Oct 29 00:34:12.705875 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 29 00:34:12.705894 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Tue Oct 28 23:18:12 -00 2025 Oct 29 00:34:12.705902 kernel: efi: EFI v2.70 by EDK II Oct 29 00:34:12.705907 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 29 00:34:12.705912 kernel: random: crng init done Oct 29 00:34:12.705918 kernel: ACPI: Early table checksum verification disabled Oct 29 00:34:12.705924 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 29 00:34:12.705931 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 29 00:34:12.705936 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:12.705941 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:12.705947 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:12.705952 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:12.705957 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:12.705963 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:12.705970 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:12.705976 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:12.705982 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 29 00:34:12.705988 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 29 00:34:12.705994 kernel: NUMA: Failed to initialise from firmware Oct 29 00:34:12.706000 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 29 00:34:12.706005 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Oct 29 00:34:12.706011 kernel: Zone ranges: Oct 29 00:34:12.706016 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 29 00:34:12.706023 kernel: DMA32 empty Oct 29 00:34:12.706028 kernel: Normal empty Oct 29 00:34:12.706034 kernel: Movable zone start for each node Oct 29 00:34:12.706040 kernel: Early memory node ranges Oct 29 00:34:12.706045 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 29 00:34:12.706051 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 29 00:34:12.706057 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 29 00:34:12.706062 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 29 00:34:12.706068 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 29 00:34:12.706074 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 29 00:34:12.706079 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 29 00:34:12.706085 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 29 00:34:12.706106 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 29 00:34:12.706114 kernel: psci: probing for conduit method from ACPI. Oct 29 00:34:12.706120 kernel: psci: PSCIv1.1 detected in firmware. Oct 29 00:34:12.706125 kernel: psci: Using standard PSCI v0.2 function IDs Oct 29 00:34:12.706131 kernel: psci: Trusted OS migration not required Oct 29 00:34:12.706140 kernel: psci: SMC Calling Convention v1.1 Oct 29 00:34:12.706146 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 29 00:34:12.706154 kernel: ACPI: SRAT not present Oct 29 00:34:12.706160 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Oct 29 00:34:12.706166 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Oct 29 00:34:12.706172 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 29 00:34:12.706178 kernel: Detected PIPT I-cache on CPU0 Oct 29 00:34:12.706184 kernel: CPU features: detected: GIC system register CPU interface Oct 29 00:34:12.706190 kernel: CPU features: detected: Hardware dirty bit management Oct 29 00:34:12.706196 kernel: CPU features: detected: Spectre-v4 Oct 29 00:34:12.706202 kernel: CPU features: detected: Spectre-BHB Oct 29 00:34:12.706209 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 29 00:34:12.706215 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 29 00:34:12.706221 kernel: CPU features: detected: ARM erratum 1418040 Oct 29 00:34:12.706228 kernel: CPU features: detected: SSBS not fully self-synchronizing Oct 29 00:34:12.706234 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 29 00:34:12.706239 kernel: Policy zone: DMA Oct 29 00:34:12.706247 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=ddcdcc5923a51dfb24bee27c235aa754769d72fd417f60397f96d58c38c7a3e3 Oct 29 00:34:12.706253 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 29 00:34:12.706259 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 29 00:34:12.706265 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 29 00:34:12.706271 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 29 00:34:12.706279 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Oct 29 00:34:12.706285 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 29 00:34:12.706291 kernel: trace event string verifier disabled Oct 29 00:34:12.706297 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 29 00:34:12.706303 kernel: rcu: RCU event tracing is enabled. Oct 29 00:34:12.706310 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 29 00:34:12.706316 kernel: Trampoline variant of Tasks RCU enabled. Oct 29 00:34:12.706322 kernel: Tracing variant of Tasks RCU enabled. Oct 29 