029 00:35:26.767498 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c7a94bd2-06d9-4b3b-bb0e-0a6995839dda-calico-apiserver-certs\") pod \"calico-apiserver-5cc878fd98-2kfdl\" (UID: \"c7a94bd2-06d9-4b3b-bb0e-0a6995839dda\") " pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" Oct 29 00:35:26.771236 kubelet[1982]: I1029 00:35:26.767529 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/4d0f98b5-229e-4f67-a068-6905ca873422-goldmane-key-pair\") pod \"goldmane-666569f655-c7jtc\" (UID: \"4d0f98b5-229e-4f67-a068-6905ca873422\") " pod="calico-system/goldmane-666569f655-c7jtc" Oct 29 00:35:26.771236 kubelet[1982]: I1029 00:35:26.767560 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/4c8785a3-edfa-416a-9abb-6a5e8713af25-calico-apiserver-certs\") pod \"calico-apiserver-5cc84f4489-klnwg\" (UID: \"4c8785a3-edfa-416a-9abb-6a5e8713af25\") " pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" Oct 29 00:35:26.771236 kubelet[1982]: I1029 00:35:26.767580 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ff489a5d-a848-4924-bf2e-dc0075ba3a95-whisker-ca-bundle\") pod \"whisker-989d784c9-qn9xh\" (UID: \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\") " pod="calico-system/whisker-989d784c9-qn9xh" Oct 29 00:35:26.771236 kubelet[1982]: I1029 00:35:26.767611 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mv7v9\" (UniqueName: \"kubernetes.io/projected/ff489a5d-a848-4924-bf2e-dc0075ba3a95-kube-api-access-mv7v9\") pod \"whisker-989d784c9-qn9xh\" (UID: \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\") " pod="calico-system/whisker-989d784c9-qn9xh" Oct 29 00:35:26.771370 kubelet[1982]: I1029 00:35:26.767640 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4d0f98b5-229e-4f67-a068-6905ca873422-goldmane-ca-bundle\") pod \"goldmane-666569f655-c7jtc\" (UID: \"4d0f98b5-229e-4f67-a068-6905ca873422\") " pod="calico-system/goldmane-666569f655-c7jtc" Oct 29 00:35:26.771370 kubelet[1982]: I1029 00:35:26.767680 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k85rf\" (UniqueName: \"kubernetes.io/projected/4d0f98b5-229e-4f67-a068-6905ca873422-kube-api-access-k85rf\") pod \"goldmane-666569f655-c7jtc\" (UID: \"4d0f98b5-229e-4f67-a068-6905ca873422\") " pod="calico-system/goldmane-666569f655-c7jtc" Oct 29 00:35:26.771370 kubelet[1982]: I1029 00:35:26.767712 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/5138df2c-bd88-45eb-bbe6-65f2f2a1ce22-config-volume\") pod \"coredns-674b8bbfcf-w6z9v\" (UID: \"5138df2c-bd88-45eb-bbe6-65f2f2a1ce22\") " pod="kube-system/coredns-674b8bbfcf-w6z9v" Oct 29 00:35:26.771370 kubelet[1982]: I1029 00:35:26.767730 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f9wvg\" (UniqueName: \"kubernetes.io/projected/4c8785a3-edfa-416a-9abb-6a5e8713af25-kube-api-access-f9wvg\") pod \"calico-apiserver-5cc84f4489-klnwg\" (UID: \"4c8785a3-edfa-416a-9abb-6a5e8713af25\") " pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" Oct 29 00:35:26.771370 kubelet[1982]: I1029 00:35:26.767745 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/4d0f98b5-229e-4f67-a068-6905ca873422-config\") pod \"goldmane-666569f655-c7jtc\" (UID: \"4d0f98b5-229e-4f67-a068-6905ca873422\") " pod="calico-system/goldmane-666569f655-c7jtc" Oct 29 00:35:26.771498 kubelet[1982]: I1029 00:35:26.767761 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/fdba9f1f-ced4-486c-bbb9-2da28071f6cb-config-volume\") pod \"coredns-674b8bbfcf-nqdlc\" (UID: \"fdba9f1f-ced4-486c-bbb9-2da28071f6cb\") " pod="kube-system/coredns-674b8bbfcf-nqdlc" Oct 29 00:35:26.771498 kubelet[1982]: I1029 00:35:26.767777 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ff489a5d-a848-4924-bf2e-dc0075ba3a95-whisker-backend-key-pair\") pod \"whisker-989d784c9-qn9xh\" (UID: \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\") " pod="calico-system/whisker-989d784c9-qn9xh" Oct 29 00:35:26.855262 systemd[1]: Created slice kubepods-besteffort-pod9522c2ec_7e06_406b_83b4_e2c84866af00.slice. Oct 29 00:35:26.857587 env[1227]: time="2025-10-29T00:35:26.857538684Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-v7x7q,Uid:9522c2ec-7e06-406b-83b4-e2c84866af00,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:26.948964 kubelet[1982]: E1029 00:35:26.948864 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:26.949899 env[1227]: time="2025-10-29T00:35:26.949865700Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Oct 29 00:35:26.973519 env[1227]: time="2025-10-29T00:35:26.972589377Z" level=error msg="Failed to destroy network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:26.973519 env[1227]: time="2025-10-29T00:35:26.972960625Z" level=error msg="encountered an error cleaning up failed sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:26.973519 env[1227]: time="2025-10-29T00:35:26.973006586Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-v7x7q,Uid:9522c2ec-7e06-406b-83b4-e2c84866af00,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:26.974473 kubelet[1982]: E1029 00:35:26.974371 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:26.974626 kubelet[1982]: E1029 00:35:26.974605 1982 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-v7x7q" Oct 29 00:35:26.974721 kubelet[1982]: E1029 00:35:26.974706 1982 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-v7x7q" Oct 29 00:35:26.974852 kubelet[1982]: E1029 00:35:26.974828 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-v7x7q_calico-system(9522c2ec-7e06-406b-83b4-e2c84866af00)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-v7x7q_calico-system(9522c2ec-7e06-406b-83b4-e2c84866af00)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:27.003305 env[1227]: time="2025-10-29T00:35:27.003262019Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-b97b6d78f-whrv6,Uid:1cb90272-e579-4d3e-853a-0d02317a9f36,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:27.008921 env[1227]: time="2025-10-29T00:35:27.008878214Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc84f4489-klnwg,Uid:4c8785a3-edfa-416a-9abb-6a5e8713af25,Namespace:calico-apiserver,Attempt:0,}" Oct 29 00:35:27.012851 kubelet[1982]: E1029 00:35:27.012427 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:27.013482 env[1227]: time="2025-10-29T00:35:27.013445787Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-nqdlc,Uid:fdba9f1f-ced4-486c-bbb9-2da28071f6cb,Namespace:kube-system,Attempt:0,}" Oct 29 00:35:27.019809 env[1227]: time="2025-10-29T00:35:27.019773276Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc84f4489-jjgxv,Uid:50a44f58-1837-43d6-9581-aa2468ce50ce,Namespace:calico-apiserver,Attempt:0,}" Oct 29 00:35:27.031824 env[1227]: time="2025-10-29T00:35:27.031675838Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-c7jtc,Uid:4d0f98b5-229e-4f67-a068-6905ca873422,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:27.037837 env[1227]: time="2025-10-29T00:35:27.037779883Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc878fd98-2kfdl,Uid:c7a94bd2-06d9-4b3b-bb0e-0a6995839dda,Namespace:calico-apiserver,Attempt:0,}" Oct 29 00:35:27.041445 kubelet[1982]: E1029 00:35:27.041408 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:27.042192 env[1227]: time="2025-10-29T00:35:27.042145452Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-w6z9v,Uid:5138df2c-bd88-45eb-bbe6-65f2f2a1ce22,Namespace:kube-system,Attempt:0,}" Oct 29 00:35:27.047737 env[1227]: time="2025-10-29T00:35:27.047684484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-989d784c9-qn9xh,Uid:ff489a5d-a848-4924-bf2e-dc0075ba3a95,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:27.095764 env[1227]: time="2025-10-29T00:35:27.095700623Z" level=error msg="Failed to destroy network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.096371 env[1227]: time="2025-10-29T00:35:27.096325996Z" level=error msg="encountered an error cleaning up failed sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.096451 env[1227]: time="2025-10-29T00:35:27.096394637Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-b97b6d78f-whrv6,Uid:1cb90272-e579-4d3e-853a-0d02317a9f36,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.096743 kubelet[1982]: E1029 00:35:27.096694 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.096985 kubelet[1982]: E1029 00:35:27.096767 1982 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" Oct 29 00:35:27.096985 kubelet[1982]: E1029 00:35:27.096791 1982 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" Oct 29 00:35:27.096985 kubelet[1982]: E1029 00:35:27.096857 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-b97b6d78f-whrv6_calico-system(1cb90272-e579-4d3e-853a-0d02317a9f36)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-b97b6d78f-whrv6_calico-system(1cb90272-e579-4d3e-853a-0d02317a9f36)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" podUID="1cb90272-e579-4d3e-853a-0d02317a9f36" Oct 29 00:35:27.128241 env[1227]: time="2025-10-29T00:35:27.127899239Z" level=error msg="Failed to destroy network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.131462 env[1227]: time="2025-10-29T00:35:27.131403431Z" level=error msg="encountered an error cleaning up failed sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.131620 env[1227]: time="2025-10-29T00:35:27.131482472Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-nqdlc,Uid:fdba9f1f-ced4-486c-bbb9-2da28071f6cb,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.131886 kubelet[1982]: E1029 00:35:27.131841 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.131977 kubelet[1982]: E1029 00:35:27.131905 1982 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-nqdlc" Oct 29 00:35:27.131977 kubelet[1982]: E1029 00:35:27.131934 1982 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-nqdlc" Oct 29 00:35:27.132039 kubelet[1982]: E1029 00:35:27.131977 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-nqdlc_kube-system(fdba9f1f-ced4-486c-bbb9-2da28071f6cb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-nqdlc_kube-system(fdba9f1f-ced4-486c-bbb9-2da28071f6cb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-nqdlc" podUID="fdba9f1f-ced4-486c-bbb9-2da28071f6cb" Oct 29 00:35:27.158427 env[1227]: time="2025-10-29T00:35:27.158364620Z" level=error msg="Failed to destroy network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.158766 env[1227]: time="2025-10-29T00:35:27.158734588Z" level=error msg="encountered an error cleaning up failed sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.158844 env[1227]: time="2025-10-29T00:35:27.158788749Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc84f4489-klnwg,Uid:4c8785a3-edfa-416a-9abb-6a5e8713af25,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.160315 kubelet[1982]: E1029 00:35:27.159044 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.160315 kubelet[1982]: E1029 00:35:27.159115 1982 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" Oct 29 00:35:27.160315 kubelet[1982]: E1029 00:35:27.159150 1982 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" Oct 29 00:35:27.160510 kubelet[1982]: E1029 00:35:27.159206 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5cc84f4489-klnwg_calico-apiserver(4c8785a3-edfa-416a-9abb-6a5e8713af25)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5cc84f4489-klnwg_calico-apiserver(4c8785a3-edfa-416a-9abb-6a5e8713af25)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" podUID="4c8785a3-edfa-416a-9abb-6a5e8713af25" Oct 29 00:35:27.183847 env[1227]: time="2025-10-29T00:35:27.183768018Z" level=error msg="Failed to destroy network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.184197 env[1227]: time="2025-10-29T00:35:27.184160706Z" level=error msg="encountered an error cleaning up failed sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.184262 env[1227]: time="2025-10-29T00:35:27.184220747Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-c7jtc,Uid:4d0f98b5-229e-4f67-a068-6905ca873422,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.184785 kubelet[1982]: E1029 00:35:27.184459 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.184785 kubelet[1982]: E1029 00:35:27.184629 1982 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-c7jtc" Oct 29 00:35:27.184785 kubelet[1982]: E1029 00:35:27.184659 1982 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-c7jtc" Oct 29 00:35:27.185008 kubelet[1982]: E1029 00:35:27.184736 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-c7jtc_calico-system(4d0f98b5-229e-4f67-a068-6905ca873422)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-c7jtc_calico-system(4d0f98b5-229e-4f67-a068-6905ca873422)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-c7jtc" podUID="4d0f98b5-229e-4f67-a068-6905ca873422" Oct 29 00:35:27.188222 env[1227]: time="2025-10-29T00:35:27.188170868Z" level=error msg="Failed to destroy network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.189635 env[1227]: time="2025-10-29T00:35:27.189584897Z" level=error msg="encountered an error cleaning up failed sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.189797 env[1227]: time="2025-10-29T00:35:27.189766260Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc84f4489-jjgxv,Uid:50a44f58-1837-43d6-9581-aa2468ce50ce,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.190197 kubelet[1982]: E1029 00:35:27.190158 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.190280 kubelet[1982]: E1029 00:35:27.190219 1982 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" Oct 29 00:35:27.191031 kubelet[1982]: E1029 00:35:27.190243 1982 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" Oct 29 00:35:27.191100 kubelet[1982]: E1029 00:35:27.191075 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5cc84f4489-jjgxv_calico-apiserver(50a44f58-1837-43d6-9581-aa2468ce50ce)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5cc84f4489-jjgxv_calico-apiserver(50a44f58-1837-43d6-9581-aa2468ce50ce)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" podUID="50a44f58-1837-43d6-9581-aa2468ce50ce" Oct 29 00:35:27.193731 env[1227]: time="2025-10-29T00:35:27.193684060Z" level=error msg="Failed to destroy network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.194163 env[1227]: time="2025-10-29T00:35:27.194129189Z" level=error msg="encountered an error cleaning up failed sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.194238 env[1227]: time="2025-10-29T00:35:27.194209831Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc878fd98-2kfdl,Uid:c7a94bd2-06d9-4b3b-bb0e-0a6995839dda,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.194551 kubelet[1982]: E1029 00:35:27.194421 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.194551 kubelet[1982]: E1029 00:35:27.194498 1982 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" Oct 29 00:35:27.194551 kubelet[1982]: E1029 00:35:27.194521 1982 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" Oct 29 00:35:27.194804 kubelet[1982]: E1029 00:35:27.194752 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5cc878fd98-2kfdl_calico-apiserver(c7a94bd2-06d9-4b3b-bb0e-0a6995839dda)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5cc878fd98-2kfdl_calico-apiserver(c7a94bd2-06d9-4b3b-bb0e-0a6995839dda)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" podUID="c7a94bd2-06d9-4b3b-bb0e-0a6995839dda" Oct 29 00:35:27.214208 env[1227]: time="2025-10-29T00:35:27.214072276Z" level=error msg="Failed to destroy network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.218411 env[1227]: time="2025-10-29T00:35:27.218349923Z" level=error msg="Failed to destroy network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.219688 env[1227]: time="2025-10-29T00:35:27.219121298Z" level=error msg="encountered an error cleaning up failed sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.219772 env[1227]: time="2025-10-29T00:35:27.219604108Z" level=error msg="encountered an error cleaning up failed sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.219772 env[1227]: time="2025-10-29T00:35:27.219746231Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-w6z9v,Uid:5138df2c-bd88-45eb-bbe6-65f2f2a1ce22,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.219905 env[1227]: time="2025-10-29T00:35:27.219695750Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-989d784c9-qn9xh,Uid:ff489a5d-a848-4924-bf2e-dc0075ba3a95,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.220257 kubelet[1982]: E1029 00:35:27.220214 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.220355 kubelet[1982]: E1029 00:35:27.220280 1982 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-989d784c9-qn9xh" Oct 29 00:35:27.220355 kubelet[1982]: E1029 00:35:27.220307 1982 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-989d784c9-qn9xh" Oct 29 00:35:27.220418 kubelet[1982]: E1029 00:35:27.220368 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-989d784c9-qn9xh_calico-system(ff489a5d-a848-4924-bf2e-dc0075ba3a95)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-989d784c9-qn9xh_calico-system(ff489a5d-a848-4924-bf2e-dc0075ba3a95)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-989d784c9-qn9xh" podUID="ff489a5d-a848-4924-bf2e-dc0075ba3a95" Oct 29 00:35:27.220740 kubelet[1982]: E1029 00:35:27.220706 1982 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:27.220788 kubelet[1982]: E1029 00:35:27.220752 1982 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-w6z9v" Oct 29 00:35:27.220852 kubelet[1982]: E1029 00:35:27.220788 1982 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-w6z9v" Oct 29 00:35:27.220887 kubelet[1982]: E1029 00:35:27.220850 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-w6z9v_kube-system(5138df2c-bd88-45eb-bbe6-65f2f2a1ce22)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-w6z9v_kube-system(5138df2c-bd88-45eb-bbe6-65f2f2a1ce22)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-w6z9v" podUID="5138df2c-bd88-45eb-bbe6-65f2f2a1ce22" Oct 29 00:35:27.950027 kubelet[1982]: I1029 00:35:27.949997 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:27.951059 env[1227]: time="2025-10-29T00:35:27.951009495Z" level=info msg="StopPodSandbox for \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\"" Oct 29 00:35:27.951920 kubelet[1982]: I1029 00:35:27.951883 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:27.952939 env[1227]: time="2025-10-29T00:35:27.952899493Z" level=info msg="StopPodSandbox for \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\"" Oct 29 00:35:27.954109 kubelet[1982]: I1029 00:35:27.953741 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:27.954295 env[1227]: time="2025-10-29T00:35:27.954263041Z" level=info msg="StopPodSandbox for \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\"" Oct 29 00:35:27.955083 kubelet[1982]: I1029 00:35:27.955063 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:27.955675 env[1227]: time="2025-10-29T00:35:27.955639389Z" level=info msg="StopPodSandbox for \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\"" Oct 29 00:35:27.956384 kubelet[1982]: I1029 00:35:27.956356 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:27.956954 env[1227]: time="2025-10-29T00:35:27.956917895Z" level=info msg="StopPodSandbox for \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\"" Oct 29 00:35:27.958872 kubelet[1982]: I1029 00:35:27.958849 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:27.959959 env[1227]: time="2025-10-29T00:35:27.959753193Z" level=info msg="StopPodSandbox for \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\"" Oct 29 00:35:27.964011 kubelet[1982]: I1029 00:35:27.963979 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:27.964593 env[1227]: time="2025-10-29T00:35:27.964542571Z" level=info msg="StopPodSandbox for \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\"" Oct 29 00:35:27.965598 kubelet[1982]: I1029 00:35:27.965556 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:27.966124 env[1227]: time="2025-10-29T00:35:27.966089802Z" level=info msg="StopPodSandbox for \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\"" Oct 29 00:35:27.969553 kubelet[1982]: I1029 00:35:27.969529 1982 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:27.972042 env[1227]: time="2025-10-29T00:35:27.971987842Z" level=info msg="StopPodSandbox for \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\"" Oct 29 00:35:28.003403 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1-shm.mount: Deactivated successfully. Oct 29 00:35:28.003497 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6-shm.mount: Deactivated successfully. Oct 29 00:35:28.003550 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2-shm.mount: Deactivated successfully. Oct 29 00:35:28.013138 env[1227]: time="2025-10-29T00:35:28.013070553Z" level=error msg="StopPodSandbox for \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\" failed" error="failed to destroy network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.013591 kubelet[1982]: E1029 00:35:28.013505 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:28.015095 kubelet[1982]: E1029 00:35:28.015032 1982 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994"} Oct 29 00:35:28.015208 kubelet[1982]: E1029 00:35:28.015111 1982 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4d0f98b5-229e-4f67-a068-6905ca873422\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:28.015208 kubelet[1982]: E1029 00:35:28.015136 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4d0f98b5-229e-4f67-a068-6905ca873422\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-c7jtc" podUID="4d0f98b5-229e-4f67-a068-6905ca873422" Oct 29 00:35:28.048712 env[1227]: time="2025-10-29T00:35:28.048648338Z" level=error msg="StopPodSandbox for \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\" failed" error="failed to destroy network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.049114 kubelet[1982]: E1029 00:35:28.049065 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:28.049202 kubelet[1982]: E1029 00:35:28.049126 1982 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f"} Oct 29 00:35:28.049202 kubelet[1982]: E1029 00:35:28.049160 1982 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:28.049202 kubelet[1982]: E1029 00:35:28.049183 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-989d784c9-qn9xh" podUID="ff489a5d-a848-4924-bf2e-dc0075ba3a95" Oct 29 00:35:28.053824 env[1227]: time="2025-10-29T00:35:28.053748239Z" level=error msg="StopPodSandbox for \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\" failed" error="failed to destroy network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.054043 kubelet[1982]: E1029 00:35:28.054000 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:28.054115 kubelet[1982]: E1029 00:35:28.054054 1982 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6"} Oct 29 00:35:28.054115 kubelet[1982]: E1029 00:35:28.054086 1982 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fdba9f1f-ced4-486c-bbb9-2da28071f6cb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:28.054115 kubelet[1982]: E1029 00:35:28.054107 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fdba9f1f-ced4-486c-bbb9-2da28071f6cb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-nqdlc" podUID="fdba9f1f-ced4-486c-bbb9-2da28071f6cb" Oct 29 00:35:28.061895 env[1227]: time="2025-10-29T00:35:28.061832519Z" level=error msg="StopPodSandbox for \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\" failed" error="failed to destroy network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.062114 kubelet[1982]: E1029 00:35:28.062077 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:28.062203 kubelet[1982]: E1029 00:35:28.062133 1982 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443"} Oct 29 00:35:28.062203 kubelet[1982]: E1029 00:35:28.062175 1982 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9522c2ec-7e06-406b-83b4-e2c84866af00\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:28.062294 kubelet[1982]: E1029 00:35:28.062203 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9522c2ec-7e06-406b-83b4-e2c84866af00\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:28.079943 env[1227]: time="2025-10-29T00:35:28.079879477Z" level=error msg="StopPodSandbox for \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\" failed" error="failed to destroy network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.080183 kubelet[1982]: E1029 00:35:28.080136 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:28.080264 kubelet[1982]: E1029 00:35:28.080199 1982 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1"} Oct 29 00:35:28.080264 kubelet[1982]: E1029 00:35:28.080233 1982 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4c8785a3-edfa-416a-9abb-6a5e8713af25\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:28.080264 kubelet[1982]: E1029 00:35:28.080257 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4c8785a3-edfa-416a-9abb-6a5e8713af25\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" podUID="4c8785a3-edfa-416a-9abb-6a5e8713af25" Oct 29 00:35:28.081163 env[1227]: time="2025-10-29T00:35:28.081114061Z" level=error msg="StopPodSandbox for \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\" failed" error="failed to destroy network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.081331 kubelet[1982]: E1029 00:35:28.081294 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:28.081399 kubelet[1982]: E1029 00:35:28.081340 1982 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423"} Oct 29 00:35:28.081399 kubelet[1982]: E1029 00:35:28.081368 1982 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c7a94bd2-06d9-4b3b-bb0e-0a6995839dda\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:28.081399 kubelet[1982]: E1029 00:35:28.081388 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c7a94bd2-06d9-4b3b-bb0e-0a6995839dda\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" podUID="c7a94bd2-06d9-4b3b-bb0e-0a6995839dda" Oct 29 00:35:28.090739 env[1227]: time="2025-10-29T00:35:28.090682411Z" level=error msg="StopPodSandbox for \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\" failed" error="failed to destroy network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.091043 env[1227]: time="2025-10-29T00:35:28.090722412Z" level=error msg="StopPodSandbox for \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\" failed" error="failed to destroy network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.091145 kubelet[1982]: E1029 00:35:28.091105 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:28.091206 kubelet[1982]: E1029 00:35:28.091158 1982 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2"} Oct 29 00:35:28.091206 kubelet[1982]: E1029 00:35:28.091196 1982 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1cb90272-e579-4d3e-853a-0d02317a9f36\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:28.091294 kubelet[1982]: E1029 00:35:28.091219 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1cb90272-e579-4d3e-853a-0d02317a9f36\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" podUID="1cb90272-e579-4d3e-853a-0d02317a9f36" Oct 29 00:35:28.091294 kubelet[1982]: E1029 00:35:28.091280 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:28.091367 kubelet[1982]: E1029 00:35:28.091296 1982 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35"} Oct 29 00:35:28.091367 kubelet[1982]: E1029 00:35:28.091312 1982 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"50a44f58-1837-43d6-9581-aa2468ce50ce\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:28.091367 kubelet[1982]: E1029 00:35:28.091326 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"50a44f58-1837-43d6-9581-aa2468ce50ce\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" podUID="50a44f58-1837-43d6-9581-aa2468ce50ce" Oct 29 00:35:28.091864 env[1227]: time="2025-10-29T00:35:28.091803753Z" level=error msg="StopPodSandbox for \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\" failed" error="failed to destroy network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.092089 kubelet[1982]: E1029 00:35:28.092063 1982 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:28.092158 kubelet[1982]: E1029 00:35:28.092093 1982 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737"} Oct 29 00:35:28.092158 kubelet[1982]: E1029 00:35:28.092114 1982 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5138df2c-bd88-45eb-bbe6-65f2f2a1ce22\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:28.092158 kubelet[1982]: E1029 00:35:28.092130 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5138df2c-bd88-45eb-bbe6-65f2f2a1ce22\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-w6z9v" podUID="5138df2c-bd88-45eb-bbe6-65f2f2a1ce22" Oct 29 00:35:32.192408 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount602290630.mount: Deactivated successfully. Oct 29 00:35:32.451912 env[1227]: time="2025-10-29T00:35:32.451655170Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:32.458149 env[1227]: time="2025-10-29T00:35:32.458102446Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:32.461117 env[1227]: time="2025-10-29T00:35:32.461077859Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:32.466939 env[1227]: time="2025-10-29T00:35:32.466889883Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:32.467385 env[1227]: time="2025-10-29T00:35:32.467340051Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b\"" Oct 29 00:35:32.506147 env[1227]: time="2025-10-29T00:35:32.506071305Z" level=info msg="CreateContainer within sandbox \"441c2ff8e0fcce01d7fd94a391bdc745819f10c818fdddde9345c826b903f95d\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 29 00:35:32.532348 env[1227]: time="2025-10-29T00:35:32.532290455Z" level=info msg="CreateContainer within sandbox \"441c2ff8e0fcce01d7fd94a391bdc745819f10c818fdddde9345c826b903f95d\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"d78547e34abc153e6ef708560ef5286af3f06a181aeb2f6fe29625f0dc6e9a45\"" Oct 29 00:35:32.534603 env[1227]: time="2025-10-29T00:35:32.533830442Z" level=info msg="StartContainer for \"d78547e34abc153e6ef708560ef5286af3f06a181aeb2f6fe29625f0dc6e9a45\"" Oct 29 00:35:32.559405 systemd[1]: Started cri-containerd-d78547e34abc153e6ef708560ef5286af3f06a181aeb2f6fe29625f0dc6e9a45.scope. Oct 29 00:35:32.576000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.578478 kernel: kauditd_printk_skb: 78 callbacks suppressed Oct 29 00:35:32.578547 kernel: audit: type=1400 audit(1761698132.576:999): avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.576000 audit[3259]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2496 pid=3259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:32.585038 kernel: audit: type=1300 audit(1761698132.576:999): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2496 pid=3259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:32.585111 kernel: audit: type=1327 audit(1761698132.576:999): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383534376533346162633135336536656637303835363065663532 Oct 29 00:35:32.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383534376533346162633135336536656637303835363065663532 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.591371 kernel: audit: type=1400 audit(1761698132.577:1000): avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.591445 kernel: audit: type=1400 audit(1761698132.577:1000): avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.597912 kernel: audit: type=1400 audit(1761698132.577:1000): avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.600865 kernel: audit: type=1400 audit(1761698132.577:1000): avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.603895 kernel: audit: type=1400 audit(1761698132.577:1000): avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.603964 kernel: audit: type=1400 audit(1761698132.577:1000): avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.609495 kernel: audit: type=1400 audit(1761698132.577:1000): avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit: BPF prog-id=133 op=LOAD Oct 29 00:35:32.577000 audit[3259]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2496 pid=3259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:32.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383534376533346162633135336536656637303835363065663532 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.577000 audit: BPF prog-id=134 op=LOAD Oct 29 00:35:32.577000 audit[3259]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2496 pid=3259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:32.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383534376533346162633135336536656637303835363065663532 Oct 29 00:35:32.580000 audit: BPF prog-id=134 op=UNLOAD Oct 29 00:35:32.580000 audit: BPF prog-id=133 op=UNLOAD Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { perfmon } for pid=3259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit[3259]: AVC avc: denied { bpf } for pid=3259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:32.580000 audit: BPF prog-id=135 op=LOAD Oct 29 00:35:32.580000 audit[3259]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2496 pid=3259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:32.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383534376533346162633135336536656637303835363065663532 Oct 29 00:35:32.615798 env[1227]: time="2025-10-29T00:35:32.615729069Z" level=info msg="StartContainer for \"d78547e34abc153e6ef708560ef5286af3f06a181aeb2f6fe29625f0dc6e9a45\" returns successfully" Oct 29 00:35:32.761450 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 29 00:35:32.761591 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 29 00:35:32.879190 env[1227]: time="2025-10-29T00:35:32.879131467Z" level=info msg="StopPodSandbox for \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\"" Oct 29 00:35:32.987471 kubelet[1982]: E1029 00:35:32.987439 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:33.010236 kubelet[1982]: I1029 00:35:33.010167 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-57h69" podStartSLOduration=1.682961627 podStartE2EDuration="15.01014941s" podCreationTimestamp="2025-10-29 00:35:18 +0000 UTC" firstStartedPulling="2025-10-29 00:35:19.14135389 +0000 UTC m=+26.400181628" lastFinishedPulling="2025-10-29 00:35:32.468541713 +0000 UTC m=+39.727369411" observedRunningTime="2025-10-29 00:35:33.010044608 +0000 UTC m=+40.268872346" watchObservedRunningTime="2025-10-29 00:35:33.01014941 +0000 UTC m=+40.268977148" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:32.981 [INFO][3310] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:32.982 [INFO][3310] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" iface="eth0" netns="/var/run/netns/cni-b7dde875-3a83-7ba5-bb9e-68bf459c82c0" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:32.983 [INFO][3310] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" iface="eth0" netns="/var/run/netns/cni-b7dde875-3a83-7ba5-bb9e-68bf459c82c0" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:32.986 [INFO][3310] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" iface="eth0" netns="/var/run/netns/cni-b7dde875-3a83-7ba5-bb9e-68bf459c82c0" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:32.986 [INFO][3310] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:32.986 [INFO][3310] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:33.072 [INFO][3325] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" HandleID="k8s-pod-network.dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Workload="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:33.072 [INFO][3325] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:33.073 [INFO][3325] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:33.087 [WARNING][3325] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" HandleID="k8s-pod-network.dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Workload="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:33.087 [INFO][3325] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" HandleID="k8s-pod-network.dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Workload="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:33.088 [INFO][3325] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:33.092268 env[1227]: 2025-10-29 00:35:33.090 [INFO][3310] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:33.093238 env[1227]: time="2025-10-29T00:35:33.092890378Z" level=info msg="TearDown network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\" successfully" Oct 29 00:35:33.093238 env[1227]: time="2025-10-29T00:35:33.092940939Z" level=info msg="StopPodSandbox for \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\" returns successfully" Oct 29 00:35:33.119623 kubelet[1982]: I1029 00:35:33.119587 1982 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-mv7v9\" (UniqueName: \"kubernetes.io/projected/ff489a5d-a848-4924-bf2e-dc0075ba3a95-kube-api-access-mv7v9\") pod \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\" (UID: \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\") " Oct 29 00:35:33.119804 kubelet[1982]: I1029 00:35:33.119789 1982 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ff489a5d-a848-4924-bf2e-dc0075ba3a95-whisker-backend-key-pair\") pod \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\" (UID: \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\") " Oct 29 00:35:33.119968 kubelet[1982]: I1029 00:35:33.119953 1982 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ff489a5d-a848-4924-bf2e-dc0075ba3a95-whisker-ca-bundle\") pod \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\" (UID: \"ff489a5d-a848-4924-bf2e-dc0075ba3a95\") " Oct 29 00:35:33.124595 kubelet[1982]: I1029 00:35:33.124538 1982 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/ff489a5d-a848-4924-bf2e-dc0075ba3a95-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "ff489a5d-a848-4924-bf2e-dc0075ba3a95" (UID: "ff489a5d-a848-4924-bf2e-dc0075ba3a95"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Oct 29 00:35:33.125293 kubelet[1982]: I1029 00:35:33.125247 1982 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ff489a5d-a848-4924-bf2e-dc0075ba3a95-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "ff489a5d-a848-4924-bf2e-dc0075ba3a95" (UID: "ff489a5d-a848-4924-bf2e-dc0075ba3a95"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Oct 29 00:35:33.125853 kubelet[1982]: I1029 00:35:33.125830 1982 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ff489a5d-a848-4924-bf2e-dc0075ba3a95-kube-api-access-mv7v9" (OuterVolumeSpecName: "kube-api-access-mv7v9") pod "ff489a5d-a848-4924-bf2e-dc0075ba3a95" (UID: "ff489a5d-a848-4924-bf2e-dc0075ba3a95"). InnerVolumeSpecName "kube-api-access-mv7v9". PluginName "kubernetes.io/projected", VolumeGIDValue "" Oct 29 00:35:33.192563 systemd[1]: run-netns-cni\x2db7dde875\x2d3a83\x2d7ba5\x2dbb9e\x2d68bf459c82c0.mount: Deactivated successfully. Oct 29 00:35:33.192667 systemd[1]: var-lib-kubelet-pods-ff489a5d\x2da848\x2d4924\x2dbf2e\x2ddc0075ba3a95-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmv7v9.mount: Deactivated successfully. Oct 29 00:35:33.192733 systemd[1]: var-lib-kubelet-pods-ff489a5d\x2da848\x2d4924\x2dbf2e\x2ddc0075ba3a95-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Oct 29 00:35:33.221315 kubelet[1982]: I1029 00:35:33.221274 1982 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ff489a5d-a848-4924-bf2e-dc0075ba3a95-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Oct 29 00:35:33.221500 kubelet[1982]: I1029 00:35:33.221487 1982 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-mv7v9\" (UniqueName: \"kubernetes.io/projected/ff489a5d-a848-4924-bf2e-dc0075ba3a95-kube-api-access-mv7v9\") on node \"localhost\" DevicePath \"\"" Oct 29 00:35:33.221560 kubelet[1982]: I1029 00:35:33.221550 1982 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ff489a5d-a848-4924-bf2e-dc0075ba3a95-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Oct 29 00:35:33.989992 kubelet[1982]: E1029 00:35:33.989953 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:33.995939 systemd[1]: Removed slice kubepods-besteffort-podff489a5d_a848_4924_bf2e_dc0075ba3a95.slice. Oct 29 00:35:34.018460 systemd[1]: run-containerd-runc-k8s.io-d78547e34abc153e6ef708560ef5286af3f06a181aeb2f6fe29625f0dc6e9a45-runc.JrqLDi.mount: Deactivated successfully. Oct 29 00:35:34.072717 systemd[1]: Created slice kubepods-besteffort-poddb9690bc_af00_4609_9dd2_e9df44a4ba6f.slice. Oct 29 00:35:34.129371 kubelet[1982]: I1029 00:35:34.129333 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ls2zx\" (UniqueName: \"kubernetes.io/projected/db9690bc-af00-4609-9dd2-e9df44a4ba6f-kube-api-access-ls2zx\") pod \"whisker-5798b799b7-lfq86\" (UID: \"db9690bc-af00-4609-9dd2-e9df44a4ba6f\") " pod="calico-system/whisker-5798b799b7-lfq86" Oct 29 00:35:34.129591 kubelet[1982]: I1029 00:35:34.129575 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/db9690bc-af00-4609-9dd2-e9df44a4ba6f-whisker-ca-bundle\") pod \"whisker-5798b799b7-lfq86\" (UID: \"db9690bc-af00-4609-9dd2-e9df44a4ba6f\") " pod="calico-system/whisker-5798b799b7-lfq86" Oct 29 00:35:34.129749 kubelet[1982]: I1029 00:35:34.129732 1982 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/db9690bc-af00-4609-9dd2-e9df44a4ba6f-whisker-backend-key-pair\") pod \"whisker-5798b799b7-lfq86\" (UID: \"db9690bc-af00-4609-9dd2-e9df44a4ba6f\") " pod="calico-system/whisker-5798b799b7-lfq86" Oct 29 00:35:34.187000 audit[3432]: AVC avc: denied { write } for pid=3432 comm="tee" name="fd" dev="proc" ino=20076 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:34.187000 audit[3432]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdddff7e1 a2=241 a3=1b6 items=1 ppid=3408 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.187000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 29 00:35:34.187000 audit: PATH item=0 name="/dev/fd/63" inode=17329 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:34.187000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:34.194000 audit[3449]: AVC avc: denied { write } for pid=3449 comm="tee" name="fd" dev="proc" ino=20085 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:34.194000 audit[3449]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffff2097e2 a2=241 a3=1b6 items=1 ppid=3404 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.194000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 29 00:35:34.194000 audit: PATH item=0 name="/dev/fd/63" inode=20082 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:34.194000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:34.197000 audit[3455]: AVC avc: denied { write } for pid=3455 comm="tee" name="fd" dev="proc" ino=20091 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:34.197000 audit[3455]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc35367e1 a2=241 a3=1b6 items=1 ppid=3402 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.197000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 29 00:35:34.197000 audit: PATH item=0 name="/dev/fd/63" inode=18361 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:34.197000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:34.203000 audit[3463]: AVC avc: denied { write } for pid=3463 comm="tee" name="fd" dev="proc" ino=19143 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:34.203000 audit[3463]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc1b797d2 a2=241 a3=1b6 items=1 ppid=3398 pid=3463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.203000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 29 00:35:34.203000 audit: PATH item=0 name="/dev/fd/63" inode=18362 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:34.203000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:34.210000 audit[3471]: AVC avc: denied { write } for pid=3471 comm="tee" name="fd" dev="proc" ino=19149 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:34.210000 audit[3471]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd22407d1 a2=241 a3=1b6 items=1 ppid=3409 pid=3471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.210000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 29 00:35:34.210000 audit: PATH item=0 name="/dev/fd/63" inode=17332 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:34.210000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:34.212000 audit[3430]: AVC avc: denied { write } for pid=3430 comm="tee" name="fd" dev="proc" ino=19153 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:34.212000 audit[3430]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc91967e1 a2=241 a3=1b6 items=1 ppid=3405 pid=3430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.212000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 29 00:35:34.212000 audit: PATH item=0 name="/dev/fd/63" inode=20073 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:34.212000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:34.214000 audit[3477]: AVC avc: denied { write } for pid=3477 comm="tee" name="fd" dev="proc" ino=20097 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:34.214000 audit[3477]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe60d97e3 a2=241 a3=1b6 items=1 ppid=3406 pid=3477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.214000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 29 00:35:34.214000 audit: PATH item=0 name="/dev/fd/63" inode=19155 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:34.214000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:34.375989 env[1227]: time="2025-10-29T00:35:34.375929697Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5798b799b7-lfq86,Uid:db9690bc-af00-4609-9dd2-e9df44a4ba6f,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:34.530254 systemd-networkd[1049]: cali7cc52d71ce9: Link UP Oct 29 00:35:34.533288 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 29 00:35:34.533336 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7cc52d71ce9: link becomes ready Oct 29 00:35:34.532840 systemd-networkd[1049]: cali7cc52d71ce9: Gained carrier Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.432 [INFO][3491] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.448 [INFO][3491] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--5798b799b7--lfq86-eth0 whisker-5798b799b7- calico-system db9690bc-af00-4609-9dd2-e9df44a4ba6f 939 0 2025-10-29 00:35:34 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5798b799b7 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-5798b799b7-lfq86 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali7cc52d71ce9 [] [] }} ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Namespace="calico-system" Pod="whisker-5798b799b7-lfq86" WorkloadEndpoint="localhost-k8s-whisker--5798b799b7--lfq86-" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.448 [INFO][3491] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Namespace="calico-system" Pod="whisker-5798b799b7-lfq86" WorkloadEndpoint="localhost-k8s-whisker--5798b799b7--lfq86-eth0" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.482 [INFO][3505] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" HandleID="k8s-pod-network.5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Workload="localhost-k8s-whisker--5798b799b7--lfq86-eth0" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.482 [INFO][3505] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" HandleID="k8s-pod-network.5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Workload="localhost-k8s-whisker--5798b799b7--lfq86-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c30a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-5798b799b7-lfq86", "timestamp":"2025-10-29 00:35:34.482585123 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.482 [INFO][3505] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.482 [INFO][3505] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.482 [INFO][3505] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.495 [INFO][3505] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" host="localhost" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.501 [INFO][3505] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.505 [INFO][3505] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.507 [INFO][3505] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.509 [INFO][3505] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.509 [INFO][3505] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" host="localhost" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.511 [INFO][3505] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.515 [INFO][3505] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" host="localhost" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.520 [INFO][3505] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" host="localhost" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.520 [INFO][3505] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" host="localhost" Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.520 [INFO][3505] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:34.548213 env[1227]: 2025-10-29 00:35:34.520 [INFO][3505] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" HandleID="k8s-pod-network.5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Workload="localhost-k8s-whisker--5798b799b7--lfq86-eth0" Oct 29 00:35:34.548869 env[1227]: 2025-10-29 00:35:34.522 [INFO][3491] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Namespace="calico-system" Pod="whisker-5798b799b7-lfq86" WorkloadEndpoint="localhost-k8s-whisker--5798b799b7--lfq86-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5798b799b7--lfq86-eth0", GenerateName:"whisker-5798b799b7-", Namespace:"calico-system", SelfLink:"", UID:"db9690bc-af00-4609-9dd2-e9df44a4ba6f", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5798b799b7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-5798b799b7-lfq86", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali7cc52d71ce9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:34.548869 env[1227]: 2025-10-29 00:35:34.522 [INFO][3491] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Namespace="calico-system" Pod="whisker-5798b799b7-lfq86" WorkloadEndpoint="localhost-k8s-whisker--5798b799b7--lfq86-eth0" Oct 29 00:35:34.548869 env[1227]: 2025-10-29 00:35:34.522 [INFO][3491] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7cc52d71ce9 ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Namespace="calico-system" Pod="whisker-5798b799b7-lfq86" WorkloadEndpoint="localhost-k8s-whisker--5798b799b7--lfq86-eth0" Oct 29 00:35:34.548869 env[1227]: 2025-10-29 00:35:34.533 [INFO][3491] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Namespace="calico-system" Pod="whisker-5798b799b7-lfq86" WorkloadEndpoint="localhost-k8s-whisker--5798b799b7--lfq86-eth0" Oct 29 00:35:34.548869 env[1227]: 2025-10-29 00:35:34.533 [INFO][3491] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Namespace="calico-system" Pod="whisker-5798b799b7-lfq86" WorkloadEndpoint="localhost-k8s-whisker--5798b799b7--lfq86-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5798b799b7--lfq86-eth0", GenerateName:"whisker-5798b799b7-", Namespace:"calico-system", SelfLink:"", UID:"db9690bc-af00-4609-9dd2-e9df44a4ba6f", ResourceVersion:"939", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5798b799b7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef", Pod:"whisker-5798b799b7-lfq86", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali7cc52d71ce9", MAC:"26:c7:f9:5d:01:76", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:34.548869 env[1227]: 2025-10-29 00:35:34.546 [INFO][3491] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef" Namespace="calico-system" Pod="whisker-5798b799b7-lfq86" WorkloadEndpoint="localhost-k8s-whisker--5798b799b7--lfq86-eth0" Oct 29 00:35:34.559371 env[1227]: time="2025-10-29T00:35:34.559287517Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:34.559585 env[1227]: time="2025-10-29T00:35:34.559548961Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:34.559703 env[1227]: time="2025-10-29T00:35:34.559671603Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:34.560019 env[1227]: time="2025-10-29T00:35:34.559982929Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef pid=3529 runtime=io.containerd.runc.v2 Oct 29 00:35:34.571218 systemd[1]: Started cri-containerd-5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef.scope. Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.587000 audit: BPF prog-id=136 op=LOAD Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531343064376436333531373463666362326333383166656166633138 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531343064376436333531373463666362326333383166656166633138 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit: BPF prog-id=137 op=LOAD Oct 29 00:35:34.588000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531343064376436333531373463666362326333383166656166633138 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit: BPF prog-id=138 op=LOAD Oct 29 00:35:34.588000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531343064376436333531373463666362326333383166656166633138 Oct 29 00:35:34.588000 audit: BPF prog-id=138 op=UNLOAD Oct 29 00:35:34.588000 audit: BPF prog-id=137 op=UNLOAD Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:34.588000 audit: BPF prog-id=139 op=LOAD Oct 29 00:35:34.588000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:34.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531343064376436333531373463666362326333383166656166633138 Oct 29 00:35:34.590182 systemd-resolved[1169]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:34.606847 env[1227]: time="2025-10-29T00:35:34.606575087Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5798b799b7-lfq86,Uid:db9690bc-af00-4609-9dd2-e9df44a4ba6f,Namespace:calico-system,Attempt:0,} returns sandbox id \"5140d7d635174cfcb2c381feafc184e2fa832feaa3cf2d6ada42639c1a47edef\"" Oct 29 00:35:34.609374 env[1227]: time="2025-10-29T00:35:34.609341894Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 29 00:35:34.827966 env[1227]: time="2025-10-29T00:35:34.827913597Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:34.829041 env[1227]: time="2025-10-29T00:35:34.828954815Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 29 00:35:34.829408 kubelet[1982]: E1029 00:35:34.829371 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:35:34.829511 kubelet[1982]: E1029 00:35:34.829428 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:35:34.839722 kubelet[1982]: E1029 00:35:34.839624 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6f7e70f605b847bb8177a761abe3098a,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-ls2zx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5798b799b7-lfq86_calico-system(db9690bc-af00-4609-9dd2-e9df44a4ba6f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:34.845228 env[1227]: time="2025-10-29T00:35:34.845177573Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 29 00:35:34.853335 kubelet[1982]: I1029 00:35:34.853293 1982 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="ff489a5d-a848-4924-bf2e-dc0075ba3a95" path="/var/lib/kubelet/pods/ff489a5d-a848-4924-bf2e-dc0075ba3a95/volumes" Oct 29 00:35:34.991969 kubelet[1982]: E1029 00:35:34.991936 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:35.046763 env[1227]: time="2025-10-29T00:35:35.046698088Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:35.048162 env[1227]: time="2025-10-29T00:35:35.048108952Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 29 00:35:35.048379 kubelet[1982]: E1029 00:35:35.048339 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:35:35.048450 kubelet[1982]: E1029 00:35:35.048397 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:35:35.049875 kubelet[1982]: E1029 00:35:35.048541 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ls2zx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5798b799b7-lfq86_calico-system(db9690bc-af00-4609-9dd2-e9df44a4ba6f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:35.049875 kubelet[1982]: E1029 00:35:35.049723 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5798b799b7-lfq86" podUID="db9690bc-af00-4609-9dd2-e9df44a4ba6f" Oct 29 00:35:35.994887 kubelet[1982]: E1029 00:35:35.994840 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5798b799b7-lfq86" podUID="db9690bc-af00-4609-9dd2-e9df44a4ba6f" Oct 29 00:35:36.031000 audit[3610]: NETFILTER_CFG table=filter:103 family=2 entries=22 op=nft_register_rule pid=3610 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:36.031000 audit[3610]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe551e4e0 a2=0 a3=1 items=0 ppid=2093 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:36.031000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:36.040000 audit[3610]: NETFILTER_CFG table=nat:104 family=2 entries=12 op=nft_register_rule pid=3610 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:36.040000 audit[3610]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe551e4e0 a2=0 a3=1 items=0 ppid=2093 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:36.040000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:36.314993 systemd-networkd[1049]: cali7cc52d71ce9: Gained IPv6LL Oct 29 00:35:39.852286 env[1227]: time="2025-10-29T00:35:39.852234121Z" level=info msg="StopPodSandbox for \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\"" Oct 29 00:35:39.852711 env[1227]: time="2025-10-29T00:35:39.852352402Z" level=info msg="StopPodSandbox for \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\"" Oct 29 00:35:39.853664 env[1227]: time="2025-10-29T00:35:39.853593702Z" level=info msg="StopPodSandbox for \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\"" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.906 [INFO][3732] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.906 [INFO][3732] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" iface="eth0" netns="/var/run/netns/cni-625967bd-e258-a32f-e826-b48d46db3f70" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.906 [INFO][3732] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" iface="eth0" netns="/var/run/netns/cni-625967bd-e258-a32f-e826-b48d46db3f70" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.907 [INFO][3732] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" iface="eth0" netns="/var/run/netns/cni-625967bd-e258-a32f-e826-b48d46db3f70" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.907 [INFO][3732] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.907 [INFO][3732] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.941 [INFO][3761] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" HandleID="k8s-pod-network.82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.941 [INFO][3761] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.941 [INFO][3761] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.951 [WARNING][3761] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" HandleID="k8s-pod-network.82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.951 [INFO][3761] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" HandleID="k8s-pod-network.82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.953 [INFO][3761] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:39.957220 env[1227]: 2025-10-29 00:35:39.955 [INFO][3732] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:39.957721 env[1227]: time="2025-10-29T00:35:39.957449917Z" level=info msg="TearDown network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\" successfully" Oct 29 00:35:39.957721 env[1227]: time="2025-10-29T00:35:39.957485918Z" level=info msg="StopPodSandbox for \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\" returns successfully" Oct 29 00:35:39.959397 systemd[1]: run-netns-cni\x2d625967bd\x2de258\x2da32f\x2de826\x2db48d46db3f70.mount: Deactivated successfully. Oct 29 00:35:39.964232 env[1227]: time="2025-10-29T00:35:39.959650831Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc84f4489-klnwg,Uid:4c8785a3-edfa-416a-9abb-6a5e8713af25,Namespace:calico-apiserver,Attempt:1,}" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.925 [INFO][3738] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.925 [INFO][3738] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" iface="eth0" netns="/var/run/netns/cni-335c2da5-966f-02ae-c984-550379d317f0" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.925 [INFO][3738] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" iface="eth0" netns="/var/run/netns/cni-335c2da5-966f-02ae-c984-550379d317f0" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.925 [INFO][3738] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" iface="eth0" netns="/var/run/netns/cni-335c2da5-966f-02ae-c984-550379d317f0" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.925 [INFO][3738] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.925 [INFO][3738] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.956 [INFO][3769] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" HandleID="k8s-pod-network.a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.956 [INFO][3769] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.956 [INFO][3769] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.967 [WARNING][3769] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" HandleID="k8s-pod-network.a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.967 [INFO][3769] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" HandleID="k8s-pod-network.a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.969 [INFO][3769] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:39.985514 env[1227]: 2025-10-29 00:35:39.982 [INFO][3738] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:39.987598 env[1227]: time="2025-10-29T00:35:39.987548185Z" level=info msg="TearDown network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\" successfully" Oct 29 00:35:39.987598 env[1227]: time="2025-10-29T00:35:39.987587146Z" level=info msg="StopPodSandbox for \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\" returns successfully" Oct 29 00:35:39.987709 systemd[1]: run-netns-cni\x2d335c2da5\x2d966f\x2d02ae\x2dc984\x2d550379d317f0.mount: Deactivated successfully. Oct 29 00:35:39.989043 env[1227]: time="2025-10-29T00:35:39.989006528Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc878fd98-2kfdl,Uid:c7a94bd2-06d9-4b3b-bb0e-0a6995839dda,Namespace:calico-apiserver,Attempt:1,}" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.935 [INFO][3748] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.936 [INFO][3748] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" iface="eth0" netns="/var/run/netns/cni-05dbfb63-5d0d-f90b-e444-e92f7bedc027" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.936 [INFO][3748] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" iface="eth0" netns="/var/run/netns/cni-05dbfb63-5d0d-f90b-e444-e92f7bedc027" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.936 [INFO][3748] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" iface="eth0" netns="/var/run/netns/cni-05dbfb63-5d0d-f90b-e444-e92f7bedc027" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.936 [INFO][3748] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.936 [INFO][3748] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.970 [INFO][3775] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" HandleID="k8s-pod-network.0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.970 [INFO][3775] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.972 [INFO][3775] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.982 [WARNING][3775] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" HandleID="k8s-pod-network.0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.982 [INFO][3775] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" HandleID="k8s-pod-network.0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.987 [INFO][3775] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:39.991864 env[1227]: 2025-10-29 00:35:39.990 [INFO][3748] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:39.993969 env[1227]: time="2025-10-29T00:35:39.993916884Z" level=info msg="TearDown network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\" successfully" Oct 29 00:35:39.993969 env[1227]: time="2025-10-29T00:35:39.993956805Z" level=info msg="StopPodSandbox for \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\" returns successfully" Oct 29 00:35:39.994209 kubelet[1982]: E1029 00:35:39.994182 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:39.994861 env[1227]: time="2025-10-29T00:35:39.994787498Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-w6z9v,Uid:5138df2c-bd88-45eb-bbe6-65f2f2a1ce22,Namespace:kube-system,Attempt:1,}" Oct 29 00:35:39.995635 systemd[1]: run-netns-cni\x2d05dbfb63\x2d5d0d\x2df90b\x2de444\x2de92f7bedc027.mount: Deactivated successfully. Oct 29 00:35:40.089552 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 29 00:35:40.089661 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicc5e89c53cc: link becomes ready Oct 29 00:35:40.089303 systemd-networkd[1049]: calicc5e89c53cc: Link UP Oct 29 00:35:40.089448 systemd-networkd[1049]: calicc5e89c53cc: Gained carrier Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:39.999 [INFO][3787] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.015 [INFO][3787] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0 calico-apiserver-5cc84f4489- calico-apiserver 4c8785a3-edfa-416a-9abb-6a5e8713af25 974 0 2025-10-29 00:35:13 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5cc84f4489 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5cc84f4489-klnwg eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calicc5e89c53cc [] [] }} ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-klnwg" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.016 [INFO][3787] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-klnwg" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.046 [INFO][3825] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" HandleID="k8s-pod-network.133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.046 [INFO][3825] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" HandleID="k8s-pod-network.133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001315d0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5cc84f4489-klnwg", "timestamp":"2025-10-29 00:35:40.046545611 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.046 [INFO][3825] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.046 [INFO][3825] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.046 [INFO][3825] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.059 [INFO][3825] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" host="localhost" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.063 [INFO][3825] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.067 [INFO][3825] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.068 [INFO][3825] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.070 [INFO][3825] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.070 [INFO][3825] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" host="localhost" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.071 [INFO][3825] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233 Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.076 [INFO][3825] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" host="localhost" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.083 [INFO][3825] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" host="localhost" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.083 [INFO][3825] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" host="localhost" Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.083 [INFO][3825] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:40.105268 env[1227]: 2025-10-29 00:35:40.083 [INFO][3825] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" HandleID="k8s-pod-network.133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:40.105999 env[1227]: 2025-10-29 00:35:40.084 [INFO][3787] cni-plugin/k8s.go 418: Populated endpoint ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-klnwg" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0", GenerateName:"calico-apiserver-5cc84f4489-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c8785a3-edfa-416a-9abb-6a5e8713af25", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc84f4489", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5cc84f4489-klnwg", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calicc5e89c53cc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:40.105999 env[1227]: 2025-10-29 00:35:40.084 [INFO][3787] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-klnwg" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:40.105999 env[1227]: 2025-10-29 00:35:40.084 [INFO][3787] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicc5e89c53cc ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-klnwg" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:40.105999 env[1227]: 2025-10-29 00:35:40.090 [INFO][3787] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-klnwg" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:40.105999 env[1227]: 2025-10-29 00:35:40.091 [INFO][3787] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-klnwg" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0", GenerateName:"calico-apiserver-5cc84f4489-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c8785a3-edfa-416a-9abb-6a5e8713af25", ResourceVersion:"974", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc84f4489", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233", Pod:"calico-apiserver-5cc84f4489-klnwg", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calicc5e89c53cc", MAC:"92:79:f1:a0:bd:20", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:40.105999 env[1227]: 2025-10-29 00:35:40.102 [INFO][3787] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-klnwg" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:40.115517 env[1227]: time="2025-10-29T00:35:40.115453905Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:40.115517 env[1227]: time="2025-10-29T00:35:40.115495106Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:40.115517 env[1227]: time="2025-10-29T00:35:40.115505786Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:40.115793 env[1227]: time="2025-10-29T00:35:40.115756830Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233 pid=3870 runtime=io.containerd.runc.v2 Oct 29 00:35:40.128244 systemd[1]: Started cri-containerd-133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233.scope. Oct 29 00:35:40.