00:34:12.706328 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 29 00:34:12.706335 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 29 00:34:12.706341 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 29 00:34:12.706348 kernel: GICv3: 256 SPIs implemented Oct 29 00:34:12.706354 kernel: GICv3: 0 Extended SPIs implemented Oct 29 00:34:12.706360 kernel: GICv3: Distributor has no Range Selector support Oct 29 00:34:12.706366 kernel: Root IRQ handler: gic_handle_irq Oct 29 00:34:12.706372 kernel: GICv3: 16 PPIs implemented Oct 29 00:34:12.706378 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 29 00:34:12.706384 kernel: ACPI: SRAT not present Oct 29 00:34:12.706390 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 29 00:34:12.706396 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 29 00:34:12.706402 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 29 00:34:12.706408 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 29 00:34:12.706414 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 29 00:34:12.706422 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 29 00:34:12.706439 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 29 00:34:12.706445 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 29 00:34:12.706452 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 29 00:34:12.706458 kernel: arm-pv: using stolen time PV Oct 29 00:34:12.706465 kernel: Console: colour dummy device 80x25 Oct 29 00:34:12.706471 kernel: ACPI: Core revision 20210730 Oct 29 00:34:12.706477 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 29 00:34:12.706484 kernel: pid_max: default: 32768 minimum: 301 Oct 29 00:34:12.706490 kernel: LSM: Security Framework initializing Oct 29 00:34:12.706502 kernel: SELinux: Initializing. Oct 29 00:34:12.706508 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 29 00:34:12.706516 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 29 00:34:12.706523 kernel: rcu: Hierarchical SRCU implementation. Oct 29 00:34:12.706529 kernel: Platform MSI: ITS@0x8080000 domain created Oct 29 00:34:12.706536 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 29 00:34:12.706542 kernel: Remapping and enabling EFI services. Oct 29 00:34:12.706548 kernel: smp: Bringing up secondary CPUs ... Oct 29 00:34:12.706555 kernel: Detected PIPT I-cache on CPU1 Oct 29 00:34:12.706563 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 29 00:34:12.706569 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 29 00:34:12.706575 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 29 00:34:12.706582 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 29 00:34:12.706588 kernel: Detected PIPT I-cache on CPU2 Oct 29 00:34:12.706594 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 29 00:34:12.706601 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 29 00:34:12.706607 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 29 00:34:12.706613 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 29 00:34:12.706620 kernel: Detected PIPT I-cache on CPU3 Oct 29 00:34:12.706627 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 29 00:34:12.706633 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 29 00:34:12.706639 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 29 00:34:12.706646 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 29 00:34:12.706716 kernel: smp: Brought up 1 node, 4 CPUs Oct 29 00:34:12.706727 kernel: SMP: Total of 4 processors activated. Oct 29 00:34:12.706733 kernel: CPU features: detected: 32-bit EL0 Support Oct 29 00:34:12.706740 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 29 00:34:12.706747 kernel: CPU features: detected: Common not Private translations Oct 29 00:34:12.706753 kernel: CPU features: detected: CRC32 instructions Oct 29 00:34:12.706760 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 29 00:34:12.706767 kernel: CPU features: detected: LSE atomic instructions Oct 29 00:34:12.706775 kernel: CPU features: detected: Privileged Access Never Oct 29 00:34:12.706781 kernel: CPU features: detected: RAS Extension Support Oct 29 00:34:12.706788 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 29 00:34:12.706794 kernel: CPU: All CPU(s) started at EL1 Oct 29 00:34:12.706801 kernel: alternatives: patching kernel code Oct 29 00:34:12.706808 kernel: devtmpfs: initialized Oct 29 00:34:12.706815 kernel: KASLR enabled Oct 29 00:34:12.706822 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 29 00:34:12.706829 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 29 00:34:12.706835 kernel: pinctrl core: initialized pinctrl subsystem Oct 29 00:34:12.706842 kernel: SMBIOS 3.0.0 present. Oct 29 00:34:12.706848 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 29 00:34:12.706855 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 29 00:34:12.706861 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 29 00:34:12.706869 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 29 00:34:12.706876 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 29 00:34:12.706882 kernel: audit: initializing netlink subsys (disabled) Oct 29 00:34:12.706889 kernel: audit: type=2000 audit(0.037:1): state=initialized audit_enabled=0 res=1 Oct 29 00:34:12.706896 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 29 00:34:12.706902 kernel: cpuidle: using governor menu Oct 29 00:34:12.706909 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 29 00:34:12.706915 kernel: ASID allocator initialised with 32768 entries Oct 29 00:34:12.706922 kernel: ACPI: bus type PCI registered Oct 29 00:34:12.706929 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 29 00:34:12.706936 kernel: Serial: AMBA PL011 UART driver Oct 29 00:34:12.706942 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 29 00:34:12.706949 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 29 00:34:12.706956 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 29 00:34:12.706962 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 29 00:34:12.706969 kernel: cryptd: max_cpu_qlen set to 1000 Oct 29 00:34:12.706975 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 29 00:34:12.706982 kernel: ACPI: Added _OSI(Module Device) Oct 29 00:34:12.706989 kernel: ACPI: Added _OSI(Processor Device) Oct 29 00:34:12.706996 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 29 00:34:12.707003 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 29 00:34:12.707009 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 29 00:34:12.707016 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 29 00:34:12.707022 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 29 00:34:12.707029 kernel: ACPI: Interpreter enabled Oct 29 00:34:12.707036 kernel: ACPI: Using GIC for interrupt routing Oct 29 00:34:12.707042 kernel: ACPI: MCFG table detected, 1 entries Oct 29 00:34:12.707050 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 29 00:34:12.707057 kernel: printk: console [ttyAMA0] enabled Oct 29 00:34:12.707063 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 29 00:34:12.707190 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 29 00:34:12.707255 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 29 00:34:12.707313 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 29 00:34:12.707370 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 29 00:34:12.707454 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 29 00:34:12.707465 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 29 00:34:12.707472 kernel: PCI host bridge to bus 0000:00 Oct 29 00:34:12.707544 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 29 00:34:12.707599 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 29 00:34:12.707696 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 29 00:34:12.707767 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 29 00:34:12.707846 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 29 00:34:12.707915 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 29 00:34:12.707978 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 29 00:34:12.708037 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 29 00:34:12.708126 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 29 00:34:12.708190 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 29 00:34:12.708249 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 29 00:34:12.708314 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 29 00:34:12.708367 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 29 00:34:12.708418 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 29 00:34:12.708519 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 29 00:34:12.708529 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 29 00:34:12.708537 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 29 00:34:12.708544 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 29 00:34:12.708553 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 29 00:34:12.708559 kernel: iommu: Default domain type: Translated Oct 29 00:34:12.708566 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 29 00:34:12.708573 kernel: vgaarb: loaded Oct 29 00:34:12.708579 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 29 00:34:12.708586 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 29 00:34:12.708593 kernel: PTP clock support registered Oct 29 00:34:12.708599 kernel: Registered efivars operations Oct 29 00:34:12.708606 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 29 00:34:12.708612 kernel: VFS: Disk quotas dquot_6.6.0 Oct 29 00:34:12.708621 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 29 00:34:12.708627 kernel: pnp: PnP ACPI init Oct 29 00:34:12.708751 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 29 00:34:12.708764 kernel: pnp: PnP ACPI: found 1 devices Oct 29 00:34:12.708771 kernel: NET: Registered PF_INET protocol family Oct 29 00:34:12.708778 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 29 00:34:12.708785 