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.146321 kernel: kauditd_printk_skb: 131 callbacks suppressed Oct 29 00:35:40.146377 kernel: audit: type=1400 audit(1761698140.143:1032): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.151088 kernel: audit: type=1400 audit(1761698140.143:1033): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.151138 kernel: audit: type=1400 audit(1761698140.143:1034): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.155775 kernel: audit: type=1400 audit(1761698140.143:1035): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.155852 kernel: audit: type=1400 audit(1761698140.143:1036): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.160564 kernel: audit: type=1400 audit(1761698140.143:1037): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.160609 kernel: audit: type=1400 audit(1761698140.143:1038): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.166175 kernel: audit: type=1400 audit(1761698140.143:1039): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.166281 kernel: audit: type=1400 audit(1761698140.143:1040): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.166217 systemd-resolved[1169]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:40.169028 kernel: audit: type=1400 audit(1761698140.144:1041): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.144000 audit: BPF prog-id=140 op=LOAD Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133336135613438633834386232643431313562363866306133343864 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133336135613438633834386232643431313562363866306133343864 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.152000 audit: BPF prog-id=141 op=LOAD Oct 29 00:35:40.152000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133336135613438633834386232643431313562363866306133343864 Oct 29 00:35:40.154000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.154000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.154000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.154000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.154000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.154000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.154000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.154000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.154000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.154000 audit: BPF prog-id=142 op=LOAD Oct 29 00:35:40.154000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133336135613438633834386232643431313562363866306133343864 Oct 29 00:35:40.156000 audit: BPF prog-id=142 op=UNLOAD Oct 29 00:35:40.156000 audit: BPF prog-id=141 op=UNLOAD Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { perfmon } for pid=3880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit[3880]: AVC avc: denied { bpf } for pid=3880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.156000 audit: BPF prog-id=143 op=LOAD Oct 29 00:35:40.156000 audit[3880]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3870 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133336135613438633834386232643431313562363866306133343864 Oct 29 00:35:40.191114 env[1227]: time="2025-10-29T00:35:40.191062462Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc84f4489-klnwg,Uid:4c8785a3-edfa-416a-9abb-6a5e8713af25,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233\"" Oct 29 00:35:40.195079 env[1227]: time="2025-10-29T00:35:40.195039763Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:40.195837 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1c99ac6fcfb: link becomes ready Oct 29 00:35:40.203035 systemd-networkd[1049]: cali1c99ac6fcfb: Link UP Oct 29 00:35:40.203178 systemd-networkd[1049]: cali1c99ac6fcfb: Gained carrier Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.036 [INFO][3806] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.049 [INFO][3806] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0 coredns-674b8bbfcf- kube-system 5138df2c-bd88-45eb-bbe6-65f2f2a1ce22 976 0 2025-10-29 00:35:00 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-w6z9v eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali1c99ac6fcfb [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Namespace="kube-system" Pod="coredns-674b8bbfcf-w6z9v" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--w6z9v-" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.049 [INFO][3806] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Namespace="kube-system" Pod="coredns-674b8bbfcf-w6z9v" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.076 [INFO][3837] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" HandleID="k8s-pod-network.8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.076 [INFO][3837] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" HandleID="k8s-pod-network.8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c470), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-w6z9v", "timestamp":"2025-10-29 00:35:40.076591591 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.076 [INFO][3837] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.083 [INFO][3837] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.083 [INFO][3837] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.162 [INFO][3837] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" host="localhost" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.166 [INFO][3837] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.175 [INFO][3837] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.177 [INFO][3837] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.179 [INFO][3837] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.179 [INFO][3837] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" host="localhost" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.181 [INFO][3837] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9 Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.184 [INFO][3837] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" host="localhost" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.190 [INFO][3837] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" host="localhost" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.190 [INFO][3837] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" host="localhost" Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.190 [INFO][3837] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:40.208450 env[1227]: 2025-10-29 00:35:40.190 [INFO][3837] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" HandleID="k8s-pod-network.8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:40.209189 env[1227]: 2025-10-29 00:35:40.193 [INFO][3806] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Namespace="kube-system" Pod="coredns-674b8bbfcf-w6z9v" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5138df2c-bd88-45eb-bbe6-65f2f2a1ce22", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-w6z9v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1c99ac6fcfb", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:40.209189 env[1227]: 2025-10-29 00:35:40.193 [INFO][3806] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Namespace="kube-system" Pod="coredns-674b8bbfcf-w6z9v" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:40.209189 env[1227]: 2025-10-29 00:35:40.193 [INFO][3806] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1c99ac6fcfb ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Namespace="kube-system" Pod="coredns-674b8bbfcf-w6z9v" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:40.209189 env[1227]: 2025-10-29 00:35:40.195 [INFO][3806] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Namespace="kube-system" Pod="coredns-674b8bbfcf-w6z9v" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:40.209189 env[1227]: 2025-10-29 00:35:40.196 [INFO][3806] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Namespace="kube-system" Pod="coredns-674b8bbfcf-w6z9v" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5138df2c-bd88-45eb-bbe6-65f2f2a1ce22", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9", Pod:"coredns-674b8bbfcf-w6z9v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1c99ac6fcfb", MAC:"fa:64:33:6b:27:e0", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:40.209189 env[1227]: 2025-10-29 00:35:40.206 [INFO][3806] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9" Namespace="kube-system" Pod="coredns-674b8bbfcf-w6z9v" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:40.219350 env[1227]: time="2025-10-29T00:35:40.219274373Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:40.219452 env[1227]: time="2025-10-29T00:35:40.219355535Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:40.219452 env[1227]: time="2025-10-29T00:35:40.219386135Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:40.219730 env[1227]: time="2025-10-29T00:35:40.219632819Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9 pid=3918 runtime=io.containerd.runc.v2 Oct 29 00:35:40.229990 systemd[1]: Started cri-containerd-8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9.scope. Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit: BPF prog-id=144 op=LOAD Oct 29 00:35:40.244000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.244000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3918 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373762616236386164626534343532653538313634626235323165 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3918 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373762616236386164626534343532653538313634626235323165 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit: BPF prog-id=145 op=LOAD Oct 29 00:35:40.245000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3918 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373762616236386164626534343532653538313634626235323165 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit: BPF prog-id=146 op=LOAD Oct 29 00:35:40.245000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3918 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373762616236386164626534343532653538313634626235323165 Oct 29 00:35:40.245000 audit: BPF prog-id=146 op=UNLOAD Oct 29 00:35:40.245000 audit: BPF prog-id=145 op=UNLOAD Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.245000 audit: BPF prog-id=147 op=LOAD Oct 29 00:35:40.245000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3918 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373762616236386164626534343532653538313634626235323165 Oct 29 00:35:40.247910 systemd-resolved[1169]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:40.265771 env[1227]: time="2025-10-29T00:35:40.265711844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-w6z9v,Uid:5138df2c-bd88-45eb-bbe6-65f2f2a1ce22,Namespace:kube-system,Attempt:1,} returns sandbox id \"8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9\"" Oct 29 00:35:40.268070 kubelet[1982]: E1029 00:35:40.267294 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:40.273512 env[1227]: time="2025-10-29T00:35:40.273469082Z" level=info msg="CreateContainer within sandbox \"8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 29 00:35:40.290220 env[1227]: time="2025-10-29T00:35:40.289886214Z" level=info msg="CreateContainer within sandbox \"8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"52b372cfa42715ab4e673fc47213bb97ac79f478abf6c01f6e02bd31493acc0e\"" Oct 29 00:35:40.290561 env[1227]: time="2025-10-29T00:35:40.290533903Z" level=info msg="StartContainer for \"52b372cfa42715ab4e673fc47213bb97ac79f478abf6c01f6e02bd31493acc0e\"" Oct 29 00:35:40.296573 systemd-networkd[1049]: caliddc8738d7be: Link UP Oct 29 00:35:40.297573 systemd-networkd[1049]: caliddc8738d7be: Gained carrier Oct 29 00:35:40.297855 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliddc8738d7be: link becomes ready Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.030 [INFO][3799] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.045 [INFO][3799] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0 calico-apiserver-5cc878fd98- calico-apiserver c7a94bd2-06d9-4b3b-bb0e-0a6995839dda 975 0 2025-10-29 00:35:13 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5cc878fd98 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5cc878fd98-2kfdl eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliddc8738d7be [] [] }} ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Namespace="calico-apiserver" Pod="calico-apiserver-5cc878fd98-2kfdl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.046 [INFO][3799] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Namespace="calico-apiserver" Pod="calico-apiserver-5cc878fd98-2kfdl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.093 [INFO][3839] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" HandleID="k8s-pod-network.44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.093 [INFO][3839] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" HandleID="k8s-pod-network.44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a36c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5cc878fd98-2kfdl", "timestamp":"2025-10-29 00:35:40.09355997 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.093 [INFO][3839] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.191 [INFO][3839] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.191 [INFO][3839] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.262 [INFO][3839] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" host="localhost" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.268 [INFO][3839] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.273 [INFO][3839] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.275 [INFO][3839] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.278 [INFO][3839] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.278 [INFO][3839] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" host="localhost" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.280 [INFO][3839] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6 Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.284 [INFO][3839] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" host="localhost" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.292 [INFO][3839] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" host="localhost" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.292 [INFO][3839] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" host="localhost" Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.292 [INFO][3839] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:40.308651 env[1227]: 2025-10-29 00:35:40.292 [INFO][3839] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" HandleID="k8s-pod-network.44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:40.309245 env[1227]: 2025-10-29 00:35:40.294 [INFO][3799] cni-plugin/k8s.go 418: Populated endpoint ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Namespace="calico-apiserver" Pod="calico-apiserver-5cc878fd98-2kfdl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0", GenerateName:"calico-apiserver-5cc878fd98-", Namespace:"calico-apiserver", SelfLink:"", UID:"c7a94bd2-06d9-4b3b-bb0e-0a6995839dda", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc878fd98", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5cc878fd98-2kfdl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliddc8738d7be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:40.309245 env[1227]: 2025-10-29 00:35:40.294 [INFO][3799] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Namespace="calico-apiserver" Pod="calico-apiserver-5cc878fd98-2kfdl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:40.309245 env[1227]: 2025-10-29 00:35:40.295 [INFO][3799] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliddc8738d7be ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Namespace="calico-apiserver" Pod="calico-apiserver-5cc878fd98-2kfdl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:40.309245 env[1227]: 2025-10-29 00:35:40.297 [INFO][3799] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Namespace="calico-apiserver" Pod="calico-apiserver-5cc878fd98-2kfdl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:40.309245 env[1227]: 2025-10-29 00:35:40.298 [INFO][3799] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Namespace="calico-apiserver" Pod="calico-apiserver-5cc878fd98-2kfdl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0", GenerateName:"calico-apiserver-5cc878fd98-", Namespace:"calico-apiserver", SelfLink:"", UID:"c7a94bd2-06d9-4b3b-bb0e-0a6995839dda", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc878fd98", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6", Pod:"calico-apiserver-5cc878fd98-2kfdl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliddc8738d7be", MAC:"d6:4e:5a:2c:4d:2e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:40.309245 env[1227]: 2025-10-29 00:35:40.306 [INFO][3799] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6" Namespace="calico-apiserver" Pod="calico-apiserver-5cc878fd98-2kfdl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:40.312100 systemd[1]: Started cri-containerd-52b372cfa42715ab4e673fc47213bb97ac79f478abf6c01f6e02bd31493acc0e.scope. Oct 29 00:35:40.327005 env[1227]: time="2025-10-29T00:35:40.326944380Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:40.327005 env[1227]: time="2025-10-29T00:35:40.326981261Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:40.327005 env[1227]: time="2025-10-29T00:35:40.326991781Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:40.327209 env[1227]: time="2025-10-29T00:35:40.327146424Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6 pid=3988 runtime=io.containerd.runc.v2 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.330000 audit: BPF prog-id=148 op=LOAD Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3918 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623337326366613432373135616234653637336663343732313362 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3918 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623337326366613432373135616234653637336663343732313362 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit: BPF prog-id=149 op=LOAD Oct 29 00:35:40.331000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3918 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623337326366613432373135616234653637336663343732313362 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit: BPF prog-id=150 op=LOAD Oct 29 00:35:40.331000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3918 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623337326366613432373135616234653637336663343732313362 Oct 29 00:35:40.331000 audit: BPF prog-id=150 op=UNLOAD Oct 29 00:35:40.331000 audit: BPF prog-id=149 op=UNLOAD Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.331000 audit: BPF prog-id=151 op=LOAD Oct 29 00:35:40.331000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3918 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532623337326366613432373135616234653637336663343732313362 Oct 29 00:35:40.341839 systemd[1]: Started cri-containerd-44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6.scope. Oct 29 00:35:40.350044 env[1227]: time="2025-10-29T00:35:40.349974413Z" level=info msg="StartContainer for \"52b372cfa42715ab4e673fc47213bb97ac79f478abf6c01f6e02bd31493acc0e\" returns successfully" Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.359000 audit: BPF prog-id=152 op=LOAD Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3988 pid=4001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646439656134613633643464333863666562393965653836663132 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3988 pid=4001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646439656134613633643464333863666562393965653836663132 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit: BPF prog-id=153 op=LOAD Oct 29 00:35:40.364000 audit[4001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3988 pid=4001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646439656134613633643464333863666562393965653836663132 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.364000 audit: BPF prog-id=154 op=LOAD Oct 29 00:35:40.364000 audit[4001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3988 pid=4001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646439656134613633643464333863666562393965653836663132 Oct 29 00:35:40.365000 audit: BPF prog-id=154 op=UNLOAD Oct 29 00:35:40.365000 audit: BPF prog-id=153 op=UNLOAD Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { perfmon } for pid=4001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit[4001]: AVC avc: denied { bpf } for pid=4001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.365000 audit: BPF prog-id=155 op=LOAD Oct 29 00:35:40.365000 audit[4001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3988 pid=4001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434646439656134613633643464333863666562393965653836663132 Oct 29 00:35:40.368802 systemd-resolved[1169]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:40.387564 env[1227]: time="2025-10-29T00:35:40.387503107Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc878fd98-2kfdl,Uid:c7a94bd2-06d9-4b3b-bb0e-0a6995839dda,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6\"" Oct 29 00:35:40.405132 env[1227]: time="2025-10-29T00:35:40.405078016Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:40.406101 env[1227]: time="2025-10-29T00:35:40.406049430Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:40.406292 kubelet[1982]: E1029 00:35:40.406259 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:40.406366 kubelet[1982]: E1029 00:35:40.406303 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:40.406614 kubelet[1982]: E1029 00:35:40.406549 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-f9wvg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cc84f4489-klnwg_calico-apiserver(4c8785a3-edfa-416a-9abb-6a5e8713af25): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:40.406864 env[1227]: time="2025-10-29T00:35:40.406838163Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:40.407916 kubelet[1982]: E1029 00:35:40.407877 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" podUID="4c8785a3-edfa-416a-9abb-6a5e8713af25" Oct 29 00:35:40.408000 audit[3975]: AVC avc: denied { getattr } for pid=3975 comm="coredns" path="cgroup:[4026532593]" dev="nsfs" ino=4026532593 scontext=system_u:system_r:svirt_lxc_net_t:s0:c175,c301 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Oct 29 00:35:40.408000 audit[3975]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056ae0 a2=40001b2578 a3=0 items=0 ppid=3918 pid=3975 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c175,c301 key=(null) Oct 29 00:35:40.408000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Oct 29 00:35:40.630419 env[1227]: time="2025-10-29T00:35:40.630301621Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:40.631922 env[1227]: time="2025-10-29T00:35:40.631870125Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:40.632158 kubelet[1982]: E1029 00:35:40.632101 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:40.632231 kubelet[1982]: E1029 00:35:40.632169 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:40.632358 kubelet[1982]: E1029 00:35:40.632306 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-j7c9q,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cc878fd98-2kfdl_calico-apiserver(c7a94bd2-06d9-4b3b-bb0e-0a6995839dda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:40.633680 kubelet[1982]: E1029 00:35:40.633639 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" podUID="c7a94bd2-06d9-4b3b-bb0e-0a6995839dda" Oct 29 00:35:40.826692 kubelet[1982]: I1029 00:35:40.826555 1982 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Oct 29 00:35:40.826957 kubelet[1982]: E1029 00:35:40.826943 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:40.852039 env[1227]: time="2025-10-29T00:35:40.851967611Z" level=info msg="StopPodSandbox for \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\"" Oct 29 00:35:40.854391 env[1227]: time="2025-10-29T00:35:40.854342168Z" level=info msg="StopPodSandbox for \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\"" Oct 29 00:35:40.872000 audit[4092]: NETFILTER_CFG table=filter:105 family=2 entries=21 op=nft_register_rule pid=4092 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:40.872000 audit[4092]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe7e439d0 a2=0 a3=1 items=0 ppid=2093 pid=4092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.872000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:40.879000 audit[4092]: NETFILTER_CFG table=nat:106 family=2 entries=19 op=nft_register_chain pid=4092 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:40.879000 audit[4092]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe7e439d0 a2=0 a3=1 items=0 ppid=2093 pid=4092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.911 [INFO][4076] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.912 [INFO][4076] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" iface="eth0" netns="/var/run/netns/cni-94e1a12d-c080-8c8c-977d-65cd34553c94" Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.912 [INFO][4076] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" iface="eth0" netns="/var/run/netns/cni-94e1a12d-c080-8c8c-977d-65cd34553c94" Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.912 [INFO][4076] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" iface="eth0" netns="/var/run/netns/cni-94e1a12d-c080-8c8c-977d-65cd34553c94" Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.912 [INFO][4076] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.912 [INFO][4076] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.934 [INFO][4098] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" HandleID="k8s-pod-network.daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.934 [INFO][4098] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.935 [INFO][4098] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.945 [WARNING][4098] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" HandleID="k8s-pod-network.daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.946 [INFO][4098] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" HandleID="k8s-pod-network.daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.949 [INFO][4098] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:40.952912 env[1227]: 2025-10-29 00:35:40.950 [INFO][4076] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:40.957063 env[1227]: time="2025-10-29T00:35:40.957015218Z" level=info msg="TearDown network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\" successfully" Oct 29 00:35:40.957188 env[1227]: time="2025-10-29T00:35:40.957168301Z" level=info msg="StopPodSandbox for \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\" returns successfully" Oct 29 00:35:40.961920 env[1227]: time="2025-10-29T00:35:40.961874453Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-v7x7q,Uid:9522c2ec-7e06-406b-83b4-e2c84866af00,Namespace:calico-system,Attempt:1,}" Oct 29 00:35:40.963639 systemd[1]: run-netns-cni\x2d94e1a12d\x2dc080\x2d8c8c\x2d977d\x2d65cd34553c94.mount: Deactivated successfully. Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.919 [INFO][4081] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.919 [INFO][4081] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" iface="eth0" netns="/var/run/netns/cni-21aaef6f-fad9-68b2-d60a-f76a578558a3" Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.919 [INFO][4081] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" iface="eth0" netns="/var/run/netns/cni-21aaef6f-fad9-68b2-d60a-f76a578558a3" Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.919 [INFO][4081] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" iface="eth0" netns="/var/run/netns/cni-21aaef6f-fad9-68b2-d60a-f76a578558a3" Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.919 [INFO][4081] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.919 [INFO][4081] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.951 [INFO][4105] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" HandleID="k8s-pod-network.b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.952 [INFO][4105] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.952 [INFO][4105] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.961 [WARNING][4105] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" HandleID="k8s-pod-network.b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.961 [INFO][4105] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" HandleID="k8s-pod-network.b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.965 [INFO][4105] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:40.969752 env[1227]: 2025-10-29 00:35:40.967 [INFO][4081] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:40.970189 env[1227]: time="2025-10-29T00:35:40.969928016Z" level=info msg="TearDown network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\" successfully" Oct 29 00:35:40.970189 env[1227]: time="2025-10-29T00:35:40.969958456Z" level=info msg="StopPodSandbox for \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\" returns successfully" Oct 29 00:35:40.971958 systemd[1]: run-netns-cni\x2d21aaef6f\x2dfad9\x2d68b2\x2dd60a\x2df76a578558a3.mount: Deactivated successfully. Oct 29 00:35:40.972716 env[1227]: time="2025-10-29T00:35:40.972656417Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc84f4489-jjgxv,Uid:50a44f58-1837-43d6-9581-aa2468ce50ce,Namespace:calico-apiserver,Attempt:1,}" Oct 29 00:35:41.011217 kubelet[1982]: E1029 00:35:41.010883 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:41.019506 kubelet[1982]: E1029 00:35:41.018948 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" podUID="c7a94bd2-06d9-4b3b-bb0e-0a6995839dda" Oct 29 00:35:41.024878 kubelet[1982]: E1029 00:35:41.022075 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:41.024878 kubelet[1982]: I1029 00:35:41.023620 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-w6z9v" podStartSLOduration=41.023607032 podStartE2EDuration="41.023607032s" podCreationTimestamp="2025-10-29 00:35:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:35:41.023011463 +0000 UTC m=+48.281839201" watchObservedRunningTime="2025-10-29 00:35:41.023607032 +0000 UTC m=+48.282434770" Oct 29 00:35:41.025688 kubelet[1982]: E1029 00:35:41.025639 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" podUID="4c8785a3-edfa-416a-9abb-6a5e8713af25" Oct 29 00:35:41.031000 audit[4143]: NETFILTER_CFG table=filter:107 family=2 entries=20 op=nft_register_rule pid=4143 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:41.031000 audit[4143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe8273650 a2=0 a3=1 items=0 ppid=2093 pid=4143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.031000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:41.043000 audit[4143]: NETFILTER_CFG table=nat:108 family=2 entries=14 op=nft_register_rule pid=4143 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:41.043000 audit[4143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffe8273650 a2=0 a3=1 items=0 ppid=2093 pid=4143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.043000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:41.119900 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 29 00:35:41.120017 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4ee7fdd146f: link becomes ready Oct 29 00:35:41.121136 systemd-networkd[1049]: cali4ee7fdd146f: Link UP Oct 29 00:35:41.121300 systemd-networkd[1049]: cali4ee7fdd146f: Gained carrier Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:40.999 [INFO][4115] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.024 [INFO][4115] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--v7x7q-eth0 csi-node-driver- calico-system 9522c2ec-7e06-406b-83b4-e2c84866af00 1007 0 2025-10-29 00:35:18 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-v7x7q eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali4ee7fdd146f [] [] }} ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Namespace="calico-system" Pod="csi-node-driver-v7x7q" WorkloadEndpoint="localhost-k8s-csi--node--driver--v7x7q-" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.024 [INFO][4115] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Namespace="calico-system" Pod="csi-node-driver-v7x7q" WorkloadEndpoint="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.073 [INFO][4145] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" HandleID="k8s-pod-network.afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.073 [INFO][4145] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" HandleID="k8s-pod-network.afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000604500), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-v7x7q", "timestamp":"2025-10-29 00:35:41.073623385 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.073 [INFO][4145] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.073 [INFO][4145] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.074 [INFO][4145] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.087 [INFO][4145] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" host="localhost" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.092 [INFO][4145] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.097 [INFO][4145] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.100 [INFO][4145] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.102 [INFO][4145] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.102 [INFO][4145] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" host="localhost" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.103 [INFO][4145] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.108 [INFO][4145] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" host="localhost" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.113 [INFO][4145] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" host="localhost" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.113 [INFO][4145] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" host="localhost" Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.113 [INFO][4145] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:41.133597 env[1227]: 2025-10-29 00:35:41.114 [INFO][4145] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" HandleID="k8s-pod-network.afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:41.135106 env[1227]: 2025-10-29 00:35:41.116 [INFO][4115] cni-plugin/k8s.go 418: Populated endpoint ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Namespace="calico-system" Pod="csi-node-driver-v7x7q" WorkloadEndpoint="localhost-k8s-csi--node--driver--v7x7q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--v7x7q-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9522c2ec-7e06-406b-83b4-e2c84866af00", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-v7x7q", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4ee7fdd146f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:41.135106 env[1227]: 2025-10-29 00:35:41.117 [INFO][4115] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Namespace="calico-system" Pod="csi-node-driver-v7x7q" WorkloadEndpoint="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:41.135106 env[1227]: 2025-10-29 00:35:41.117 [INFO][4115] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4ee7fdd146f ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Namespace="calico-system" Pod="csi-node-driver-v7x7q" WorkloadEndpoint="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:41.135106 env[1227]: 2025-10-29 00:35:41.119 [INFO][4115] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Namespace="calico-system" Pod="csi-node-driver-v7x7q" WorkloadEndpoint="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:41.135106 env[1227]: 2025-10-29 00:35:41.120 [INFO][4115] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Namespace="calico-system" Pod="csi-node-driver-v7x7q" WorkloadEndpoint="localhost-k8s-csi--node--driver--v7x7q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--v7x7q-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9522c2ec-7e06-406b-83b4-e2c84866af00", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c", Pod:"csi-node-driver-v7x7q", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4ee7fdd146f", MAC:"d2:6e:44:6f:d1:71", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:41.135106 env[1227]: 2025-10-29 00:35:41.130 [INFO][4115] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c" Namespace="calico-system" Pod="csi-node-driver-v7x7q" WorkloadEndpoint="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:41.142813 env[1227]: time="2025-10-29T00:35:41.142739625Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:41.142813 env[1227]: time="2025-10-29T00:35:41.142783146Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:41.143002 env[1227]: time="2025-10-29T00:35:41.142793626Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:41.143210 env[1227]: time="2025-10-29T00:35:41.143176192Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c pid=4176 runtime=io.containerd.runc.v2 Oct 29 00:35:41.153421 systemd[1]: Started cri-containerd-afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c.scope. Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.170000 audit: BPF prog-id=156 op=LOAD Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4176 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616661393531393064303036643562633836656338313461303431 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4176 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616661393531393064303036643562633836656338313461303431 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit: BPF prog-id=157 op=LOAD Oct 29 00:35:41.171000 audit[4185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4176 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616661393531393064303036643562633836656338313461303431 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit: BPF prog-id=158 op=LOAD Oct 29 00:35:41.171000 audit[4185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4176 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616661393531393064303036643562633836656338313461303431 Oct 29 00:35:41.171000 audit: BPF prog-id=158 op=UNLOAD Oct 29 00:35:41.171000 audit: BPF prog-id=157 op=UNLOAD Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.171000 audit: BPF prog-id=159 op=LOAD Oct 29 00:35:41.171000 audit[4185]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4176 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616661393531393064303036643562633836656338313461303431 Oct 29 00:35:41.174840 systemd-resolved[1169]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:41.189080 env[1227]: time="2025-10-29T00:35:41.189038122Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-v7x7q,Uid:9522c2ec-7e06-406b-83b4-e2c84866af00,Namespace:calico-system,Attempt:1,} returns sandbox id \"afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c\"" Oct 29 00:35:41.192458 env[1227]: time="2025-10-29T00:35:41.192425493Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 29 00:35:41.225761 systemd-networkd[1049]: cali29e7933cabc: Link UP Oct 29 00:35:41.226999 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali29e7933cabc: link becomes ready Oct 29 00:35:41.226808 systemd-networkd[1049]: cali29e7933cabc: Gained carrier Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.030 [INFO][4127] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.053 [INFO][4127] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0 calico-apiserver-5cc84f4489- calico-apiserver 50a44f58-1837-43d6-9581-aa2468ce50ce 1008 0 2025-10-29 00:35:13 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5cc84f4489 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5cc84f4489-jjgxv eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali29e7933cabc [] [] }} ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-jjgxv" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.053 [INFO][4127] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-jjgxv" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.099 [INFO][4154] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" HandleID="k8s-pod-network.fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.099 [INFO][4154] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" HandleID="k8s-pod-network.fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb150), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5cc84f4489-jjgxv", "timestamp":"2025-10-29 00:35:41.099160809 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.099 [INFO][4154] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.113 [INFO][4154] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.114 [INFO][4154] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.189 [INFO][4154] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" host="localhost" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.193 [INFO][4154] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.198 [INFO][4154] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.200 [INFO][4154] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.205 [INFO][4154] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.205 [INFO][4154] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" host="localhost" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.210 [INFO][4154] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012 Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.213 [INFO][4154] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" host="localhost" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.219 [INFO][4154] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" host="localhost" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.219 [INFO][4154] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" host="localhost" Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.219 [INFO][4154] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:41.239187 env[1227]: 2025-10-29 00:35:41.219 [INFO][4154] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" HandleID="k8s-pod-network.fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:41.239836 env[1227]: 2025-10-29 00:35:41.224 [INFO][4127] cni-plugin/k8s.go 418: Populated endpoint ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-jjgxv" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0", GenerateName:"calico-apiserver-5cc84f4489-", Namespace:"calico-apiserver", SelfLink:"", UID:"50a44f58-1837-43d6-9581-aa2468ce50ce", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc84f4489", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5cc84f4489-jjgxv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali29e7933cabc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:41.239836 env[1227]: 2025-10-29 00:35:41.224 [INFO][4127] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-jjgxv" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:41.239836 env[1227]: 2025-10-29 00:35:41.224 [INFO][4127] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali29e7933cabc ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-jjgxv" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:41.239836 env[1227]: 2025-10-29 00:35:41.226 [INFO][4127] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-jjgxv" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:41.239836 env[1227]: 2025-10-29 00:35:41.227 [INFO][4127] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-jjgxv" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0", GenerateName:"calico-apiserver-5cc84f4489-", Namespace:"calico-apiserver", SelfLink:"", UID:"50a44f58-1837-43d6-9581-aa2468ce50ce", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc84f4489", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012", Pod:"calico-apiserver-5cc84f4489-jjgxv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali29e7933cabc", MAC:"8e:a6:47:3c:71:e4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:41.239836 env[1227]: 2025-10-29 00:35:41.237 [INFO][4127] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012" Namespace="calico-apiserver" Pod="calico-apiserver-5cc84f4489-jjgxv" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:41.249852 env[1227]: time="2025-10-29T00:35:41.249770996Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:41.250047 env[1227]: time="2025-10-29T00:35:41.250014520Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:41.250144 env[1227]: time="2025-10-29T00:35:41.250117162Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:41.250441 env[1227]: time="2025-10-29T00:35:41.250388566Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012 pid=4225 runtime=io.containerd.runc.v2 Oct 29 00:35:41.265138 systemd[1]: Started cri-containerd-fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012.scope. Oct 29 00:35:41.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit: BPF prog-id=160 op=LOAD Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662313534666539646434303064663036356437323238626265383534 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662313534666539646434303064663036356437323238626265383534 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit: BPF prog-id=161 op=LOAD Oct 29 00:35:41.281000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662313534666539646434303064663036356437323238626265383534 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.281000 audit: BPF prog-id=162 op=LOAD Oct 29 00:35:41.281000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662313534666539646434303064663036356437323238626265383534 Oct 29 00:35:41.281000 audit: BPF prog-id=162 op=UNLOAD Oct 29 00:35:41.282000 audit: BPF prog-id=161 op=UNLOAD Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { perfmon } for pid=4235 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit[4235]: AVC avc: denied { bpf } for pid=4235 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.282000 audit: BPF prog-id=163 op=LOAD Oct 29 00:35:41.282000 audit[4235]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4225 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662313534666539646434303064663036356437323238626265383534 Oct 29 00:35:41.284502 systemd-resolved[1169]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:41.301547 env[1227]: time="2025-10-29T00:35:41.301501975Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc84f4489-jjgxv,Uid:50a44f58-1837-43d6-9581-aa2468ce50ce,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012\"" Oct 29 00:35:41.370979 systemd-networkd[1049]: cali1c99ac6fcfb: Gained IPv6LL Oct 29 00:35:41.419980 env[1227]: time="2025-10-29T00:35:41.419861357Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:41.421215 env[1227]: time="2025-10-29T00:35:41.421152896Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 29 00:35:41.421598 kubelet[1982]: E1029 00:35:41.421558 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:35:41.421674 kubelet[1982]: E1029 00:35:41.421611 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:35:41.421887 kubelet[1982]: E1029 00:35:41.421851 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p7pvs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-v7x7q_calico-system(9522c2ec-7e06-406b-83b4-e2c84866af00): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:41.422729 env[1227]: time="2025-10-29T00:35:41.422679199Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit: BPF prog-id=164 op=LOAD Oct 29 00:35:41.570000 audit[4276]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0634268 a2=98 a3=ffffd0634258 items=0 ppid=4258 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.570000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 29 00:35:41.570000 audit: BPF prog-id=164 op=UNLOAD Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.570000 audit: BPF prog-id=165 op=LOAD Oct 29 00:35:41.570000 audit[4276]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0634118 a2=74 a3=95 items=0 ppid=4258 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.570000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 29 00:35:41.571000 audit: BPF prog-id=165 op=UNLOAD Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { bpf } for pid=4276 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit: BPF prog-id=166 op=LOAD Oct 29 00:35:41.571000 audit[4276]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0634148 a2=40 a3=ffffd0634178 items=0 ppid=4258 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.571000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 29 00:35:41.571000 audit: BPF prog-id=166 op=UNLOAD Oct 29 00:35:41.571000 audit[4276]: AVC avc: denied { perfmon } for pid=4276 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.571000 audit[4276]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd0634260 a2=50 a3=0 items=0 ppid=4258 pid=4276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.571000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit: BPF prog-id=167 op=LOAD Oct 29 00:35:41.573000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc57a0d18 a2=98 a3=ffffc57a0d08 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.573000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.573000 audit: BPF prog-id=167 op=UNLOAD Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit: BPF prog-id=168 op=LOAD Oct 29 00:35:41.573000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc57a09a8 a2=74 a3=95 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.573000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.573000 audit: BPF prog-id=168 op=UNLOAD Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.573000 audit: BPF prog-id=169 op=LOAD Oct 29 00:35:41.573000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc57a0a08 a2=94 a3=2 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.573000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.573000 audit: BPF prog-id=169 op=UNLOAD Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit: BPF prog-id=170 op=LOAD Oct 29 00:35:41.656000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc57a09c8 a2=40 a3=ffffc57a09f8 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.656000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.656000 audit: BPF prog-id=170 op=UNLOAD Oct 29 00:35:41.656000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.656000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc57a0ae0 a2=50 a3=0 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.656000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc57a0a38 a2=28 a3=ffffc57a0b68 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc57a0a68 a2=28 a3=ffffc57a0b98 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc57a0918 a2=28 a3=ffffc57a0a48 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc57a0a88 a2=28 a3=ffffc57a0bb8 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc57a0a68 a2=28 a3=ffffc57a0b98 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc57a0a58 a2=28 a3=ffffc57a0b88 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc57a0a88 a2=28 a3=ffffc57a0bb8 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc57a0a68 a2=28 a3=ffffc57a0b98 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc57a0a88 a2=28 a3=ffffc57a0bb8 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc57a0a58 a2=28 a3=ffffc57a0b88 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc57a0ad8 a2=28 a3=ffffc57a0c18 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc57a0810 a2=50 a3=0 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit: BPF prog-id=171 op=LOAD Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc57a0818 a2=94 a3=5 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit: BPF prog-id=171 op=UNLOAD Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc57a0920 a2=50 a3=0 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc57a0a68 a2=4 a3=3 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { confidentiality } for pid=4277 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc57a0a48 a2=94 a3=6 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { confidentiality } for pid=4277 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc57a0218 a2=94 a3=83 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { perfmon } for pid=4277 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { bpf } for pid=4277 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.665000 audit[4277]: AVC avc: denied { confidentiality } for pid=4277 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:41.665000 audit[4277]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc57a0218 a2=94 a3=83 items=0 ppid=4258 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.665000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit: BPF prog-id=172 op=LOAD Oct 29 00:35:41.675000 audit[4280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe09b3478 a2=98 a3=ffffe09b3468 items=0 ppid=4258 pid=4280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.675000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 29 00:35:41.675000 audit: BPF prog-id=172 op=UNLOAD Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit: BPF prog-id=173 op=LOAD Oct 29 00:35:41.675000 audit[4280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe09b3328 a2=74 a3=95 items=0 ppid=4258 pid=4280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.675000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 29 00:35:41.675000 audit: BPF prog-id=173 op=UNLOAD Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { perfmon } for pid=4280 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit[4280]: AVC avc: denied { bpf } for pid=4280 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.675000 audit: BPF prog-id=174 op=LOAD Oct 29 00:35:41.675000 audit[4280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe09b3358 a2=40 a3=ffffe09b3388 items=0 ppid=4258 pid=4280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.675000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 29 00:35:41.675000 audit: BPF prog-id=174 op=UNLOAD Oct 29 00:35:41.690945 systemd-networkd[1049]: caliddc8738d7be: Gained IPv6LL Oct 29 00:35:41.706622 env[1227]: time="2025-10-29T00:35:41.706575993Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:41.707900 env[1227]: time="2025-10-29T00:35:41.707845252Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:41.708248 kubelet[1982]: E1029 00:35:41.708202 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:41.708330 kubelet[1982]: E1029 00:35:41.708260 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:41.708653 kubelet[1982]: E1029 00:35:41.708501 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-jg4g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cc84f4489-jjgxv_calico-apiserver(50a44f58-1837-43d6-9581-aa2468ce50ce): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:41.708989 env[1227]: time="2025-10-29T00:35:41.708961909Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 29 00:35:41.710734 kubelet[1982]: E1029 00:35:41.710673 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" podUID="50a44f58-1837-43d6-9581-aa2468ce50ce" Oct 29 00:35:41.753340 systemd-networkd[1049]: vxlan.calico: Link UP Oct 29 00:35:41.753347 systemd-networkd[1049]: vxlan.calico: Gained carrier Oct 29 00:35:41.754935 systemd-networkd[1049]: calicc5e89c53cc: Gained IPv6LL Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit: BPF prog-id=175 op=LOAD Oct 29 00:35:41.774000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe35797a8 a2=98 a3=ffffe3579798 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.774000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.774000 audit: BPF prog-id=175 op=UNLOAD Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.774000 audit: BPF prog-id=176 op=LOAD Oct 29 00:35:41.774000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe3579488 a2=74 a3=95 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.774000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit: BPF prog-id=176 op=UNLOAD Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit: BPF prog-id=177 op=LOAD Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe35794e8 a2=94 a3=2 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit: BPF prog-id=177 op=UNLOAD Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe3579518 a2=28 a3=ffffe3579648 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe3579548 a2=28 a3=ffffe3579678 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe35793f8 a2=28 a3=ffffe3579528 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe3579568 a2=28 a3=ffffe3579698 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe3579548 a2=28 a3=ffffe3579678 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe3579538 a2=28 a3=ffffe3579668 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe3579568 a2=28 a3=ffffe3579698 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe3579548 a2=28 a3=ffffe3579678 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe3579568 a2=28 a3=ffffe3579698 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe3579538 a2=28 a3=ffffe3579668 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe35795b8 a2=28 a3=ffffe35796f8 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.775000 audit: BPF prog-id=178 op=LOAD Oct 29 00:35:41.775000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe35793d8 a2=40 a3=ffffe3579408 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.775000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.775000 audit: BPF prog-id=178 op=UNLOAD Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe3579400 a2=50 a3=0 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.776000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe3579400 a2=50 a3=0 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.776000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit: BPF prog-id=179 op=LOAD Oct 29 00:35:41.776000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe3578b68 a2=94 a3=2 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.776000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.776000 audit: BPF prog-id=179 op=UNLOAD Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.776000 audit: BPF prog-id=180 op=LOAD Oct 29 00:35:41.776000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe3578cf8 a2=94 a3=30 items=0 ppid=4258 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.776000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit: BPF prog-id=181 op=LOAD Oct 29 00:35:41.794000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1d7b8e8 a2=98 a3=ffffd1d7b8d8 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.794000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.794000 audit: BPF prog-id=181 op=UNLOAD Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit: BPF prog-id=182 op=LOAD Oct 29 00:35:41.794000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd1d7b578 a2=74 a3=95 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.794000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.794000 audit: BPF prog-id=182 op=UNLOAD Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.794000 audit: BPF prog-id=183 op=LOAD Oct 29 00:35:41.794000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd1d7b5d8 a2=94 a3=2 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.794000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.794000 audit: BPF prog-id=183 op=UNLOAD Oct 29 00:35:41.851526 env[1227]: time="2025-10-29T00:35:41.851478215Z" level=info msg="StopPodSandbox for \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\"" Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit: BPF prog-id=184 op=LOAD Oct 29 00:35:41.918000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd1d7b598 a2=40 a3=ffffd1d7b5c8 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.918000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.918000 audit: BPF prog-id=184 op=UNLOAD Oct 29 00:35:41.918000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.918000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd1d7b6b0 a2=50 a3=0 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.918000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.928567 env[1227]: time="2025-10-29T00:35:41.928444013Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:41.933208 env[1227]: time="2025-10-29T00:35:41.933144604Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 29 00:35:41.933739 kubelet[1982]: E1029 00:35:41.933684 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:35:41.934041 kubelet[1982]: E1029 00:35:41.933748 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:35:41.934041 kubelet[1982]: E1029 00:35:41.933903 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p7pvs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-v7x7q_calico-system(9522c2ec-7e06-406b-83b4-e2c84866af00): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1d7b608 a2=28 a3=ffffd1d7b738 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1d7b638 a2=28 a3=ffffd1d7b768 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1d7b4e8 a2=28 a3=ffffd1d7b618 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1d7b658 a2=28 a3=ffffd1d7b788 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1d7b638 a2=28 a3=ffffd1d7b768 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1d7b628 a2=28 a3=ffffd1d7b758 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1d7b658 a2=28 a3=ffffd1d7b788 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1d7b638 a2=28 a3=ffffd1d7b768 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1d7b658 a2=28 a3=ffffd1d7b788 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1d7b628 a2=28 a3=ffffd1d7b758 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.932000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.932000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1d7b6a8 a2=28 a3=ffffd1d7b7e8 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.932000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd1d7b3e0 a2=50 a3=0 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.933000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit: BPF prog-id=185 op=LOAD Oct 29 00:35:41.933000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd1d7b3e8 a2=94 a3=5 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.933000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.933000 audit: BPF prog-id=185 op=UNLOAD Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd1d7b4f0 a2=50 a3=0 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.933000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd1d7b638 a2=4 a3=3 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.933000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { confidentiality } for pid=4329 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:41.933000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd1d7b618 a2=94 a3=6 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.933000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { confidentiality } for pid=4329 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:41.933000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd1d7ade8 a2=94 a3=83 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.933000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { perfmon } for pid=4329 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.933000 audit[4329]: AVC avc: denied { confidentiality } for pid=4329 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:41.933000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd1d7ade8 a2=94 a3=83 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.933000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.934000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.934000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd1d7c828 a2=10 a3=ffffd1d7c918 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.934000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.934000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd1d7c6e8 a2=10 a3=ffffd1d7c7d8 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.934000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.934000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd1d7c658 a2=10 a3=ffffd1d7c7d8 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.934000 audit[4329]: AVC avc: denied { bpf } for pid=4329 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:41.934000 audit[4329]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd1d7c658 a2=10 a3=ffffd1d7c7d8 items=0 ppid=4258 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:41.937969 kubelet[1982]: E1029 00:35:41.935204 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:41.944000 audit: BPF prog-id=180 op=UNLOAD Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.926 [INFO][4349] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.926 [INFO][4349] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" iface="eth0" netns="/var/run/netns/cni-dc3dc98e-6aeb-de7f-45d7-c1f54b0470d4" Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.926 [INFO][4349] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" iface="eth0" netns="/var/run/netns/cni-dc3dc98e-6aeb-de7f-45d7-c1f54b0470d4" Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.927 [INFO][4349] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" iface="eth0" netns="/var/run/netns/cni-dc3dc98e-6aeb-de7f-45d7-c1f54b0470d4" Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.927 [INFO][4349] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.927 [INFO][4349] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.957 [INFO][4373] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" HandleID="k8s-pod-network.bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.957 [INFO][4373] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.957 [INFO][4373] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.971 [WARNING][4373] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" HandleID="k8s-pod-network.bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.971 [INFO][4373] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" HandleID="k8s-pod-network.bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.973 [INFO][4373] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:41.979499 env[1227]: 2025-10-29 00:35:41.975 [INFO][4349] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:41.980372 env[1227]: time="2025-10-29T00:35:41.980336795Z" level=info msg="TearDown network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\" successfully" Oct 29 00:35:41.980470 env[1227]: time="2025-10-29T00:35:41.980453036Z" level=info msg="StopPodSandbox for \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\" returns successfully" Oct 29 00:35:41.981364 kubelet[1982]: E1029 00:35:41.980847 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:41.981756 env[1227]: time="2025-10-29T00:35:41.981712015Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-nqdlc,Uid:fdba9f1f-ced4-486c-bbb9-2da28071f6cb,Namespace:kube-system,Attempt:1,}" Oct 29 00:35:41.982488 systemd[1]: run-netns-cni\x2ddc3dc98e\x2d6aeb\x2dde7f\x2d45d7\x2dc1f54b0470d4.mount: Deactivated successfully. Oct 29 00:35:42.025379 kubelet[1982]: E1029 00:35:42.025310 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:42.026633 kubelet[1982]: E1029 00:35:42.026606 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:42.027169 kubelet[1982]: E1029 00:35:42.027138 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" podUID="c7a94bd2-06d9-4b3b-bb0e-0a6995839dda" Oct 29 00:35:42.027294 kubelet[1982]: E1029 00:35:42.027181 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" podUID="4c8785a3-edfa-416a-9abb-6a5e8713af25" Oct 29 00:35:42.027294 kubelet[1982]: E1029 00:35:42.027159 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" podUID="50a44f58-1837-43d6-9581-aa2468ce50ce" Oct 29 00:35:42.038000 audit[4414]: NETFILTER_CFG table=mangle:109 family=2 entries=16 op=nft_register_chain pid=4414 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:42.038000 audit[4414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffc1a36350 a2=0 a3=ffffa32e7fa8 items=0 ppid=4258 pid=4414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.038000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:42.042000 audit[4425]: NETFILTER_CFG table=nat:110 family=2 entries=15 op=nft_register_chain pid=4425 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:42.042000 audit[4425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffc8d2b890 a2=0 a3=ffffab926fa8 items=0 ppid=4258 pid=4425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.042000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:42.049000 audit[4411]: NETFILTER_CFG table=raw:111 family=2 entries=21 op=nft_register_chain pid=4411 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:42.049000 audit[4411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffd3a66010 a2=0 a3=ffffb7af2fa8 items=0 ppid=4258 pid=4411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.049000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:42.054000 audit[4428]: NETFILTER_CFG table=filter:112 family=2 entries=256 op=nft_register_chain pid=4428 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:42.054000 audit[4428]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=152728 a0=3 a1=fffff99b4e90 a2=0 a3=ffff92c12fa8 items=0 ppid=4258 pid=4428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.054000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:42.080000 audit[4437]: NETFILTER_CFG table=filter:113 family=2 entries=17 op=nft_register_rule pid=4437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:42.080000 audit[4437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcc0e7cf0 a2=0 a3=1 items=0 ppid=2093 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.080000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:42.086000 audit[4437]: NETFILTER_CFG table=nat:114 family=2 entries=35 op=nft_register_chain pid=4437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:42.086000 audit[4437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffcc0e7cf0 a2=0 a3=1 items=0 ppid=2093 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.086000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:42.207486 systemd-networkd[1049]: calic353455d8e9: Link UP Oct 29 00:35:42.210023 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic353455d8e9: link becomes ready Oct 29 00:35:42.210360 systemd-networkd[1049]: calic353455d8e9: Gained carrier Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.128 [INFO][4412] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0 coredns-674b8bbfcf- kube-system fdba9f1f-ced4-486c-bbb9-2da28071f6cb 1047 0 2025-10-29 00:35:00 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-nqdlc eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic353455d8e9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-nqdlc" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--nqdlc-" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.128 [INFO][4412] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-nqdlc" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.164 [INFO][4441] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" HandleID="k8s-pod-network.a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.164 [INFO][4441] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" HandleID="k8s-pod-network.a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d6e0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-nqdlc", "timestamp":"2025-10-29 00:35:42.164313967 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.164 [INFO][4441] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.164 [INFO][4441] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.164 [INFO][4441] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.176 [INFO][4441] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" host="localhost" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.182 [INFO][4441] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.186 [INFO][4441] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.188 [INFO][4441] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.191 [INFO][4441] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.191 [INFO][4441] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" host="localhost" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.193 [INFO][4441] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7 Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.197 [INFO][4441] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" host="localhost" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.203 [INFO][4441] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" host="localhost" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.203 [INFO][4441] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" host="localhost" Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.203 [INFO][4441] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:42.224837 env[1227]: 2025-10-29 00:35:42.203 [INFO][4441] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" HandleID="k8s-pod-network.a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:42.225463 env[1227]: 2025-10-29 00:35:42.206 [INFO][4412] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-nqdlc" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fdba9f1f-ced4-486c-bbb9-2da28071f6cb", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-nqdlc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic353455d8e9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:42.225463 env[1227]: 2025-10-29 00:35:42.206 [INFO][4412] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-nqdlc" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:42.225463 env[1227]: 2025-10-29 00:35:42.206 [INFO][4412] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic353455d8e9 ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-nqdlc" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:42.225463 env[1227]: 2025-10-29 00:35:42.211 [INFO][4412] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-nqdlc" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:42.225463 env[1227]: 2025-10-29 00:35:42.211 [INFO][4412] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-nqdlc" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fdba9f1f-ced4-486c-bbb9-2da28071f6cb", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7", Pod:"coredns-674b8bbfcf-nqdlc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic353455d8e9", MAC:"6e:51:4f:5c:fd:ea", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:42.225463 env[1227]: 2025-10-29 00:35:42.221 [INFO][4412] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7" Namespace="kube-system" Pod="coredns-674b8bbfcf-nqdlc" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:42.235000 audit[4459]: NETFILTER_CFG table=filter:115 family=2 entries=58 op=nft_register_chain pid=4459 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:42.235000 audit[4459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26760 a0=3 a1=ffffd9edad90 a2=0 a3=ffff97759fa8 items=0 ppid=4258 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.235000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:42.242769 env[1227]: time="2025-10-29T00:35:42.242615329Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:42.242769 env[1227]: time="2025-10-29T00:35:42.242747370Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:42.242769 env[1227]: time="2025-10-29T00:35:42.242759851Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:42.243052 env[1227]: time="2025-10-29T00:35:42.243004774Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7 pid=4467 runtime=io.containerd.runc.v2 Oct 29 00:35:42.257941 systemd[1]: Started cri-containerd-a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7.scope. Oct 29 00:35:42.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit: BPF prog-id=186 op=LOAD Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4467 pid=4477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136326165633534333234306535313362376261623562666430626565 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4467 pid=4477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136326165633534333234306535313362376261623562666430626565 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit: BPF prog-id=187 op=LOAD Oct 29 00:35:42.278000 audit[4477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4467 pid=4477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136326165633534333234306535313362376261623562666430626565 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit: BPF prog-id=188 op=LOAD Oct 29 00:35:42.278000 audit[4477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4467 pid=4477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136326165633534333234306535313362376261623562666430626565 Oct 29 00:35:42.278000 audit: BPF prog-id=188 op=UNLOAD Oct 29 00:35:42.278000 audit: BPF prog-id=187 op=UNLOAD Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { perfmon } for pid=4477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit[4477]: AVC avc: denied { bpf } for pid=4477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.278000 audit: BPF prog-id=189 op=LOAD Oct 29 00:35:42.278000 audit[4477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4467 pid=4477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136326165633534333234306535313362376261623562666430626565 Oct 29 00:35:42.282302 systemd-resolved[1169]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:42.298605 env[1227]: time="2025-10-29T00:35:42.298562718Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-nqdlc,Uid:fdba9f1f-ced4-486c-bbb9-2da28071f6cb,Namespace:kube-system,Attempt:1,} returns sandbox id \"a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7\"" Oct 29 00:35:42.299534 kubelet[1982]: E1029 00:35:42.299505 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:42.325626 env[1227]: time="2025-10-29T00:35:42.325572839Z" level=info msg="CreateContainer within sandbox \"a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 29 00:35:42.392730 env[1227]: time="2025-10-29T00:35:42.392674874Z" level=info msg="CreateContainer within sandbox \"a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"49b75e25dec59d0da75bc571007babb3683ebf87b00023b6530eac3440150ed7\"" Oct 29 00:35:42.393224 env[1227]: time="2025-10-29T00:35:42.393191921Z" level=info msg="StartContainer for \"49b75e25dec59d0da75bc571007babb3683ebf87b00023b6530eac3440150ed7\"" Oct 29 00:35:42.407450 systemd[1]: Started cri-containerd-49b75e25dec59d0da75bc571007babb3683ebf87b00023b6530eac3440150ed7.scope. Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.424000 audit: BPF prog-id=190 op=LOAD Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4467 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623735653235646563353964306461373562633537313030376261 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4467 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623735653235646563353964306461373562633537313030376261 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit: BPF prog-id=191 op=LOAD Oct 29 00:35:42.425000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4467 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623735653235646563353964306461373562633537313030376261 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit: BPF prog-id=192 op=LOAD Oct 29 00:35:42.425000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4467 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623735653235646563353964306461373562633537313030376261 Oct 29 00:35:42.425000 audit: BPF prog-id=192 op=UNLOAD Oct 29 00:35:42.425000 audit: BPF prog-id=191 op=UNLOAD Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { perfmon } for pid=4507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit[4507]: AVC avc: denied { bpf } for pid=4507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.425000 audit: BPF prog-id=193 op=LOAD Oct 29 00:35:42.425000 audit[4507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4467 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439623735653235646563353964306461373562633537313030376261 Oct 29 00:35:42.442535 env[1227]: time="2025-10-29T00:35:42.442480212Z" level=info msg="StartContainer for \"49b75e25dec59d0da75bc571007babb3683ebf87b00023b6530eac3440150ed7\" returns successfully" Oct 29 00:35:42.448000 audit[4518]: AVC avc: denied { getattr } for pid=4518 comm="coredns" path="cgroup:[4026532446]" dev="nsfs" ino=4026532446 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c676 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Oct 29 00:35:42.448000 audit[4518]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056ac8 a2=40000e2578 a3=0 items=0 ppid=4467 pid=4518 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c676 key=(null) Oct 29 00:35:42.448000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Oct 29 00:35:42.651027 systemd-networkd[1049]: cali29e7933cabc: Gained IPv6LL Oct 29 00:35:42.778982 systemd-networkd[1049]: cali4ee7fdd146f: Gained IPv6LL Oct 29 00:35:42.851860 env[1227]: time="2025-10-29T00:35:42.851799441Z" level=info msg="StopPodSandbox for \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\"" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.902 [INFO][4550] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.902 [INFO][4550] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" iface="eth0" netns="/var/run/netns/cni-16e8c23e-99ba-f1df-9601-19f874a59e83" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.902 [INFO][4550] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" iface="eth0" netns="/var/run/netns/cni-16e8c23e-99ba-f1df-9601-19f874a59e83" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.902 [INFO][4550] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" iface="eth0" netns="/var/run/netns/cni-16e8c23e-99ba-f1df-9601-19f874a59e83" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.902 [INFO][4550] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.902 [INFO][4550] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.920 [INFO][4559] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" HandleID="k8s-pod-network.d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.920 [INFO][4559] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.920 [INFO][4559] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.930 [WARNING][4559] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" HandleID="k8s-pod-network.d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.930 [INFO][4559] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" HandleID="k8s-pod-network.d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.931 [INFO][4559] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:42.935004 env[1227]: 2025-10-29 00:35:42.933 [INFO][4550] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:42.935811 env[1227]: time="2025-10-29T00:35:42.935069116Z" level=info msg="TearDown network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\" successfully" Oct 29 00:35:42.935811 env[1227]: time="2025-10-29T00:35:42.935100237Z" level=info msg="StopPodSandbox for \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\" returns successfully" Oct 29 00:35:42.935945 env[1227]: time="2025-10-29T00:35:42.935834167Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-c7jtc,Uid:4d0f98b5-229e-4f67-a068-6905ca873422,Namespace:calico-system,Attempt:1,}" Oct 29 00:35:42.961322 systemd[1]: run-netns-cni\x2d16e8c23e\x2d99ba\x2df1df\x2d9601\x2d19f874a59e83.mount: Deactivated successfully. Oct 29 00:35:43.034335 kubelet[1982]: E1029 00:35:43.034295 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" podUID="50a44f58-1837-43d6-9581-aa2468ce50ce" Oct 29 00:35:43.035170 kubelet[1982]: E1029 00:35:43.035149 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:43.036120 kubelet[1982]: E1029 00:35:43.036074 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:43.103000 audit[4591]: NETFILTER_CFG table=filter:116 family=2 entries=14 op=nft_register_rule pid=4591 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:43.103000 audit[4591]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd4ad2550 a2=0 a3=1 items=0 ppid=2093 pid=4591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.103000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:43.106309 systemd-networkd[1049]: cali1da43fd18dc: Link UP Oct 29 00:35:43.107443 systemd-networkd[1049]: cali1da43fd18dc: Gained carrier Oct 29 00:35:43.107843 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1da43fd18dc: link becomes ready Oct 29 00:35:43.113000 audit[4591]: NETFILTER_CFG table=nat:117 family=2 entries=20 op=nft_register_rule pid=4591 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:43.113000 audit[4591]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd4ad2550 a2=0 a3=1 items=0 ppid=2093 pid=4591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.113000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:43.121967 kubelet[1982]: I1029 00:35:43.121915 1982 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-nqdlc" podStartSLOduration=43.121897661 podStartE2EDuration="43.121897661s" podCreationTimestamp="2025-10-29 00:35:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:35:43.114812197 +0000 UTC m=+50.373639935" watchObservedRunningTime="2025-10-29 00:35:43.121897661 +0000 UTC m=+50.380725399" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:42.981 [INFO][4568] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--666569f655--c7jtc-eth0 goldmane-666569f655- calico-system 4d0f98b5-229e-4f67-a068-6905ca873422 1077 0 2025-10-29 00:35:16 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-666569f655-c7jtc eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali1da43fd18dc [] [] }} ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Namespace="calico-system" Pod="goldmane-666569f655-c7jtc" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--c7jtc-" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:42.981 [INFO][4568] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Namespace="calico-system" Pod="goldmane-666569f655-c7jtc" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.004 [INFO][4581] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" HandleID="k8s-pod-network.e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.004 [INFO][4581] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" HandleID="k8s-pod-network.e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c790), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-666569f655-c7jtc", "timestamp":"2025-10-29 00:35:43.004434424 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.004 [INFO][4581] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.004 [INFO][4581] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.004 [INFO][4581] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.015 [INFO][4581] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" host="localhost" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.019 [INFO][4581] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.023 [INFO][4581] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.026 [INFO][4581] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.028 [INFO][4581] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.029 [INFO][4581] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" host="localhost" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.030 [INFO][4581] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.038 [INFO][4581] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" host="localhost" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.087 [INFO][4581] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" host="localhost" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.087 [INFO][4581] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" host="localhost" Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.087 [INFO][4581] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:43.126049 env[1227]: 2025-10-29 00:35:43.087 [INFO][4581] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" HandleID="k8s-pod-network.e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:43.126574 env[1227]: 2025-10-29 00:35:43.093 [INFO][4568] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Namespace="calico-system" Pod="goldmane-666569f655-c7jtc" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--c7jtc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--c7jtc-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"4d0f98b5-229e-4f67-a068-6905ca873422", ResourceVersion:"1077", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-666569f655-c7jtc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1da43fd18dc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:43.126574 env[1227]: 2025-10-29 00:35:43.093 [INFO][4568] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Namespace="calico-system" Pod="goldmane-666569f655-c7jtc" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:43.126574 env[1227]: 2025-10-29 00:35:43.093 [INFO][4568] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1da43fd18dc ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Namespace="calico-system" Pod="goldmane-666569f655-c7jtc" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:43.126574 env[1227]: 2025-10-29 00:35:43.107 [INFO][4568] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Namespace="calico-system" Pod="goldmane-666569f655-c7jtc" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:43.126574 env[1227]: 2025-10-29 00:35:43.108 [INFO][4568] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Namespace="calico-system" Pod="goldmane-666569f655-c7jtc" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--c7jtc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--c7jtc-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"4d0f98b5-229e-4f67-a068-6905ca873422", ResourceVersion:"1077", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f", Pod:"goldmane-666569f655-c7jtc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1da43fd18dc", MAC:"7a:f8:9e:c1:69:59", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:43.126574 env[1227]: 2025-10-29 00:35:43.122 [INFO][4568] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f" Namespace="calico-system" Pod="goldmane-666569f655-c7jtc" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:43.141169 env[1227]: time="2025-10-29T00:35:43.141084941Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:43.141169 env[1227]: time="2025-10-29T00:35:43.141135302Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:43.141449 env[1227]: time="2025-10-29T00:35:43.141147462Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:43.138000 audit[4607]: NETFILTER_CFG table=filter:118 family=2 entries=70 op=nft_register_chain pid=4607 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:43.138000 audit[4607]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=33956 a0=3 a1=ffffd280c060 a2=0 a3=ffff89e1efa8 items=0 ppid=4258 pid=4607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.138000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:43.141781 env[1227]: time="2025-10-29T00:35:43.141700870Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f pid=4609 runtime=io.containerd.runc.v2 Oct 29 00:35:43.161976 systemd[1]: Started cri-containerd-e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f.scope. Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.176000 audit: BPF prog-id=194 op=LOAD Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4609 pid=4619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636330363630386664353265383562393861643866363637643531 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4609 pid=4619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636330363630386664353265383562393861643866363637643531 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit: BPF prog-id=195 op=LOAD Oct 29 00:35:43.177000 audit[4619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4609 pid=4619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636330363630386664353265383562393861643866363637643531 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.177000 audit: BPF prog-id=196 op=LOAD Oct 29 00:35:43.177000 audit[4619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4609 pid=4619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636330363630386664353265383562393861643866363637643531 Oct 29 00:35:43.179000 audit: BPF prog-id=196 op=UNLOAD Oct 29 00:35:43.179000 audit: BPF prog-id=195 op=UNLOAD Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { perfmon } for pid=4619 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit[4619]: AVC avc: denied { bpf } for pid=4619 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.179000 audit: BPF prog-id=197 op=LOAD Oct 29 00:35:43.179000 audit[4619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4609 pid=4619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636330363630386664353265383562393861643866363637643531 Oct 29 00:35:43.182083 systemd-resolved[1169]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:43.199858 env[1227]: time="2025-10-29T00:35:43.198474740Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-c7jtc,Uid:4d0f98b5-229e-4f67-a068-6905ca873422,Namespace:calico-system,Attempt:1,} returns sandbox id \"e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f\"" Oct 29 00:35:43.202640 env[1227]: time="2025-10-29T00:35:43.202610520Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 29 00:35:43.431213 env[1227]: time="2025-10-29T00:35:43.431161421Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:43.432308 env[1227]: time="2025-10-29T00:35:43.432251717Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 29 00:35:43.432604 kubelet[1982]: E1029 00:35:43.432561 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:35:43.432716 kubelet[1982]: E1029 00:35:43.432666 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:35:43.433061 kubelet[1982]: E1029 00:35:43.432859 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k85rf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-c7jtc_calico-system(4d0f98b5-229e-4f67-a068-6905ca873422): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:43.434143 kubelet[1982]: E1029 00:35:43.434107 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-c7jtc" podUID="4d0f98b5-229e-4f67-a068-6905ca873422" Oct 29 00:35:43.802998 systemd-networkd[1049]: vxlan.calico: Gained IPv6LL Oct 29 00:35:43.852179 env[1227]: time="2025-10-29T00:35:43.851798649Z" level=info msg="StopPodSandbox for \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\"" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.908 [INFO][4659] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.908 [INFO][4659] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" iface="eth0" netns="/var/run/netns/cni-b96ca5fc-933e-74c5-950a-320f40b9c964" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.909 [INFO][4659] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" iface="eth0" netns="/var/run/netns/cni-b96ca5fc-933e-74c5-950a-320f40b9c964" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.909 [INFO][4659] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" iface="eth0" netns="/var/run/netns/cni-b96ca5fc-933e-74c5-950a-320f40b9c964" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.909 [INFO][4659] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.909 [INFO][4659] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.937 [INFO][4668] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" HandleID="k8s-pod-network.07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.937 [INFO][4668] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.937 [INFO][4668] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.948 [WARNING][4668] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" HandleID="k8s-pod-network.07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.948 [INFO][4668] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" HandleID="k8s-pod-network.07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.950 [INFO][4668] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:43.953748 env[1227]: 2025-10-29 00:35:43.951 [INFO][4659] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:43.956855 systemd[1]: run-netns-cni\x2db96ca5fc\x2d933e\x2d74c5\x2d950a\x2d320f40b9c964.mount: Deactivated successfully. Oct 29 00:35:43.957906 env[1227]: time="2025-10-29T00:35:43.957857239Z" level=info msg="TearDown network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\" successfully" Oct 29 00:35:43.957984 env[1227]: time="2025-10-29T00:35:43.957906399Z" level=info msg="StopPodSandbox for \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\" returns successfully" Oct 29 00:35:43.958646 env[1227]: time="2025-10-29T00:35:43.958615130Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-b97b6d78f-whrv6,Uid:1cb90272-e579-4d3e-853a-0d02317a9f36,Namespace:calico-system,Attempt:1,}" Oct 29 00:35:44.044180 kubelet[1982]: E1029 00:35:44.043669 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:44.045383 kubelet[1982]: E1029 00:35:44.045342 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-c7jtc" podUID="4d0f98b5-229e-4f67-a068-6905ca873422" Oct 29 00:35:44.067000 audit[4699]: NETFILTER_CFG table=filter:119 family=2 entries=14 op=nft_register_rule pid=4699 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:44.067000 audit[4699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffebeaabe0 a2=0 a3=1 items=0 ppid=2093 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.067000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:44.075000 audit[4699]: NETFILTER_CFG table=nat:120 family=2 entries=44 op=nft_register_rule pid=4699 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:44.075000 audit[4699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffebeaabe0 a2=0 a3=1 items=0 ppid=2093 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:44.126385 systemd-networkd[1049]: cali7a43991f7ac: Link UP Oct 29 00:35:44.129346 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 29 00:35:44.129445 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7a43991f7ac: link becomes ready Oct 29 00:35:44.128850 systemd-networkd[1049]: cali7a43991f7ac: Gained carrier Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.030 [INFO][4677] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0 calico-kube-controllers-b97b6d78f- calico-system 1cb90272-e579-4d3e-853a-0d02317a9f36 1131 0 2025-10-29 00:35:19 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:b97b6d78f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-b97b6d78f-whrv6 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali7a43991f7ac [] [] }} ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Namespace="calico-system" Pod="calico-kube-controllers-b97b6d78f-whrv6" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.030 [INFO][4677] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Namespace="calico-system" Pod="calico-kube-controllers-b97b6d78f-whrv6" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.075 [INFO][4692] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" HandleID="k8s-pod-network.610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.075 [INFO][4692] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" HandleID="k8s-pod-network.610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c38a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-b97b6d78f-whrv6", "timestamp":"2025-10-29 00:35:44.075509343 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.075 [INFO][4692] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.075 [INFO][4692] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.075 [INFO][4692] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.087 [INFO][4692] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" host="localhost" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.093 [INFO][4692] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.100 [INFO][4692] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.102 [INFO][4692] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.105 [INFO][4692] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.105 [INFO][4692] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" host="localhost" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.107 [INFO][4692] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5 Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.111 [INFO][4692] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" host="localhost" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.121 [INFO][4692] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" host="localhost" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.122 [INFO][4692] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" host="localhost" Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.122 [INFO][4692] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:44.143823 env[1227]: 2025-10-29 00:35:44.122 [INFO][4692] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" HandleID="k8s-pod-network.610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:44.144509 env[1227]: 2025-10-29 00:35:44.124 [INFO][4677] cni-plugin/k8s.go 418: Populated endpoint ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Namespace="calico-system" Pod="calico-kube-controllers-b97b6d78f-whrv6" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0", GenerateName:"calico-kube-controllers-b97b6d78f-", Namespace:"calico-system", SelfLink:"", UID:"1cb90272-e579-4d3e-853a-0d02317a9f36", ResourceVersion:"1131", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"b97b6d78f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-b97b6d78f-whrv6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7a43991f7ac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:44.144509 env[1227]: 2025-10-29 00:35:44.124 [INFO][4677] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Namespace="calico-system" Pod="calico-kube-controllers-b97b6d78f-whrv6" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:44.144509 env[1227]: 2025-10-29 00:35:44.124 [INFO][4677] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7a43991f7ac ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Namespace="calico-system" Pod="calico-kube-controllers-b97b6d78f-whrv6" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:44.144509 env[1227]: 2025-10-29 00:35:44.128 [INFO][4677] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Namespace="calico-system" Pod="calico-kube-controllers-b97b6d78f-whrv6" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:44.144509 env[1227]: 2025-10-29 00:35:44.133 [INFO][4677] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Namespace="calico-system" Pod="calico-kube-controllers-b97b6d78f-whrv6" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0", GenerateName:"calico-kube-controllers-b97b6d78f-", Namespace:"calico-system", SelfLink:"", UID:"1cb90272-e579-4d3e-853a-0d02317a9f36", ResourceVersion:"1131", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"b97b6d78f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5", Pod:"calico-kube-controllers-b97b6d78f-whrv6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7a43991f7ac", MAC:"1e:1d:98:d9:d9:81", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:44.144509 env[1227]: 2025-10-29 00:35:44.141 [INFO][4677] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5" Namespace="calico-system" Pod="calico-kube-controllers-b97b6d78f-whrv6" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:44.156280 env[1227]: time="2025-10-29T00:35:44.156205507Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:44.156280 env[1227]: time="2025-10-29T00:35:44.156248267Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:44.156280 env[1227]: time="2025-10-29T00:35:44.156260388Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:44.156615 env[1227]: time="2025-10-29T00:35:44.156582152Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5 pid=4717 runtime=io.containerd.runc.v2 Oct 29 00:35:44.164000 audit[4730]: NETFILTER_CFG table=filter:121 family=2 entries=62 op=nft_register_chain pid=4730 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:44.164000 audit[4730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28336 a0=3 a1=ffffe530f840 a2=0 a3=ffffb2ee2fa8 items=0 ppid=4258 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.164000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:44.182346 systemd[1]: Started cri-containerd-610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5.scope. Oct 29 00:35:44.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.78:22-10.0.0.1:36080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:44.184251 systemd[1]: Started sshd@7-10.0.0.78:22-10.0.0.1:36080.service. Oct 29 00:35:44.188671 systemd-networkd[1049]: calic353455d8e9: Gained IPv6LL Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.201000 audit: BPF prog-id=198 op=LOAD Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4717 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631306435363437363431646132623935316463303239646635376365 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4717 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631306435363437363431646132623935316463303239646635376365 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit: BPF prog-id=199 op=LOAD Oct 29 00:35:44.202000 audit[4729]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4717 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631306435363437363431646132623935316463303239646635376365 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit: BPF prog-id=200 op=LOAD Oct 29 00:35:44.202000 audit[4729]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4717 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631306435363437363431646132623935316463303239646635376365 Oct 29 00:35:44.202000 audit: BPF prog-id=200 op=UNLOAD Oct 29 00:35:44.202000 audit: BPF prog-id=199 op=UNLOAD Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:44.202000 audit: BPF prog-id=201 op=LOAD Oct 29 00:35:44.202000 audit[4729]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4717 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631306435363437363431646132623935316463303239646635376365 Oct 29 00:35:44.205240 systemd-resolved[1169]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:44.236040 env[1227]: time="2025-10-29T00:35:44.235909416Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-b97b6d78f-whrv6,Uid:1cb90272-e579-4d3e-853a-0d02317a9f36,Namespace:calico-system,Attempt:1,} returns sandbox id \"610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5\"" Oct 29 00:35:44.238068 env[1227]: time="2025-10-29T00:35:44.238027766Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 29 00:35:44.252000 audit[4741]: USER_ACCT pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:44.254932 sshd[4741]: Accepted publickey for core from 10.0.0.1 port 36080 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:44.254000 audit[4741]: CRED_ACQ pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:44.254000 audit[4741]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffece438f0 a2=3 a3=1 items=0 ppid=1 pid=4741 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.254000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:44.257572 sshd[4741]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:44.261404 systemd-logind[1215]: New session 8 of user core. Oct 29 00:35:44.262333 systemd[1]: Started session-8.scope. Oct 29 00:35:44.265000 audit[4741]: USER_START pid=4741 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:44.267000 audit[4755]: CRED_ACQ pid=4755 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:44.436213 sshd[4741]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:44.435000 audit[4741]: USER_END pid=4741 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:44.435000 audit[4741]: CRED_DISP pid=4741 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:44.440554 systemd[1]: session-8.scope: Deactivated successfully. Oct 29 00:35:44.