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 29 00:34:12.708792 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 29 00:34:12.708802 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 29 00:34:12.708808 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 29 00:34:12.708815 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 29 00:34:12.708822 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 29 00:34:12.708828 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 29 00:34:12.708835 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 29 00:34:12.708841 kernel: PCI: CLS 0 bytes, default 64 Oct 29 00:34:12.708848 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 29 00:34:12.708855 kernel: kvm [1]: HYP mode not available Oct 29 00:34:12.708862 kernel: Initialise system trusted keyrings Oct 29 00:34:12.708869 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 29 00:34:12.708876 kernel: Key type asymmetric registered Oct 29 00:34:12.708882 kernel: Asymmetric key parser 'x509' registered Oct 29 00:34:12.708889 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 29 00:34:12.708895 kernel: io scheduler mq-deadline registered Oct 29 00:34:12.708902 kernel: io scheduler kyber registered Oct 29 00:34:12.708909 kernel: io scheduler bfq registered Oct 29 00:34:12.708916 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 29 00:34:12.708924 kernel: ACPI: button: Power Button [PWRB] Oct 29 00:34:12.708930 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 29 00:34:12.708996 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 29 00:34:12.709005 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 29 00:34:12.709012 kernel: thunder_xcv, ver 1.0 Oct 29 00:34:12.709018 kernel: thunder_bgx, ver 1.0 Oct 29 00:34:12.709025 kernel: nicpf, ver 1.0 Oct 29 00:34:12.709031 kernel: nicvf, ver 1.0 Oct 29 00:34:12.709108 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 29 00:34:12.709169 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-10-29T00:34:12 UTC (1761698052) Oct 29 00:34:12.709177 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 29 00:34:12.709189 kernel: NET: Registered PF_INET6 protocol family Oct 29 00:34:12.709196 kernel: Segment Routing with IPv6 Oct 29 00:34:12.709202 kernel: In-situ OAM (IOAM) with IPv6 Oct 29 00:34:12.709209 kernel: NET: Registered PF_PACKET protocol family Oct 29 00:34:12.709216 kernel: Key type dns_resolver registered Oct 29 00:34:12.709222 kernel: registered taskstats version 1 Oct 29 00:34:12.709230 kernel: Loading compiled-in X.509 certificates Oct 29 00:34:12.709237 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 365034a3270fb89208cc05b5e556df135e9c6322' Oct 29 00:34:12.709244 kernel: Key type .fscrypt registered Oct 29 00:34:12.709251 kernel: Key type fscrypt-provisioning registered Oct 29 00:34:12.709257 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 29 00:34:12.709264 kernel: ima: Allocated hash algorithm: sha1 Oct 29 00:34:12.709271 kernel: ima: No architecture policies found Oct 29 00:34:12.709277 kernel: clk: Disabling unused clocks Oct 29 00:34:12.709284 kernel: Freeing unused kernel memory: 36416K Oct 29 00:34:12.709291 kernel: Run /init as init process Oct 29 00:34:12.709298 kernel: with arguments: Oct 29 00:34:12.709304 kernel: /init Oct 29 00:34:12.709311 kernel: with environment: Oct 29 00:34:12.709319 kernel: HOME=/ Oct 29 00:34:12.709325 kernel: TERM=linux Oct 29 00:34:12.709332 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 29 00:34:12.709340 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 29 00:34:12.709350 systemd[1]: Detected virtualization kvm. Oct 29 00:34:12.709358 systemd[1]: Detected architecture arm64. Oct 29 00:34:12.709367 systemd[1]: Running in initrd. Oct 29 00:34:12.709373 systemd[1]: No hostname configured, using default hostname. Oct 29 00:34:12.709380 systemd[1]: Hostname set to . Oct 29 00:34:12.709387 systemd[1]: Initializing machine ID from VM UUID. Oct 29 00:34:12.709394 systemd[1]: Queued start job for default target initrd.target. Oct 29 00:34:12.709401 systemd[1]: Started systemd-ask-password-console.path. Oct 29 00:34:12.709411 systemd[1]: Reached target cryptsetup.target. Oct 29 00:34:12.709418 systemd[1]: Reached target paths.target. Oct 29 00:34:12.709425 systemd[1]: Reached target slices.target. Oct 29 00:34:12.709454 systemd[1]: Reached target swap.target. Oct 29 00:34:12.709463 systemd[1]: Reached target timers.target. Oct 29 00:34:12.709471 systemd[1]: Listening on iscsid.socket. Oct 29 00:34:12.709478 systemd[1]: Listening on iscsiuio.socket. Oct 29 00:34:12.709487 systemd[1]: Listening on systemd-journald-audit.socket. Oct 29 00:34:12.709494 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 29 00:34:12.709501 systemd[1]: Listening on systemd-journald.socket. Oct 29 00:34:12.709510 systemd[1]: Listening on systemd-networkd.socket. Oct 29 00:34:12.709518 systemd[1]: Listening on systemd-udevd-control.socket. Oct 29 00:34:12.709525 