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.78:22-10.0.0.1:36080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:44.441261 systemd-logind[1215]: Session 8 logged out. Waiting for processes to exit. Oct 29 00:35:44.441457 systemd[1]: sshd@7-10.0.0.78:22-10.0.0.1:36080.service: Deactivated successfully. Oct 29 00:35:44.442676 systemd-logind[1215]: Removed session 8. Oct 29 00:35:44.634927 systemd-networkd[1049]: cali1da43fd18dc: Gained IPv6LL Oct 29 00:35:45.046937 kubelet[1982]: E1029 00:35:45.046888 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:45.052810 kubelet[1982]: E1029 00:35:45.052760 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-c7jtc" podUID="4d0f98b5-229e-4f67-a068-6905ca873422" Oct 29 00:35:45.106000 audit[4768]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=4768 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:45.106000 audit[4768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc8663dc0 a2=0 a3=1 items=0 ppid=2093 pid=4768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.106000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:45.123000 audit[4768]: NETFILTER_CFG table=nat:123 family=2 entries=56 op=nft_register_chain pid=4768 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:45.123000 audit[4768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffc8663dc0 a2=0 a3=1 items=0 ppid=2093 pid=4768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.123000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:45.378991 env[1227]: time="2025-10-29T00:35:45.378866582Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:45.382226 env[1227]: time="2025-10-29T00:35:45.382167989Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 29 00:35:45.382467 kubelet[1982]: E1029 00:35:45.382427 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:35:45.382556 kubelet[1982]: E1029 00:35:45.382482 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:35:45.382677 kubelet[1982]: E1029 00:35:45.382630 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2xcld,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-b97b6d78f-whrv6_calico-system(1cb90272-e579-4d3e-853a-0d02317a9f36): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:45.383970 kubelet[1982]: E1029 00:35:45.383926 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" podUID="1cb90272-e579-4d3e-853a-0d02317a9f36" Oct 29 00:35:45.850990 systemd-networkd[1049]: cali7a43991f7ac: Gained IPv6LL Oct 29 00:35:46.049663 kubelet[1982]: E1029 00:35:46.049625 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:46.050444 kubelet[1982]: E1029 00:35:46.050405 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" podUID="1cb90272-e579-4d3e-853a-0d02317a9f36" Oct 29 00:35:47.852676 env[1227]: time="2025-10-29T00:35:47.852149271Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 29 00:35:48.067598 env[1227]: time="2025-10-29T00:35:48.067543933Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:48.068667 env[1227]: time="2025-10-29T00:35:48.068607388Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 29 00:35:48.069084 kubelet[1982]: E1029 00:35:48.068939 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:35:48.069084 kubelet[1982]: E1029 00:35:48.068984 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:35:48.069399 kubelet[1982]: E1029 00:35:48.069123 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6f7e70f605b847bb8177a761abe3098a,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-ls2zx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5798b799b7-lfq86_calico-system(db9690bc-af00-4609-9dd2-e9df44a4ba6f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:48.071661 env[1227]: time="2025-10-29T00:35:48.071627189Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 29 00:35:48.274203 env[1227]: time="2025-10-29T00:35:48.274006889Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:48.277170 env[1227]: time="2025-10-29T00:35:48.277051131Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 29 00:35:48.277361 kubelet[1982]: E1029 00:35:48.277318 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:35:48.277415 kubelet[1982]: E1029 00:35:48.277383 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:35:48.277563 kubelet[1982]: E1029 00:35:48.277515 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ls2zx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5798b799b7-lfq86_calico-system(db9690bc-af00-4609-9dd2-e9df44a4ba6f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:48.279382 kubelet[1982]: E1029 00:35:48.278930 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5798b799b7-lfq86" podUID="db9690bc-af00-4609-9dd2-e9df44a4ba6f" Oct 29 00:35:49.444029 systemd[1]: Started sshd@8-10.0.0.78:22-10.0.0.1:56044.service. Oct 29 00:35:49.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.78:22-10.0.0.1:56044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:49.445936 kernel: kauditd_printk_skb: 1144 callbacks suppressed Oct 29 00:35:49.446048 kernel: audit: type=1130 audit(1761698149.442:1340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.78:22-10.0.0.1:56044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:49.483000 audit[4779]: USER_ACCT pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.485799 sshd[4779]: Accepted publickey for core from 10.0.0.1 port 56044 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:49.487463 sshd[4779]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:49.485000 audit[4779]: CRED_ACQ pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.492197 kernel: audit: type=1101 audit(1761698149.483:1341): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.492256 kernel: audit: type=1103 audit(1761698149.485:1342): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.492286 kernel: audit: type=1006 audit(1761698149.485:1343): pid=4779 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 29 00:35:49.485000 audit[4779]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9243390 a2=3 a3=1 items=0 ppid=1 pid=4779 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:49.497868 kernel: audit: type=1300 audit(1761698149.485:1343): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9243390 a2=3 a3=1 items=0 ppid=1 pid=4779 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:49.497982 kernel: audit: type=1327 audit(1761698149.485:1343): proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:49.485000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:49.496520 systemd-logind[1215]: New session 9 of user core. Oct 29 00:35:49.497496 systemd[1]: Started session-9.scope. Oct 29 00:35:49.508000 audit[4779]: USER_START pid=4779 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.513829 kernel: audit: type=1105 audit(1761698149.508:1344): pid=4779 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.509000 audit[4781]: CRED_ACQ pid=4781 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.516880 kernel: audit: type=1103 audit(1761698149.509:1345): pid=4781 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.658772 sshd[4779]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:49.657000 audit[4779]: USER_END pid=4779 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.662810 systemd[1]: sshd@8-10.0.0.78:22-10.0.0.1:56044.service: Deactivated successfully. Oct 29 00:35:49.658000 audit[4779]: CRED_DISP pid=4779 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.665245 systemd[1]: session-9.scope: Deactivated successfully. Oct 29 00:35:49.667076 kernel: audit: type=1106 audit(1761698149.657:1346): pid=4779 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.667131 kernel: audit: type=1104 audit(1761698149.658:1347): pid=4779 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.667187 systemd-logind[1215]: Session 9 logged out. Waiting for processes to exit. Oct 29 00:35:49.668294 systemd-logind[1215]: Removed session 9. Oct 29 00:35:49.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.78:22-10.0.0.1:56044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:50.091000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.091000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.091000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4011a08750 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:35:50.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:50.091000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4010b30d20 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:35:50.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:50.092000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.092000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=40116af500 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:35:50.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:50.092000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.092000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=4011389f50 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:35:50.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:50.097000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.097000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=40116af560 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:35:50.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:50.112000 audit[1854]: AVC avc: denied { watch } for pid=1854 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.112000 audit[1854]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4010b30d40 a2=fc6 a3=0 items=0 ppid=1692 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c588,c931 key=(null) Oct 29 00:35:50.112000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:50.790000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.790000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40022292f0 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:35:50.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:50.790000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.790000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e89bc0 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:35:50.790000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:52.822090 env[1227]: time="2025-10-29T00:35:52.822024259Z" level=info msg="StopPodSandbox for \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\"" Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.862 [WARNING][4809] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5138df2c-bd88-45eb-bbe6-65f2f2a1ce22", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9", Pod:"coredns-674b8bbfcf-w6z9v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1c99ac6fcfb", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.863 [INFO][4809] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.863 [INFO][4809] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" iface="eth0" netns="" Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.863 [INFO][4809] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.863 [INFO][4809] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.886 [INFO][4819] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" HandleID="k8s-pod-network.0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.886 [INFO][4819] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.886 [INFO][4819] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.897 [WARNING][4819] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" HandleID="k8s-pod-network.0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.897 [INFO][4819] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" HandleID="k8s-pod-network.0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.899 [INFO][4819] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:52.902492 env[1227]: 2025-10-29 00:35:52.901 [INFO][4809] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:52.903081 env[1227]: time="2025-10-29T00:35:52.902524883Z" level=info msg="TearDown network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\" successfully" Oct 29 00:35:52.903081 env[1227]: time="2025-10-29T00:35:52.902556523Z" level=info msg="StopPodSandbox for \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\" returns successfully" Oct 29 00:35:52.903213 env[1227]: time="2025-10-29T00:35:52.903180932Z" level=info msg="RemovePodSandbox for \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\"" Oct 29 00:35:52.903267 env[1227]: time="2025-10-29T00:35:52.903226172Z" level=info msg="Forcibly stopping sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\"" Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.935 [WARNING][4837] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5138df2c-bd88-45eb-bbe6-65f2f2a1ce22", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8b77bab68adbe4452e58164bb521ec11d758bbfd9eba068d511c59fce77907d9", Pod:"coredns-674b8bbfcf-w6z9v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1c99ac6fcfb", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.936 [INFO][4837] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.936 [INFO][4837] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" iface="eth0" netns="" Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.936 [INFO][4837] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.936 [INFO][4837] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.954 [INFO][4845] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" HandleID="k8s-pod-network.0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.955 [INFO][4845] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.955 [INFO][4845] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.963 [WARNING][4845] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" HandleID="k8s-pod-network.0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.964 [INFO][4845] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" HandleID="k8s-pod-network.0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Workload="localhost-k8s-coredns--674b8bbfcf--w6z9v-eth0" Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.965 [INFO][4845] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:52.968661 env[1227]: 2025-10-29 00:35:52.967 [INFO][4837] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737" Oct 29 00:35:52.969494 env[1227]: time="2025-10-29T00:35:52.968686317Z" level=info msg="TearDown network for sandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\" successfully" Oct 29 00:35:52.979395 env[1227]: time="2025-10-29T00:35:52.979347418Z" level=info msg="RemovePodSandbox \"0808ffa182d3d81ed84517ee2651a78178cac1a7dbe1bff70eb44ca3c9569737\" returns successfully" Oct 29 00:35:52.979965 env[1227]: time="2025-10-29T00:35:52.979930305Z" level=info msg="StopPodSandbox for \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\"" Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.029 [WARNING][4864] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--c7jtc-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"4d0f98b5-229e-4f67-a068-6905ca873422", ResourceVersion:"1163", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f", Pod:"goldmane-666569f655-c7jtc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1da43fd18dc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.029 [INFO][4864] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.029 [INFO][4864] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" iface="eth0" netns="" Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.029 [INFO][4864] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.029 [INFO][4864] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.047 [INFO][4873] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" HandleID="k8s-pod-network.d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.047 [INFO][4873] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.047 [INFO][4873] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.056 [WARNING][4873] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" HandleID="k8s-pod-network.d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.056 [INFO][4873] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" HandleID="k8s-pod-network.d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.057 [INFO][4873] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.061124 env[1227]: 2025-10-29 00:35:53.059 [INFO][4864] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:53.061716 env[1227]: time="2025-10-29T00:35:53.061151132Z" level=info msg="TearDown network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\" successfully" Oct 29 00:35:53.061716 env[1227]: time="2025-10-29T00:35:53.061182852Z" level=info msg="StopPodSandbox for \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\" returns successfully" Oct 29 00:35:53.062183 env[1227]: time="2025-10-29T00:35:53.062125585Z" level=info msg="RemovePodSandbox for \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\"" Oct 29 00:35:53.062249 env[1227]: time="2025-10-29T00:35:53.062171225Z" level=info msg="Forcibly stopping sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\"" Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.098 [WARNING][4890] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--c7jtc-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"4d0f98b5-229e-4f67-a068-6905ca873422", ResourceVersion:"1163", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e3cc06608fd52e85b98ad8f667d514894f8538e28f973a00e5ab6f57259ac61f", Pod:"goldmane-666569f655-c7jtc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1da43fd18dc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.098 [INFO][4890] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.098 [INFO][4890] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" iface="eth0" netns="" Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.098 [INFO][4890] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.098 [INFO][4890] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.119 [INFO][4899] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" HandleID="k8s-pod-network.d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.119 [INFO][4899] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.119 [INFO][4899] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.131 [WARNING][4899] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" HandleID="k8s-pod-network.d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.131 [INFO][4899] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" HandleID="k8s-pod-network.d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Workload="localhost-k8s-goldmane--666569f655--c7jtc-eth0" Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.133 [INFO][4899] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.136648 env[1227]: 2025-10-29 00:35:53.135 [INFO][4890] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994" Oct 29 00:35:53.137823 env[1227]: time="2025-10-29T00:35:53.136614400Z" level=info msg="TearDown network for sandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\" successfully" Oct 29 00:35:53.215390 env[1227]: time="2025-10-29T00:35:53.215334991Z" level=info msg="RemovePodSandbox \"d1fde011d8b49dfd65a199bee6618186f5618524797b8c76e1da1c35c71bc994\" returns successfully" Oct 29 00:35:53.216018 env[1227]: time="2025-10-29T00:35:53.215965440Z" level=info msg="StopPodSandbox for \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\"" Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.309 [WARNING][4916] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0", GenerateName:"calico-kube-controllers-b97b6d78f-", Namespace:"calico-system", SelfLink:"", UID:"1cb90272-e579-4d3e-853a-0d02317a9f36", ResourceVersion:"1175", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"b97b6d78f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5", Pod:"calico-kube-controllers-b97b6d78f-whrv6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7a43991f7ac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.310 [INFO][4916] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.310 [INFO][4916] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" iface="eth0" netns="" Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.310 [INFO][4916] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.310 [INFO][4916] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.328 [INFO][4925] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" HandleID="k8s-pod-network.07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.328 [INFO][4925] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.328 [INFO][4925] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.338 [WARNING][4925] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" HandleID="k8s-pod-network.07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.338 [INFO][4925] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" HandleID="k8s-pod-network.07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.339 [INFO][4925] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.342724 env[1227]: 2025-10-29 00:35:53.341 [INFO][4916] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:53.343189 env[1227]: time="2025-10-29T00:35:53.342765141Z" level=info msg="TearDown network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\" successfully" Oct 29 00:35:53.343189 env[1227]: time="2025-10-29T00:35:53.342795621Z" level=info msg="StopPodSandbox for \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\" returns successfully" Oct 29 00:35:53.343626 env[1227]: time="2025-10-29T00:35:53.343592672Z" level=info msg="RemovePodSandbox for \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\"" Oct 29 00:35:53.343692 env[1227]: time="2025-10-29T00:35:53.343638632Z" level=info msg="Forcibly stopping sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\"" Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.379 [WARNING][4944] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0", GenerateName:"calico-kube-controllers-b97b6d78f-", Namespace:"calico-system", SelfLink:"", UID:"1cb90272-e579-4d3e-853a-0d02317a9f36", ResourceVersion:"1175", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"b97b6d78f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"610d5647641da2b951dc029df57cedb3f9fb87f0a29cde0178cb348cee3f3fd5", Pod:"calico-kube-controllers-b97b6d78f-whrv6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7a43991f7ac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.380 [INFO][4944] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.380 [INFO][4944] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" iface="eth0" netns="" Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.380 [INFO][4944] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.380 [INFO][4944] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.397 [INFO][4952] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" HandleID="k8s-pod-network.07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.397 [INFO][4952] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.397 [INFO][4952] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.407 [WARNING][4952] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" HandleID="k8s-pod-network.07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.407 [INFO][4952] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" HandleID="k8s-pod-network.07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Workload="localhost-k8s-calico--kube--controllers--b97b6d78f--whrv6-eth0" Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.408 [INFO][4952] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.412210 env[1227]: 2025-10-29 00:35:53.410 [INFO][4944] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2" Oct 29 00:35:53.412210 env[1227]: time="2025-10-29T00:35:53.412176770Z" level=info msg="TearDown network for sandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\" successfully" Oct 29 00:35:53.546244 env[1227]: time="2025-10-29T00:35:53.546173205Z" level=info msg="RemovePodSandbox \"07df432e65b83a9da99ab9c2582cf8c78c1626958c19bf5c5d44e493f4b761c2\" returns successfully" Oct 29 00:35:53.547281 env[1227]: time="2025-10-29T00:35:53.546947775Z" level=info msg="StopPodSandbox for \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\"" Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.583 [WARNING][4970] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--v7x7q-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9522c2ec-7e06-406b-83b4-e2c84866af00", ResourceVersion:"1085", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c", Pod:"csi-node-driver-v7x7q", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4ee7fdd146f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.583 [INFO][4970] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.583 [INFO][4970] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" iface="eth0" netns="" Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.583 [INFO][4970] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.583 [INFO][4970] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.603 [INFO][4979] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" HandleID="k8s-pod-network.daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.604 [INFO][4979] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.604 [INFO][4979] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.612 [WARNING][4979] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" HandleID="k8s-pod-network.daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.612 [INFO][4979] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" HandleID="k8s-pod-network.daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.614 [INFO][4979] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.620406 env[1227]: 2025-10-29 00:35:53.616 [INFO][4970] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:53.620874 env[1227]: time="2025-10-29T00:35:53.620452058Z" level=info msg="TearDown network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\" successfully" Oct 29 00:35:53.620874 env[1227]: time="2025-10-29T00:35:53.620490659Z" level=info msg="StopPodSandbox for \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\" returns successfully" Oct 29 00:35:53.622481 env[1227]: time="2025-10-29T00:35:53.622451124Z" level=info msg="RemovePodSandbox for \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\"" Oct 29 00:35:53.622555 env[1227]: time="2025-10-29T00:35:53.622491365Z" level=info msg="Forcibly stopping sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\"" Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.660 [WARNING][4996] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--v7x7q-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9522c2ec-7e06-406b-83b4-e2c84866af00", ResourceVersion:"1085", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"afafa95190d006d5bc86ec814a0417d3abb912dfd55e1f66d342e560d5380e4c", Pod:"csi-node-driver-v7x7q", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4ee7fdd146f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.660 [INFO][4996] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.661 [INFO][4996] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" iface="eth0" netns="" Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.661 [INFO][4996] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.661 [INFO][4996] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.677 [INFO][5006] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" HandleID="k8s-pod-network.daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.677 [INFO][5006] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.677 [INFO][5006] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.687 [WARNING][5006] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" HandleID="k8s-pod-network.daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.687 [INFO][5006] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" HandleID="k8s-pod-network.daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Workload="localhost-k8s-csi--node--driver--v7x7q-eth0" Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.688 [INFO][5006] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.691877 env[1227]: 2025-10-29 00:35:53.690 [INFO][4996] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443" Oct 29 00:35:53.691877 env[1227]: time="2025-10-29T00:35:53.691842753Z" level=info msg="TearDown network for sandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\" successfully" Oct 29 00:35:53.698127 env[1227]: time="2025-10-29T00:35:53.698072195Z" level=info msg="RemovePodSandbox \"daf6a293db66ec347a519445bba0ef346374e3c1e20af4e34b8d28973539b443\" returns successfully" Oct 29 00:35:53.698611 env[1227]: time="2025-10-29T00:35:53.698579762Z" level=info msg="StopPodSandbox for \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\"" Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.742 [WARNING][5024] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0", GenerateName:"calico-apiserver-5cc878fd98-", Namespace:"calico-apiserver", SelfLink:"", UID:"c7a94bd2-06d9-4b3b-bb0e-0a6995839dda", ResourceVersion:"1057", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc878fd98", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6", Pod:"calico-apiserver-5cc878fd98-2kfdl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliddc8738d7be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.743 [INFO][5024] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.743 [INFO][5024] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" iface="eth0" netns="" Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.743 [INFO][5024] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.743 [INFO][5024] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.760 [INFO][5034] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" HandleID="k8s-pod-network.a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.760 [INFO][5034] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.760 [INFO][5034] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.771 [WARNING][5034] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" HandleID="k8s-pod-network.a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.771 [INFO][5034] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" HandleID="k8s-pod-network.a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.773 [INFO][5034] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.776437 env[1227]: 2025-10-29 00:35:53.774 [INFO][5024] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:53.776920 env[1227]: time="2025-10-29T00:35:53.776479222Z" level=info msg="TearDown network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\" successfully" Oct 29 00:35:53.776920 env[1227]: time="2025-10-29T00:35:53.776516422Z" level=info msg="StopPodSandbox for \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\" returns successfully" Oct 29 00:35:53.777286 env[1227]: time="2025-10-29T00:35:53.777246672Z" level=info msg="RemovePodSandbox for \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\"" Oct 29 00:35:53.777430 env[1227]: time="2025-10-29T00:35:53.777381114Z" level=info msg="Forcibly stopping sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\"" Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.812 [WARNING][5052] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0", GenerateName:"calico-apiserver-5cc878fd98-", Namespace:"calico-apiserver", SelfLink:"", UID:"c7a94bd2-06d9-4b3b-bb0e-0a6995839dda", ResourceVersion:"1057", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc878fd98", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"44dd9ea4a63d4d38cfeb99ee86f12f22248a5dfc1f87c46422fba9bada3ca8b6", Pod:"calico-apiserver-5cc878fd98-2kfdl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliddc8738d7be", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.813 [INFO][5052] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.813 [INFO][5052] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" iface="eth0" netns="" Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.813 [INFO][5052] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.813 [INFO][5052] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.831 [INFO][5061] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" HandleID="k8s-pod-network.a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.831 [INFO][5061] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.831 [INFO][5061] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.841 [WARNING][5061] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" HandleID="k8s-pod-network.a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.841 [INFO][5061] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" HandleID="k8s-pod-network.a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Workload="localhost-k8s-calico--apiserver--5cc878fd98--2kfdl-eth0" Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.842 [INFO][5061] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.846034 env[1227]: 2025-10-29 00:35:53.844 [INFO][5052] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423" Oct 29 00:35:53.846640 env[1227]: time="2025-10-29T00:35:53.846066374Z" level=info msg="TearDown network for sandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\" successfully" Oct 29 00:35:53.849088 env[1227]: time="2025-10-29T00:35:53.849050053Z" level=info msg="RemovePodSandbox \"a56f2d6d537a1c952955a375b910312b73b66a06273bf1c0b8769c5cd549b423\" returns successfully" Oct 29 00:35:53.849680 env[1227]: time="2025-10-29T00:35:53.849651620Z" level=info msg="StopPodSandbox for \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\"" Oct 29 00:35:53.852612 env[1227]: time="2025-10-29T00:35:53.852560739Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.891 [WARNING][5081] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fdba9f1f-ced4-486c-bbb9-2da28071f6cb", ResourceVersion:"1141", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7", Pod:"coredns-674b8bbfcf-nqdlc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic353455d8e9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.892 [INFO][5081] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.892 [INFO][5081] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" iface="eth0" netns="" Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.892 [INFO][5081] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.892 [INFO][5081] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.909 [INFO][5090] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" HandleID="k8s-pod-network.bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.909 [INFO][5090] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.909 [INFO][5090] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.919 [WARNING][5090] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" HandleID="k8s-pod-network.bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.919 [INFO][5090] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" HandleID="k8s-pod-network.bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.923 [INFO][5090] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.926388 env[1227]: 2025-10-29 00:35:53.924 [INFO][5081] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:53.927039 env[1227]: time="2025-10-29T00:35:53.926439786Z" level=info msg="TearDown network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\" successfully" Oct 29 00:35:53.927039 env[1227]: time="2025-10-29T00:35:53.926474507Z" level=info msg="StopPodSandbox for \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\" returns successfully" Oct 29 00:35:53.927613 env[1227]: time="2025-10-29T00:35:53.927587721Z" level=info msg="RemovePodSandbox for \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\"" Oct 29 00:35:53.927741 env[1227]: time="2025-10-29T00:35:53.927702003Z" level=info msg="Forcibly stopping sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\"" Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:53.967 [WARNING][5108] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fdba9f1f-ced4-486c-bbb9-2da28071f6cb", ResourceVersion:"1141", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a62aec543240e513b7bab5bfd0beea3b32c083f27e10ad582c84643a453cd4b7", Pod:"coredns-674b8bbfcf-nqdlc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic353455d8e9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:53.967 [INFO][5108] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:53.967 [INFO][5108] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" iface="eth0" netns="" Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:53.967 [INFO][5108] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:53.967 [INFO][5108] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:53.989 [INFO][5116] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" HandleID="k8s-pod-network.bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:53.989 [INFO][5116] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:53.989 [INFO][5116] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:54.004 [WARNING][5116] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" HandleID="k8s-pod-network.bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:54.005 [INFO][5116] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" HandleID="k8s-pod-network.bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Workload="localhost-k8s-coredns--674b8bbfcf--nqdlc-eth0" Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:54.007 [INFO][5116] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.011094 env[1227]: 2025-10-29 00:35:54.009 [INFO][5108] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6" Oct 29 00:35:54.011545 env[1227]: time="2025-10-29T00:35:54.011120495Z" level=info msg="TearDown network for sandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\" successfully" Oct 29 00:35:54.014132 env[1227]: time="2025-10-29T00:35:54.014099813Z" level=info msg="RemovePodSandbox \"bda6c9030b6c3d8a9be535f6f5166541cca1358ba7f169af78d83e6a9cf873f6\" returns successfully" Oct 29 00:35:54.014589 env[1227]: time="2025-10-29T00:35:54.014553259Z" level=info msg="StopPodSandbox for \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\"" Oct 29 00:35:54.072969 env[1227]: time="2025-10-29T00:35:54.072924658Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:54.075275 env[1227]: time="2025-10-29T00:35:54.075195487Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 29 00:35:54.075683 kubelet[1982]: E1029 00:35:54.075634 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:35:54.075683 kubelet[1982]: E1029 00:35:54.075687 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:35:54.076485 kubelet[1982]: E1029 00:35:54.075839 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p7pvs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-v7x7q_calico-system(9522c2ec-7e06-406b-83b4-e2c84866af00): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:54.081141 env[1227]: time="2025-10-29T00:35:54.080611078Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.048 [WARNING][5133] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0", GenerateName:"calico-apiserver-5cc84f4489-", Namespace:"calico-apiserver", SelfLink:"", UID:"50a44f58-1837-43d6-9581-aa2468ce50ce", ResourceVersion:"1082", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc84f4489", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012", Pod:"calico-apiserver-5cc84f4489-jjgxv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali29e7933cabc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.048 [INFO][5133] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.048 [INFO][5133] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" iface="eth0" netns="" Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.048 [INFO][5133] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.048 [INFO][5133] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.065 [INFO][5142] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" HandleID="k8s-pod-network.b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.066 [INFO][5142] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.066 [INFO][5142] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.078 [WARNING][5142] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" HandleID="k8s-pod-network.b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.078 [INFO][5142] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" HandleID="k8s-pod-network.b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.081 [INFO][5142] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.085941 env[1227]: 2025-10-29 00:35:54.083 [INFO][5133] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:54.085941 env[1227]: time="2025-10-29T00:35:54.085624383Z" level=info msg="TearDown network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\" successfully" Oct 29 00:35:54.085941 env[1227]: time="2025-10-29T00:35:54.085648343Z" level=info msg="StopPodSandbox for \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\" returns successfully" Oct 29 00:35:54.086426 env[1227]: time="2025-10-29T00:35:54.086143189Z" level=info msg="RemovePodSandbox for \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\"" Oct 29 00:35:54.086426 env[1227]: time="2025-10-29T00:35:54.086174310Z" level=info msg="Forcibly stopping sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\"" Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.121 [WARNING][5161] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0", GenerateName:"calico-apiserver-5cc84f4489-", Namespace:"calico-apiserver", SelfLink:"", UID:"50a44f58-1837-43d6-9581-aa2468ce50ce", ResourceVersion:"1082", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc84f4489", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fb154fe9dd400df065d7228bbe8548fb1d9a9cc2f04e46e8e273f11faab88012", Pod:"calico-apiserver-5cc84f4489-jjgxv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali29e7933cabc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.121 [INFO][5161] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.121 [INFO][5161] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" iface="eth0" netns="" Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.121 [INFO][5161] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.121 [INFO][5161] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.139 [INFO][5171] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" HandleID="k8s-pod-network.b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.140 [INFO][5171] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.140 [INFO][5171] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.149 [WARNING][5171] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" HandleID="k8s-pod-network.b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.149 [INFO][5171] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" HandleID="k8s-pod-network.b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Workload="localhost-k8s-calico--apiserver--5cc84f4489--jjgxv-eth0" Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.151 [INFO][5171] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.154403 env[1227]: 2025-10-29 00:35:54.152 [INFO][5161] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35" Oct 29 00:35:54.155028 env[1227]: time="2025-10-29T00:35:54.154973524Z" level=info msg="TearDown network for sandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\" successfully" Oct 29 00:35:54.158205 env[1227]: time="2025-10-29T00:35:54.158165365Z" level=info msg="RemovePodSandbox \"b7152b39895b4792437eec29e54b8e83882c484f61411d5503b2e76f7df9fd35\" returns successfully" Oct 29 00:35:54.158873 env[1227]: time="2025-10-29T00:35:54.158842454Z" level=info msg="StopPodSandbox for \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\"" Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.196 [WARNING][5189] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0", GenerateName:"calico-apiserver-5cc84f4489-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c8785a3-edfa-416a-9abb-6a5e8713af25", ResourceVersion:"1060", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc84f4489", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233", Pod:"calico-apiserver-5cc84f4489-klnwg", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calicc5e89c53cc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.197 [INFO][5189] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.197 [INFO][5189] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" iface="eth0" netns="" Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.197 [INFO][5189] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.197 [INFO][5189] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.215 [INFO][5200] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" HandleID="k8s-pod-network.82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.215 [INFO][5200] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.215 [INFO][5200] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.227 [WARNING][5200] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" HandleID="k8s-pod-network.82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.227 [INFO][5200] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" HandleID="k8s-pod-network.82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.229 [INFO][5200] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.232956 env[1227]: 2025-10-29 00:35:54.231 [INFO][5189] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:54.233468 env[1227]: time="2025-10-29T00:35:54.233431223Z" level=info msg="TearDown network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\" successfully" Oct 29 00:35:54.233533 env[1227]: time="2025-10-29T00:35:54.233515905Z" level=info msg="StopPodSandbox for \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\" returns successfully" Oct 29 00:35:54.234238 env[1227]: time="2025-10-29T00:35:54.234144433Z" level=info msg="RemovePodSandbox for \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\"" Oct 29 00:35:54.234238 env[1227]: time="2025-10-29T00:35:54.234196313Z" level=info msg="Forcibly stopping sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\"" Oct 29 00:35:54.272909 env[1227]: time="2025-10-29T00:35:54.271986884Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:54.280402 env[1227]: time="2025-10-29T00:35:54.280334393Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 29 00:35:54.280797 kubelet[1982]: E1029 00:35:54.280751 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:35:54.280887 kubelet[1982]: E1029 00:35:54.280835 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:35:54.281044 kubelet[1982]: E1029 00:35:54.280997 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p7pvs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-v7x7q_calico-system(9522c2ec-7e06-406b-83b4-e2c84866af00): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:54.283756 kubelet[1982]: E1029 00:35:54.282952 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.270 [WARNING][5217] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0", GenerateName:"calico-apiserver-5cc84f4489-", Namespace:"calico-apiserver", SelfLink:"", UID:"4c8785a3-edfa-416a-9abb-6a5e8713af25", ResourceVersion:"1060", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc84f4489", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"133a5a48c848b2d4115b68f0a348dfd70eca43aad5f264c83b1575f75738d233", Pod:"calico-apiserver-5cc84f4489-klnwg", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calicc5e89c53cc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.270 [INFO][5217] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.270 [INFO][5217] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" iface="eth0" netns="" Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.270 [INFO][5217] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.270 [INFO][5217] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.290 [INFO][5226] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" HandleID="k8s-pod-network.82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.291 [INFO][5226] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.291 [INFO][5226] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.308 [WARNING][5226] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" HandleID="k8s-pod-network.82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.308 [INFO][5226] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" HandleID="k8s-pod-network.82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Workload="localhost-k8s-calico--apiserver--5cc84f4489--klnwg-eth0" Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.309 [INFO][5226] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.313463 env[1227]: 2025-10-29 00:35:54.311 [INFO][5217] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1" Oct 29 00:35:54.314025 env[1227]: time="2025-10-29T00:35:54.313493224Z" level=info msg="TearDown network for sandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\" successfully" Oct 29 00:35:54.341846 env[1227]: time="2025-10-29T00:35:54.341773511Z" level=info msg="RemovePodSandbox \"82ff499a4a309f9a77a4084359c33d27cc50b475605d5bd2d8df021500b63bd1\" returns successfully" Oct 29 00:35:54.342433 env[1227]: time="2025-10-29T00:35:54.342400599Z" level=info msg="StopPodSandbox for \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\"" Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.374 [WARNING][5245] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" WorkloadEndpoint="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.374 [INFO][5245] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.374 [INFO][5245] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" iface="eth0" netns="" Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.374 [INFO][5245] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.374 [INFO][5245] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.398 [INFO][5254] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" HandleID="k8s-pod-network.dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Workload="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.398 [INFO][5254] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.398 [INFO][5254] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.407 [WARNING][5254] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" HandleID="k8s-pod-network.dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Workload="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.407 [INFO][5254] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" HandleID="k8s-pod-network.dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Workload="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.408 [INFO][5254] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.412304 env[1227]: 2025-10-29 00:35:54.410 [INFO][5245] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:54.412686 env[1227]: time="2025-10-29T00:35:54.412335868Z" level=info msg="TearDown network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\" successfully" Oct 29 00:35:54.412686 env[1227]: time="2025-10-29T00:35:54.412366949Z" level=info msg="StopPodSandbox for \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\" returns successfully" Oct 29 00:35:54.413200 env[1227]: time="2025-10-29T00:35:54.413150439Z" level=info msg="RemovePodSandbox for \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\"" Oct 29 00:35:54.413276 env[1227]: time="2025-10-29T00:35:54.413196359Z" level=info msg="Forcibly stopping sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\"" Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.445 [WARNING][5272] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" WorkloadEndpoint="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.445 [INFO][5272] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.446 [INFO][5272] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" iface="eth0" netns="" Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.446 [INFO][5272] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.446 [INFO][5272] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.463 [INFO][5281] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" HandleID="k8s-pod-network.dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Workload="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.464 [INFO][5281] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.464 [INFO][5281] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.473 [WARNING][5281] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" HandleID="k8s-pod-network.dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Workload="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.473 [INFO][5281] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" HandleID="k8s-pod-network.dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Workload="localhost-k8s-whisker--989d784c9--qn9xh-eth0" Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.474 [INFO][5281] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.478148 env[1227]: 2025-10-29 00:35:54.476 [INFO][5272] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f" Oct 29 00:35:54.478527 env[1227]: time="2025-10-29T00:35:54.478186524Z" level=info msg="TearDown network for sandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\" successfully" Oct 29 00:35:54.481411 env[1227]: time="2025-10-29T00:35:54.481370565Z" level=info msg="RemovePodSandbox \"dfdec566cba02313a75b712804d9a022cc7f2165c5f92aa6fcc88170c80f634f\" returns successfully" Oct 29 00:35:54.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.78:22-10.0.0.1:56054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.663625 systemd[1]: Started sshd@9-10.0.0.78:22-10.0.0.1:56054.service. Oct 29 00:35:54.664602 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 29 00:35:54.664655 kernel: audit: type=1130 audit(1761698154.662:1357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.78:22-10.0.0.1:56054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.716000 audit[5290]: USER_ACCT pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.717589 sshd[5290]: Accepted publickey for core from 10.0.0.1 port 56054 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:54.719500 sshd[5290]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:54.718000 audit[5290]: CRED_ACQ pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.723659 kernel: audit: type=1101 audit(1761698154.716:1358): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.723727 kernel: audit: type=1103 audit(1761698154.718:1359): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.723750 kernel: audit: type=1006 audit(1761698154.718:1360): pid=5290 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 29 00:35:54.726311 kernel: audit: type=1300 audit(1761698154.718:1360): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb173940 a2=3 a3=1 items=0 ppid=1 pid=5290 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:54.718000 audit[5290]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb173940 a2=3 a3=1 items=0 ppid=1 pid=5290 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:54.729676 kernel: audit: type=1327 audit(1761698154.718:1360): proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:54.718000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:54.727661 systemd[1]: Started session-10.scope. Oct 29 00:35:54.728887 systemd-logind[1215]: New session 10 of user core. Oct 29 00:35:54.733000 audit[5290]: USER_START pid=5290 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.735000 audit[5292]: CRED_ACQ pid=5292 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.741325 kernel: audit: type=1105 audit(1761698154.733:1361): pid=5290 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.741390 kernel: audit: type=1103 audit(1761698154.735:1362): pid=5292 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.858145 sshd[5290]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:54.858000 audit[5290]: USER_END pid=5290 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.861228 systemd[1]: Started sshd@10-10.0.0.78:22-10.0.0.1:56058.service. Oct 29 00:35:54.858000 audit[5290]: CRED_DISP pid=5290 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.861940 systemd[1]: sshd@9-10.0.0.78:22-10.0.0.1:56054.service: Deactivated successfully. Oct 29 00:35:54.862869 systemd[1]: session-10.scope: Deactivated successfully. Oct 29 00:35:54.864787 systemd-logind[1215]: Session 10 logged out. Waiting for processes to exit. Oct 29 00:35:54.865662 systemd-logind[1215]: Removed session 10. Oct 29 00:35:54.865922 kernel: audit: type=1106 audit(1761698154.858:1363): pid=5290 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.865994 kernel: audit: type=1104 audit(1761698154.858:1364): pid=5290 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.78:22-10.0.0.1:56058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.78:22-10.0.0.1:56054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.912000 audit[5304]: USER_ACCT pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.913624 sshd[5304]: Accepted publickey for core from 10.0.0.1 port 56058 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:54.914000 audit[5304]: CRED_ACQ pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.914000 audit[5304]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc484df0 a2=3 a3=1 items=0 ppid=1 pid=5304 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:54.914000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:54.915939 sshd[5304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:54.919678 systemd-logind[1215]: New session 11 of user core. Oct 29 00:35:54.920697 systemd[1]: Started session-11.scope. Oct 29 00:35:54.922000 audit[5304]: USER_START pid=5304 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.924000 audit[5307]: CRED_ACQ pid=5307 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.970000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:54.970000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40018566e0 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:35:54.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:54.970000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:54.970000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001856700 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:35:54.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:54.970000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:54.970000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001856820 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:35:54.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:54.970000 audit[1847]: AVC avc: denied { watch } for pid=1847 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:54.970000 audit[1847]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001856840 a2=fc6 a3=0 items=0 ppid=1694 pid=1847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c633,c772 key=(null) Oct 29 00:35:54.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:55.087734 sshd[5304]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:55.088000 audit[5304]: USER_END pid=5304 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.088000 audit[5304]: CRED_DISP pid=5304 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.093328 systemd[1]: Started sshd@11-10.0.0.78:22-10.0.0.1:56062.service. Oct 29 00:35:55.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.78:22-10.0.0.1:56062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:55.098953 systemd-logind[1215]: Session 11 logged out. Waiting for processes to exit. Oct 29 00:35:55.100482 systemd[1]: sshd@10-10.0.0.78:22-10.0.0.1:56058.service: Deactivated successfully. Oct 29 00:35:55.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.78:22-10.0.0.1:56058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:55.101766 systemd[1]: session-11.scope: Deactivated successfully. Oct 29 00:35:55.103538 systemd-logind[1215]: Removed session 11. Oct 29 00:35:55.139000 audit[5315]: USER_ACCT pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.140235 sshd[5315]: Accepted publickey for core from 10.0.0.1 port 56062 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:55.140000 audit[5315]: CRED_ACQ pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.140000 audit[5315]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe593b470 a2=3 a3=1 items=0 ppid=1 pid=5315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:55.140000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:55.141872 sshd[5315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:55.145359 systemd-logind[1215]: New session 12 of user core. Oct 29 00:35:55.146281 systemd[1]: Started session-12.scope. Oct 29 00:35:55.148000 audit[5315]: USER_START pid=5315 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.150000 audit[5318]: CRED_ACQ pid=5318 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.274161 sshd[5315]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:55.274000 audit[5315]: USER_END pid=5315 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.274000 audit[5315]: CRED_DISP pid=5315 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.276972 systemd-logind[1215]: Session 12 logged out. Waiting for processes to exit. Oct 29 00:35:55.277233 systemd[1]: sshd@11-10.0.0.78:22-10.0.0.1:56062.service: Deactivated successfully. Oct 29 00:35:55.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.78:22-10.0.0.1:56062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:55.278088 systemd[1]: session-12.scope: Deactivated successfully. Oct 29 00:35:55.278674 systemd-logind[1215]: Removed session 12. Oct 29 00:35:56.852074 env[1227]: time="2025-10-29T00:35:56.851834738Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:57.053431 env[1227]: time="2025-10-29T00:35:57.053240526Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:57.054411 env[1227]: time="2025-10-29T00:35:57.054279006Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:57.054668 kubelet[1982]: E1029 00:35:57.054586 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:57.054942 kubelet[1982]: E1029 00:35:57.054669 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:57.055031 env[1227]: time="2025-10-29T00:35:57.054984286Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 29 00:35:57.055422 kubelet[1982]: E1029 00:35:57.055382 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-j7c9q,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cc878fd98-2kfdl_calico-apiserver(c7a94bd2-06d9-4b3b-bb0e-0a6995839dda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:57.056602 kubelet[1982]: E1029 00:35:57.056563 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" podUID="c7a94bd2-06d9-4b3b-bb0e-0a6995839dda" Oct 29 00:35:57.251501 env[1227]: time="2025-10-29T00:35:57.251446801Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:57.276994 env[1227]: time="2025-10-29T00:35:57.276930125Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 29 00:35:57.277378 kubelet[1982]: E1029 00:35:57.277335 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:35:57.277449 kubelet[1982]: E1029 00:35:57.277393 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:35:57.277688 kubelet[1982]: E1029 00:35:57.277620 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k85rf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-c7jtc_calico-system(4d0f98b5-229e-4f67-a068-6905ca873422): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:57.278299 env[1227]: time="2025-10-29T00:35:57.278270165Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:57.278980 kubelet[1982]: E1029 00:35:57.278932 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-c7jtc" podUID="4d0f98b5-229e-4f67-a068-6905ca873422" Oct 29 00:35:57.501591 env[1227]: time="2025-10-29T00:35:57.501449205Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:57.503253 env[1227]: time="2025-10-29T00:35:57.503176165Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:57.503509 kubelet[1982]: E1029 00:35:57.503432 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:57.503565 kubelet[1982]: E1029 00:35:57.503510 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:57.503832 kubelet[1982]: E1029 00:35:57.503765 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-f9wvg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cc84f4489-klnwg_calico-apiserver(4c8785a3-edfa-416a-9abb-6a5e8713af25): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:57.503962 env[1227]: time="2025-10-29T00:35:57.503919605Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:57.505482 kubelet[1982]: E1029 00:35:57.505341 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" podUID="4c8785a3-edfa-416a-9abb-6a5e8713af25" Oct 29 00:35:57.720281 env[1227]: time="2025-10-29T00:35:57.720212483Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:57.721297 env[1227]: time="2025-10-29T00:35:57.721240923Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:57.721517 kubelet[1982]: E1029 00:35:57.721461 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:57.721572 kubelet[1982]: E1029 00:35:57.721517 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:57.721714 kubelet[1982]: E1029 00:35:57.721653 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-jg4g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cc84f4489-jjgxv_calico-apiserver(50a44f58-1837-43d6-9581-aa2468ce50ce): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:57.722902 kubelet[1982]: E1029 00:35:57.722864 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" podUID="50a44f58-1837-43d6-9581-aa2468ce50ce" Oct 29 00:35:59.853218 env[1227]: time="2025-10-29T00:35:59.853174850Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 29 00:35:59.853563 kubelet[1982]: E1029 00:35:59.853500 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5798b799b7-lfq86" podUID="db9690bc-af00-4609-9dd2-e9df44a4ba6f" Oct 29 00:36:00.057478 env[1227]: time="2025-10-29T00:36:00.057411747Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:00.058477 env[1227]: time="2025-10-29T00:36:00.058421348Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 29 00:36:00.058751 kubelet[1982]: E1029 00:36:00.058708 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:36:00.058852 kubelet[1982]: E1029 00:36:00.058764 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:36:00.059011 kubelet[1982]: E1029 00:36:00.058943 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2xcld,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-b97b6d78f-whrv6_calico-system(1cb90272-e579-4d3e-853a-0d02317a9f36): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:00.060304 kubelet[1982]: E1029 00:36:00.060256 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" podUID="1cb90272-e579-4d3e-853a-0d02317a9f36" Oct 29 00:36:00.279246 systemd[1]: Started sshd@12-10.0.0.78:22-10.0.0.1:37452.service. Oct 29 00:36:00.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.78:22-10.0.0.1:37452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:00.280405 kernel: kauditd_printk_skb: 35 callbacks suppressed Oct 29 00:36:00.280474 kernel: audit: type=1130 audit(1761698160.278:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.78:22-10.0.0.1:37452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:00.321000 audit[5334]: USER_ACCT pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.322630 sshd[5334]: Accepted publickey for core from 10.0.0.1 port 37452 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:00.323918 sshd[5334]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:00.322000 audit[5334]: CRED_ACQ pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.329273 systemd-logind[1215]: New session 13 of user core. Oct 29 00:36:00.329846 kernel: audit: type=1101 audit(1761698160.321:1389): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.329879 kernel: audit: type=1103 audit(1761698160.322:1390): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.329902 kernel: audit: type=1006 audit(1761698160.322:1391): pid=5334 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 29 00:36:00.329517 systemd[1]: Started session-13.scope. Oct 29 00:36:00.322000 audit[5334]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff31c5e30 a2=3 a3=1 items=0 ppid=1 pid=5334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:00.335615 kernel: audit: type=1300 audit(1761698160.322:1391): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff31c5e30 a2=3 a3=1 items=0 ppid=1 pid=5334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:00.322000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:00.337440 kernel: audit: type=1327 audit(1761698160.322:1391): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:00.337537 kernel: audit: type=1105 audit(1761698160.335:1392): pid=5334 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.335000 audit[5334]: USER_START pid=5334 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.337000 audit[5336]: CRED_ACQ pid=5336 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.343223 kernel: audit: type=1103 audit(1761698160.337:1393): pid=5336 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.443990 sshd[5334]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:00.444000 audit[5334]: USER_END pid=5334 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.446539 systemd[1]: sshd@12-10.0.0.78:22-10.0.0.1:37452.service: Deactivated successfully. Oct 29 00:36:00.447473 systemd[1]: session-13.scope: Deactivated successfully. Oct 29 00:36:00.447982 systemd-logind[1215]: Session 13 logged out. Waiting for processes to exit. Oct 29 00:36:00.448611 systemd-logind[1215]: Removed session 13. Oct 29 00:36:00.444000 audit[5334]: CRED_DISP pid=5334 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.451937 kernel: audit: type=1106 audit(1761698160.444:1394): pid=5334 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.451991 kernel: audit: type=1104 audit(1761698160.444:1395): pid=5334 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.78:22-10.0.0.1:37452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:05.065917 kubelet[1982]: E1029 00:36:05.065806 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:05.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.78:22-10.0.0.1:37466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:05.448865 systemd[1]: Started sshd@13-10.0.0.78:22-10.0.0.1:37466.service. Oct 29 00:36:05.454828 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 29 00:36:05.454939 kernel: audit: type=1130 audit(1761698165.448:1397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.78:22-10.0.0.1:37466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:05.493000 audit[5381]: USER_ACCT pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.494494 sshd[5381]: Accepted publickey for core from 10.0.0.1 port 37466 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:05.496381 sshd[5381]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:05.495000 audit[5381]: CRED_ACQ pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.501148 kernel: audit: type=1101 audit(1761698165.493:1398): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.501216 kernel: audit: type=1103 audit(1761698165.495:1399): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.502281 systemd[1]: Started session-14.scope. Oct 29 00:36:05.502581 systemd-logind[1215]: New session 14 of user core. Oct 29 00:36:05.503399 kernel: audit: type=1006 audit(1761698165.495:1400): pid=5381 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 29 00:36:05.503452 kernel: audit: type=1300 audit(1761698165.495:1400): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9f382b0 a2=3 a3=1 items=0 ppid=1 pid=5381 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:05.495000 audit[5381]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9f382b0 a2=3 a3=1 items=0 ppid=1 pid=5381 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:05.495000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:05.508178 kernel: audit: type=1327 audit(1761698165.495:1400): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:05.508281 kernel: audit: type=1105 audit(1761698165.506:1401): pid=5381 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.506000 audit[5381]: USER_START pid=5381 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.507000 audit[5383]: CRED_ACQ pid=5383 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.514526 kernel: audit: type=1103 audit(1761698165.507:1402): pid=5383 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.621279 sshd[5381]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:05.621000 audit[5381]: USER_END pid=5381 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.623902 systemd[1]: sshd@13-10.0.0.78:22-10.0.0.1:37466.service: Deactivated successfully. Oct 29 00:36:05.624664 systemd[1]: session-14.scope: Deactivated successfully. Oct 29 00:36:05.625164 systemd-logind[1215]: Session 14 logged out. Waiting for processes to exit. Oct 29 00:36:05.621000 audit[5381]: CRED_DISP pid=5381 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.626014 systemd-logind[1215]: Removed session 14. Oct 29 00:36:05.628625 kernel: audit: type=1106 audit(1761698165.621:1403): pid=5381 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.628699 kernel: audit: type=1104 audit(1761698165.621:1404): pid=5381 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.78:22-10.0.0.1:37466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:06.851495 kubelet[1982]: E1029 00:36:06.851394 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:06.852456 kubelet[1982]: E1029 00:36:06.852405 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:36:07.851502 kubelet[1982]: E1029 00:36:07.851460 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" podUID="4c8785a3-edfa-416a-9abb-6a5e8713af25" Oct 29 00:36:07.851955 kubelet[1982]: E1029 00:36:07.851898 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" podUID="c7a94bd2-06d9-4b3b-bb0e-0a6995839dda" Oct 29 00:36:09.851972 kubelet[1982]: E1029 00:36:09.851912 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" podUID="50a44f58-1837-43d6-9581-aa2468ce50ce" Oct 29 00:36:10.626791 systemd[1]: Started sshd@14-10.0.0.78:22-10.0.0.1:55458.service. Oct 29 00:36:10.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.78:22-10.0.0.1:55458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:10.628174 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 29 00:36:10.628251 kernel: audit: type=1130 audit(1761698170.626:1406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.78:22-10.0.0.1:55458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:10.675000 audit[5395]: USER_ACCT pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.676935 sshd[5395]: Accepted publickey for core from 10.0.0.1 port 55458 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:10.679124 sshd[5395]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:10.677000 audit[5395]: CRED_ACQ pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.682435 kernel: audit: type=1101 audit(1761698170.675:1407): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.682502 kernel: audit: type=1103 audit(1761698170.677:1408): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.682528 kernel: audit: type=1006 audit(1761698170.677:1409): pid=5395 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 29 00:36:10.682626 systemd-logind[1215]: New session 15 of user core. Oct 29 00:36:10.683512 systemd[1]: Started session-15.scope. Oct 29 00:36:10.677000 audit[5395]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff43756e0 a2=3 a3=1 items=0 ppid=1 pid=5395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:10.687707 kernel: audit: type=1300 audit(1761698170.677:1409): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff43756e0 a2=3 a3=1 items=0 ppid=1 pid=5395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:10.687802 kernel: audit: type=1327 audit(1761698170.677:1409): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:10.677000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:10.688781 kernel: audit: type=1105 audit(1761698170.686:1410): pid=5395 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.686000 audit[5395]: USER_START pid=5395 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.688000 audit[5397]: CRED_ACQ pid=5397 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.695286 kernel: audit: type=1103 audit(1761698170.688:1411): pid=5397 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.853196 kubelet[1982]: E1029 00:36:10.853143 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" podUID="1cb90272-e579-4d3e-853a-0d02317a9f36" Oct 29 00:36:10.864995 sshd[5395]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:10.865000 audit[5395]: USER_END pid=5395 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.865000 audit[5395]: CRED_DISP pid=5395 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.871172 systemd[1]: sshd@14-10.0.0.78:22-10.0.0.1:55458.service: Deactivated successfully. Oct 29 00:36:10.872025 systemd[1]: session-15.scope: Deactivated successfully. Oct 29 00:36:10.873356 systemd-logind[1215]: Session 15 logged out. Waiting for processes to exit. Oct 29 00:36:10.874291 systemd-logind[1215]: Removed session 15. Oct 29 00:36:10.874639 kernel: audit: type=1106 audit(1761698170.865:1412): pid=5395 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.874689 kernel: audit: type=1104 audit(1761698170.865:1413): pid=5395 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.78:22-10.0.0.1:55458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:11.852295 kubelet[1982]: E1029 00:36:11.852244 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-c7jtc" podUID="4d0f98b5-229e-4f67-a068-6905ca873422" Oct 29 00:36:14.854571 env[1227]: time="2025-10-29T00:36:14.854522424Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 29 00:36:15.067410 env[1227]: time="2025-10-29T00:36:15.067332475Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:15.068527 env[1227]: time="2025-10-29T00:36:15.068465800Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 29 00:36:15.068761 kubelet[1982]: E1029 00:36:15.068717 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:36:15.069048 kubelet[1982]: E1029 00:36:15.068775 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:36:15.069048 kubelet[1982]: E1029 00:36:15.068934 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6f7e70f605b847bb8177a761abe3098a,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-ls2zx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5798b799b7-lfq86_calico-system(db9690bc-af00-4609-9dd2-e9df44a4ba6f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:15.071245 env[1227]: time="2025-10-29T00:36:15.071215413Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 29 00:36:15.278199 env[1227]: time="2025-10-29T00:36:15.278146583Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:15.279311 env[1227]: time="2025-10-29T00:36:15.279245748Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 29 00:36:15.279569 kubelet[1982]: E1029 00:36:15.279495 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:36:15.279569 kubelet[1982]: E1029 00:36:15.279555 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:36:15.279758 kubelet[1982]: E1029 00:36:15.279678 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ls2zx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-5798b799b7-lfq86_calico-system(db9690bc-af00-4609-9dd2-e9df44a4ba6f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:15.281240 kubelet[1982]: E1029 00:36:15.281187 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5798b799b7-lfq86" podUID="db9690bc-af00-4609-9dd2-e9df44a4ba6f" Oct 29 00:36:15.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.78:22-10.0.0.1:55460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:15.871407 systemd[1]: Started sshd@15-10.0.0.78:22-10.0.0.1:55460.service. Oct 29 00:36:15.875730 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 29 00:36:15.875853 kernel: audit: type=1130 audit(1761698175.870:1415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.78:22-10.0.0.1:55460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:15.923000 audit[5412]: USER_ACCT pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.926955 sshd[5412]: Accepted publickey for core from 10.0.0.1 port 55460 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:15.927000 audit[5412]: CRED_ACQ pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.929119 sshd[5412]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:15.932317 kernel: audit: type=1101 audit(1761698175.923:1416): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.932391 kernel: audit: type=1103 audit(1761698175.927:1417): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.932427 kernel: audit: type=1006 audit(1761698175.927:1418): pid=5412 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 29 00:36:15.934236 kernel: audit: type=1300 audit(1761698175.927:1418): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc576c90 a2=3 a3=1 items=0 ppid=1 pid=5412 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:15.927000 audit[5412]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc576c90 a2=3 a3=1 items=0 ppid=1 pid=5412 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:15.933578 systemd[1]: Started session-16.scope. Oct 29 00:36:15.933921 systemd-logind[1215]: New session 16 of user core. Oct 29 00:36:15.927000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:15.938037 kernel: audit: type=1327 audit(1761698175.927:1418): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:15.937000 audit[5412]: USER_START pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.938000 audit[5414]: CRED_ACQ pid=5414 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.944930 kernel: audit: type=1105 audit(1761698175.937:1419): pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.945008 kernel: audit: type=1103 audit(1761698175.938:1420): pid=5414 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.089075 sshd[5412]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:16.089000 audit[5412]: USER_END pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.089000 audit[5412]: CRED_DISP pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.093517 systemd[1]: Started sshd@16-10.0.0.78:22-10.0.0.1:55466.service. Oct 29 00:36:16.097843 kernel: audit: type=1106 audit(1761698176.089:1421): pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.097933 kernel: audit: type=1104 audit(1761698176.089:1422): pid=5412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.78:22-10.0.0.1:55466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:16.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.78:22-10.0.0.1:55460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:16.096502 systemd[1]: sshd@15-10.0.0.78:22-10.0.0.1:55460.service: Deactivated successfully. Oct 29 00:36:16.097314 systemd[1]: session-16.scope: Deactivated successfully. Oct 29 00:36:16.098992 systemd-logind[1215]: Session 16 logged out. Waiting for processes to exit. Oct 29 00:36:16.101305 systemd-logind[1215]: Removed session 16. Oct 29 00:36:16.136000 audit[5424]: USER_ACCT pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.137943 sshd[5424]: Accepted publickey for core from 10.0.0.1 port 55466 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:16.139000 audit[5424]: CRED_ACQ pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.139000 audit[5424]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7ae0220 a2=3 a3=1 items=0 ppid=1 pid=5424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:16.139000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:16.140437 sshd[5424]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:16.145020 systemd[1]: Started session-17.scope. Oct 29 00:36:16.145386 systemd-logind[1215]: New session 17 of user core. Oct 29 00:36:16.149000 audit[5424]: USER_START pid=5424 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.150000 audit[5427]: CRED_ACQ pid=5427 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.372884 sshd[5424]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:16.375000 audit[5424]: USER_END pid=5424 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.375000 audit[5424]: CRED_DISP pid=5424 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.78:22-10.0.0.1:55472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:16.377317 systemd[1]: Started sshd@17-10.0.0.78:22-10.0.0.1:55472.service. Oct 29 00:36:16.377792 systemd[1]: sshd@16-10.0.0.78:22-10.0.0.1:55466.service: Deactivated successfully. Oct 29 00:36:16.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.78:22-10.0.0.1:55466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:16.379436 systemd[1]: session-17.scope: Deactivated successfully. Oct 29 00:36:16.380098 systemd-logind[1215]: Session 17 logged out. Waiting for processes to exit. Oct 29 00:36:16.380941 systemd-logind[1215]: Removed session 17. Oct 29 00:36:16.425000 audit[5436]: USER_ACCT pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.426349 sshd[5436]: Accepted publickey for core from 10.0.0.1 port 55472 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:16.426000 audit[5436]: CRED_ACQ pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.426000 audit[5436]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5b011f0 a2=3 a3=1 items=0 ppid=1 pid=5436 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:16.426000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:16.427619 sshd[5436]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:16.431095 systemd-logind[1215]: New session 18 of user core. Oct 29 00:36:16.431994 systemd[1]: Started session-18.scope. Oct 29 00:36:16.434000 audit[5436]: USER_START pid=5436 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.436000 audit[5439]: CRED_ACQ pid=5439 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.076000 audit[5452]: NETFILTER_CFG table=filter:124 family=2 entries=26 op=nft_register_rule pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:17.076000 audit[5452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffce5e4640 a2=0 a3=1 items=0 ppid=2093 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.076000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:17.083192 sshd[5436]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:17.087377 systemd[1]: Started sshd@18-10.0.0.78:22-10.0.0.1:55474.service. Oct 29 00:36:17.087897 systemd[1]: sshd@17-10.0.0.78:22-10.0.0.1:55472.service: Deactivated successfully. Oct 29 00:36:17.088696 systemd[1]: session-18.scope: Deactivated successfully. Oct 29 00:36:17.084000 audit[5436]: USER_END pid=5436 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.084000 audit[5436]: CRED_DISP pid=5436 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.085000 audit[5452]: NETFILTER_CFG table=nat:125 family=2 entries=20 op=nft_register_rule pid=5452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:17.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.78:22-10.0.0.1:55474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.78:22-10.0.0.1:55472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.085000 audit[5452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffce5e4640 a2=0 a3=1 items=0 ppid=2093 pid=5452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.085000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:17.089628 systemd-logind[1215]: Session 18 logged out. Waiting for processes to exit. Oct 29 00:36:17.091269 systemd-logind[1215]: Removed session 18. Oct 29 00:36:17.108000 audit[5458]: NETFILTER_CFG table=filter:126 family=2 entries=38 op=nft_register_rule pid=5458 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:17.108000 audit[5458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffc0c4f4a0 a2=0 a3=1 items=0 ppid=2093 pid=5458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.108000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:17.120000 audit[5458]: NETFILTER_CFG table=nat:127 family=2 entries=20 op=nft_register_rule pid=5458 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:17.120000 audit[5458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffc0c4f4a0 a2=0 a3=1 items=0 ppid=2093 pid=5458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.120000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:17.134000 audit[5454]: USER_ACCT pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.135537 sshd[5454]: Accepted publickey for core from 10.0.0.1 port 55474 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:17.135000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.136000 audit[5454]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfa6fd10 a2=3 a3=1 items=0 ppid=1 pid=5454 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.136000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:17.137401 sshd[5454]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:17.141130 systemd-logind[1215]: New session 19 of user core. Oct 29 00:36:17.141993 systemd[1]: Started session-19.scope. Oct 29 00:36:17.145000 audit[5454]: USER_START pid=5454 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.147000 audit[5459]: CRED_ACQ pid=5459 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.418811 sshd[5454]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:17.423046 systemd[1]: Started sshd@19-10.0.0.78:22-10.0.0.1:55490.service. Oct 29 00:36:17.423521 systemd[1]: sshd@18-10.0.0.78:22-10.0.0.1:55474.service: Deactivated successfully. Oct 29 00:36:17.420000 audit[5454]: USER_END pid=5454 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.420000 audit[5454]: CRED_DISP pid=5454 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.78:22-10.0.0.1:55490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.78:22-10.0.0.1:55474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.425068 systemd[1]: session-19.scope: Deactivated successfully. Oct 29 00:36:17.425645 systemd-logind[1215]: Session 19 logged out. Waiting for processes to exit. Oct 29 00:36:17.426668 systemd-logind[1215]: Removed session 19. Oct 29 00:36:17.471000 audit[5467]: USER_ACCT pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.472597 sshd[5467]: Accepted publickey for core from 10.0.0.1 port 55490 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:17.473000 audit[5467]: CRED_ACQ pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.473000 audit[5467]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffefcc9e80 a2=3 a3=1 items=0 ppid=1 pid=5467 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.473000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:17.474600 sshd[5467]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:17.484132 systemd[1]: Started session-20.scope. Oct 29 00:36:17.484265 systemd-logind[1215]: New session 20 of user core. Oct 29 00:36:17.488000 audit[5467]: USER_START pid=5467 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.489000 audit[5470]: CRED_ACQ pid=5470 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.651311 sshd[5467]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:17.651000 audit[5467]: USER_END pid=5467 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.651000 audit[5467]: CRED_DISP pid=5467 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.653931 systemd[1]: session-20.scope: Deactivated successfully. Oct 29 00:36:17.654519 systemd-logind[1215]: Session 20 logged out. Waiting for processes to exit. Oct 29 00:36:17.654643 systemd[1]: sshd@19-10.0.0.78:22-10.0.0.1:55490.service: Deactivated successfully. Oct 29 00:36:17.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.78:22-10.0.0.1:55490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.655722 systemd-logind[1215]: Removed session 20. Oct 29 00:36:18.855055 env[1227]: time="2025-10-29T00:36:18.854989028Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 29 00:36:19.067013 env[1227]: time="2025-10-29T00:36:19.066957860Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:19.068075 env[1227]: time="2025-10-29T00:36:19.068020145Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 29 00:36:19.068284 kubelet[1982]: E1029 00:36:19.068243 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:36:19.068589 kubelet[1982]: E1029 00:36:19.068295 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:36:19.068626 kubelet[1982]: E1029 00:36:19.068555 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p7pvs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-v7x7q_calico-system(9522c2ec-7e06-406b-83b4-e2c84866af00): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:19.068723 env[1227]: time="2025-10-29T00:36:19.068600028Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:36:19.257401 env[1227]: time="2025-10-29T00:36:19.257349923Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:19.258707 env[1227]: time="2025-10-29T00:36:19.258646010Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:36:19.259093 kubelet[1982]: E1029 00:36:19.259042 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:19.259182 kubelet[1982]: E1029 00:36:19.259104 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:19.259366 kubelet[1982]: E1029 00:36:19.259295 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-j7c9q,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cc878fd98-2kfdl_calico-apiserver(c7a94bd2-06d9-4b3b-bb0e-0a6995839dda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:19.259570 env[1227]: time="2025-10-29T00:36:19.259534295Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:36:19.261206 kubelet[1982]: E1029 00:36:19.261108 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" podUID="c7a94bd2-06d9-4b3b-bb0e-0a6995839dda" Oct 29 00:36:19.484887 env[1227]: time="2025-10-29T00:36:19.484823899Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:19.485926 env[1227]: time="2025-10-29T00:36:19.485871624Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:36:19.486141 kubelet[1982]: E1029 00:36:19.486100 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:19.486212 kubelet[1982]: E1029 00:36:19.486156 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:19.486422 kubelet[1982]: E1029 00:36:19.486373 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-f9wvg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cc84f4489-klnwg_calico-apiserver(4c8785a3-edfa-416a-9abb-6a5e8713af25): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:19.486530 env[1227]: time="2025-10-29T00:36:19.486478587Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 29 00:36:19.487935 kubelet[1982]: E1029 00:36:19.487897 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" podUID="4c8785a3-edfa-416a-9abb-6a5e8713af25" Oct 29 00:36:19.683660 env[1227]: time="2025-10-29T00:36:19.683347804Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:19.685144 env[1227]: time="2025-10-29T00:36:19.684880692Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 29 00:36:19.685278 kubelet[1982]: E1029 00:36:19.685230 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:36:19.685334 kubelet[1982]: E1029 00:36:19.685289 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:36:19.685509 kubelet[1982]: E1029 00:36:19.685403 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p7pvs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-v7x7q_calico-system(9522c2ec-7e06-406b-83b4-e2c84866af00): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:19.686929 kubelet[1982]: E1029 00:36:19.686890 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:36:22.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.78:22-10.0.0.1:36456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:22.656487 systemd[1]: Started sshd@20-10.0.0.78:22-10.0.0.1:36456.service. Oct 29 00:36:22.658189 kernel: kauditd_printk_skb: 57 callbacks suppressed Oct 29 00:36:22.658280 kernel: audit: type=1130 audit(1761698182.655:1464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.78:22-10.0.0.1:36456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:22.700426 sshd[5487]: Accepted publickey for core from 10.0.0.1 port 36456 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:22.699000 audit[5487]: USER_ACCT pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.701931 sshd[5487]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:22.700000 audit[5487]: CRED_ACQ pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.707394 kernel: audit: type=1101 audit(1761698182.699:1465): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.707480 kernel: audit: type=1103 audit(1761698182.700:1466): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.707502 kernel: audit: type=1006 audit(1761698182.700:1467): pid=5487 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 29 00:36:22.708674 systemd[1]: Started session-21.scope. Oct 29 00:36:22.709177 systemd-logind[1215]: New session 21 of user core. Oct 29 00:36:22.711351 kernel: audit: type=1300 audit(1761698182.700:1467): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9e90260 a2=3 a3=1 items=0 ppid=1 pid=5487 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:22.700000 audit[5487]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9e90260 a2=3 a3=1 items=0 ppid=1 pid=5487 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:22.700000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:22.717179 kernel: audit: type=1327 audit(1761698182.700:1467): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:22.716000 audit[5487]: USER_START pid=5487 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.721703 kernel: audit: type=1105 audit(1761698182.716:1468): pid=5487 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.719000 audit[5489]: CRED_ACQ pid=5489 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.726200 kernel: audit: type=1103 audit(1761698182.719:1469): pid=5489 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.857416 sshd[5487]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:22.857000 audit[5487]: USER_END pid=5487 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.857000 audit[5487]: CRED_DISP pid=5487 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.865499 kernel: audit: type=1106 audit(1761698182.857:1470): pid=5487 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.865610 kernel: audit: type=1104 audit(1761698182.857:1471): pid=5487 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.78:22-10.0.0.1:36456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:22.866275 systemd[1]: sshd@20-10.0.0.78:22-10.0.0.1:36456.service: Deactivated successfully. Oct 29 00:36:22.867081 systemd[1]: session-21.scope: Deactivated successfully. Oct 29 00:36:22.867770 systemd-logind[1215]: Session 21 logged out. Waiting for processes to exit. Oct 29 00:36:22.868422 systemd-logind[1215]: Removed session 21. Oct 29 00:36:22.899000 audit[5500]: NETFILTER_CFG table=filter:128 family=2 entries=26 op=nft_register_rule pid=5500 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:22.899000 audit[5500]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe06a87d0 a2=0 a3=1 items=0 ppid=2093 pid=5500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:22.899000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:22.912000 audit[5500]: NETFILTER_CFG table=nat:129 family=2 entries=104 op=nft_register_chain pid=5500 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:22.912000 audit[5500]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffe06a87d0 a2=0 a3=1 items=0 ppid=2093 pid=5500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:22.912000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:23.851294 kubelet[1982]: E1029 00:36:23.851256 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:23.852238 env[1227]: time="2025-10-29T00:36:23.852200192Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 29 00:36:24.056847 env[1227]: time="2025-10-29T00:36:24.056677296Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:24.057765 env[1227]: time="2025-10-29T00:36:24.057701702Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 29 00:36:24.057998 kubelet[1982]: E1029 00:36:24.057963 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:36:24.058076 kubelet[1982]: E1029 00:36:24.058018 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:36:24.058220 kubelet[1982]: E1029 00:36:24.058170 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2xcld,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-b97b6d78f-whrv6_calico-system(1cb90272-e579-4d3e-853a-0d02317a9f36): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:24.059485 kubelet[1982]: E1029 00:36:24.059454 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-b97b6d78f-whrv6" podUID="1cb90272-e579-4d3e-853a-0d02317a9f36" Oct 29 00:36:24.851965 env[1227]: time="2025-10-29T00:36:24.851920062Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:36:25.051644 env[1227]: time="2025-10-29T00:36:25.051586565Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:25.052689 env[1227]: time="2025-10-29T00:36:25.052622451Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:36:25.052952 kubelet[1982]: E1029 00:36:25.052905 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:25.053226 kubelet[1982]: E1029 00:36:25.052960 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:25.053226 kubelet[1982]: E1029 00:36:25.053116 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-jg4g9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5cc84f4489-jjgxv_calico-apiserver(50a44f58-1837-43d6-9581-aa2468ce50ce): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:25.054535 kubelet[1982]: E1029 00:36:25.054495 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-jjgxv" podUID="50a44f58-1837-43d6-9581-aa2468ce50ce" Oct 29 00:36:26.851910 env[1227]: time="2025-10-29T00:36:26.851626795Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 29 00:36:27.041959 env[1227]: time="2025-10-29T00:36:27.041902811Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:27.043018 env[1227]: time="2025-10-29T00:36:27.042968697Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 29 00:36:27.043237 kubelet[1982]: E1029 00:36:27.043196 1982 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:36:27.043498 kubelet[1982]: E1029 00:36:27.043247 1982 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:36:27.043498 kubelet[1982]: E1029 00:36:27.043452 1982 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k85rf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-c7jtc_calico-system(4d0f98b5-229e-4f67-a068-6905ca873422): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:27.044728 kubelet[1982]: E1029 00:36:27.044659 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-c7jtc" podUID="4d0f98b5-229e-4f67-a068-6905ca873422" Oct 29 00:36:27.855284 kubelet[1982]: E1029 00:36:27.853040 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-5798b799b7-lfq86" podUID="db9690bc-af00-4609-9dd2-e9df44a4ba6f" Oct 29 00:36:27.862291 systemd[1]: Started sshd@21-10.0.0.78:22-10.0.0.1:36468.service. Oct 29 00:36:27.873714 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 29 00:36:27.873860 kernel: audit: type=1130 audit(1761698187.861:1475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.78:22-10.0.0.1:36468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:27.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.78:22-10.0.0.1:36468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:27.918000 audit[5504]: USER_ACCT pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.922051 sshd[5504]: Accepted publickey for core from 10.0.0.1 port 36468 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:27.921000 audit[5504]: CRED_ACQ pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.922456 sshd[5504]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:27.925278 kernel: audit: type=1101 audit(1761698187.918:1476): pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.925318 kernel: audit: type=1103 audit(1761698187.921:1477): pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.925347 kernel: audit: type=1006 audit(1761698187.921:1478): pid=5504 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 29 00:36:27.921000 audit[5504]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebf4a020 a2=3 a3=1 items=0 ppid=1 pid=5504 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:27.930541 kernel: audit: type=1300 audit(1761698187.921:1478): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebf4a020 a2=3 a3=1 items=0 ppid=1 pid=5504 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:27.921000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:27.931780 kernel: audit: type=1327 audit(1761698187.921:1478): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:27.934079 systemd-logind[1215]: New session 22 of user core. Oct 29 00:36:27.934968 systemd[1]: Started session-22.scope. Oct 29 00:36:27.937000 audit[5504]: USER_START pid=5504 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.938000 audit[5506]: CRED_ACQ pid=5506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.945328 kernel: audit: type=1105 audit(1761698187.937:1479): pid=5504 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.945391 kernel: audit: type=1103 audit(1761698187.938:1480): pid=5506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:28.053964 sshd[5504]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:28.054000 audit[5504]: USER_END pid=5504 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:28.056450 systemd[1]: sshd@21-10.0.0.78:22-10.0.0.1:36468.service: Deactivated successfully. Oct 29 00:36:28.057267 systemd[1]: session-22.scope: Deactivated successfully. Oct 29 00:36:28.054000 audit[5504]: CRED_DISP pid=5504 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:28.061942 kernel: audit: type=1106 audit(1761698188.054:1481): pid=5504 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:28.062015 kernel: audit: type=1104 audit(1761698188.054:1482): pid=5504 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:28.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.78:22-10.0.0.1:36468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:28.062215 systemd-logind[1215]: Session 22 logged out. Waiting for processes to exit. Oct 29 00:36:28.062948 systemd-logind[1215]: Removed session 22. Oct 29 00:36:32.852036 kubelet[1982]: E1029 00:36:32.851893 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:32.852975 kubelet[1982]: E1029 00:36:32.852936 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc878fd98-2kfdl" podUID="c7a94bd2-06d9-4b3b-bb0e-0a6995839dda" Oct 29 00:36:32.854341 kubelet[1982]: E1029 00:36:32.854301 1982 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:32.855691 kubelet[1982]: E1029 00:36:32.855660 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5cc84f4489-klnwg" podUID="4c8785a3-edfa-416a-9abb-6a5e8713af25" Oct 29 00:36:33.059401 systemd[1]: Started sshd@22-10.0.0.78:22-10.0.0.1:34824.service. Oct 29 00:36:33.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.78:22-10.0.0.1:34824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:33.063645 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 29 00:36:33.063761 kernel: audit: type=1130 audit(1761698193.058:1484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.78:22-10.0.0.1:34824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:33.103000 audit[5519]: USER_ACCT pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.104878 sshd[5519]: Accepted publickey for core from 10.0.0.1 port 34824 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:33.106201 sshd[5519]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:33.104000 audit[5519]: CRED_ACQ pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.110884 kernel: audit: type=1101 audit(1761698193.103:1485): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.110964 kernel: audit: type=1103 audit(1761698193.104:1486): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.110984 kernel: audit: type=1006 audit(1761698193.104:1487): pid=5519 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 29 00:36:33.112718 kernel: audit: type=1300 audit(1761698193.104:1487): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd422a740 a2=3 a3=1 items=0 ppid=1 pid=5519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:33.104000 audit[5519]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd422a740 a2=3 a3=1 items=0 ppid=1 pid=5519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:33.104000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:33.117239 systemd[1]: Started session-23.scope. Oct 29 00:36:33.117383 kernel: audit: type=1327 audit(1761698193.104:1487): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:33.117590 systemd-logind[1215]: New session 23 of user core. Oct 29 00:36:33.120000 audit[5519]: USER_START pid=5519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.121000 audit[5521]: CRED_ACQ pid=5521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.127913 kernel: audit: type=1105 audit(1761698193.120:1488): pid=5519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.128011 kernel: audit: type=1103 audit(1761698193.121:1489): pid=5521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.241542 sshd[5519]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:33.242000 audit[5519]: USER_END pid=5519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.245100 systemd[1]: session-23.scope: Deactivated successfully. Oct 29 00:36:33.245729 systemd-logind[1215]: Session 23 logged out. Waiting for processes to exit. Oct 29 00:36:33.245875 systemd[1]: sshd@22-10.0.0.78:22-10.0.0.1:34824.service: Deactivated successfully. Oct 29 00:36:33.247171 systemd-logind[1215]: Removed session 23. Oct 29 00:36:33.242000 audit[5519]: CRED_DISP pid=5519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.250521 kernel: audit: type=1106 audit(1761698193.242:1490): pid=5519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.250610 kernel: audit: type=1104 audit(1761698193.242:1491): pid=5519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.78:22-10.0.0.1:34824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:34.854526 kubelet[1982]: E1029 00:36:34.854473 1982 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-v7x7q" podUID="9522c2ec-7e06-406b-83b4-e2c84866af00" Oct 29 00:36:35.007027 systemd[1]: run-containerd-runc-k8s.io-d78547e34abc153e6ef708560ef5286af3f06a181aeb2f6fe29625f0dc6e9a45-runc.RRie1L.mount: Deactivated successfully.