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 29 00:34:12.709531 systemd[1]: Reached target sockets.target. Oct 29 00:34:12.709538 systemd[1]: Starting kmod-static-nodes.service... Oct 29 00:34:12.709545 systemd[1]: Finished network-cleanup.service. Oct 29 00:34:12.709553 systemd[1]: Starting systemd-fsck-usr.service... Oct 29 00:34:12.709560 systemd[1]: Starting systemd-journald.service... Oct 29 00:34:12.709567 systemd[1]: Starting systemd-modules-load.service... Oct 29 00:34:12.709574 systemd[1]: Starting systemd-resolved.service... Oct 29 00:34:12.709583 systemd[1]: Starting systemd-vconsole-setup.service... Oct 29 00:34:12.709590 systemd[1]: Finished kmod-static-nodes.service. Oct 29 00:34:12.709597 systemd[1]: Finished systemd-fsck-usr.service. Oct 29 00:34:12.709604 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 29 00:34:12.709614 systemd-journald[291]: Journal started Oct 29 00:34:12.709688 systemd-journald[291]: Runtime Journal (/run/log/journal/294bddbc818d44cdb72a890ac74505c7) is 6.0M, max 48.7M, 42.6M free. Oct 29 00:34:12.704547 systemd-modules-load[292]: Inserted module 'overlay' Oct 29 00:34:12.714106 systemd[1]: Started systemd-journald.service. Oct 29 00:34:12.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.721479 kernel: audit: type=1130 audit(1761698052.714:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.721515 kernel: audit: type=1130 audit(1761698052.718:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.717910 systemd[1]: Finished systemd-vconsole-setup.service. Oct 29 00:34:12.722184 systemd[1]: Starting dracut-cmdline-ask.service... Oct 29 00:34:12.722286 systemd-resolved[293]: Positive Trust Anchors: Oct 29 00:34:12.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.722294 systemd-resolved[293]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 29 00:34:12.729708 kernel: audit: type=1130 audit(1761698052.724:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.722321 systemd-resolved[293]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 29 00:34:12.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.723440 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 29 00:34:12.739345 kernel: audit: type=1130 audit(1761698052.730:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.726516 systemd-resolved[293]: Defaulting to hostname 'linux'. Oct 29 00:34:12.728281 systemd[1]: Started systemd-resolved.service. Oct 29 00:34:12.743927 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 29 00:34:12.738436 systemd[1]: Reached target nss-lookup.target. Oct 29 00:34:12.747316 systemd-modules-load[292]: Inserted module 'br_netfilter' Oct 29 00:34:12.748320 kernel: Bridge firewalling registered Oct 29 00:34:12.747507 systemd[1]: Finished dracut-cmdline-ask.service. Oct 29 00:34:12.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.753330 systemd[1]: Starting dracut-cmdline.service... Oct 29 00:34:12.754868 kernel: audit: type=1130 audit(1761698052.749:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.758448 kernel: SCSI subsystem initialized Oct 29 00:34:12.762548 dracut-cmdline[308]: dracut-dracut-053 Oct 29 00:34:12.765610 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=ddcdcc5923a51dfb24bee27c235aa754769d72fd417f60397f96d58c38c7a3e3 Oct 29 00:34:12.772152 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 29 00:34:12.772176 kernel: device-mapper: uevent: version 1.0.3 Oct 29 00:34:12.772185 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 29 00:34:12.773998 systemd-modules-load[292]: Inserted module 'dm_multipath' Oct 29 00:34:12.774767 systemd[1]: Finished systemd-modules-load.service. Oct 29 00:34:12.779531 kernel: audit: type=1130 audit(1761698052.775:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.776487 systemd[1]: Starting systemd-sysctl.service... Oct 29 00:34:12.787473 systemd[1]: Finished systemd-sysctl.service. Oct 29 00:34:12.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.792479 kernel: audit: type=1130 audit(1761698052.787:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.839471 kernel: Loading iSCSI transport class v2.0-870. Oct 29 00:34:12.851454 kernel: iscsi: registered transport (tcp) Oct 29 00:34:12.867464 kernel: iscsi: registered transport (qla4xxx) Oct 29 00:34:12.867509 kernel: QLogic iSCSI HBA Driver Oct 29 00:34:12.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.904839 systemd[1]: Finished dracut-cmdline.service. Oct 29 00:34:12.909718 kernel: audit: type=1130 audit(1761698052.905:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:12.906567 systemd[1]: Starting dracut-pre-udev.service... Oct 29 00:34:12.949473 kernel: raid6: neonx8 gen() 13264 MB/s Oct 29 00:34:12.966639 kernel: raid6: neonx8 xor() 10418 MB/s Oct 29 00:34:12.983475 kernel: raid6: neonx4 gen() 13001 MB/s Oct 29 00:34:13.000458 kernel: raid6: neonx4 xor() 10667 MB/s Oct 29 00:34:13.017496 kernel: raid6: neonx2 gen() 12924 MB/s Oct 29 00:34:13.034464 kernel: raid6: neonx2 xor() 10252 MB/s Oct 29 00:34:13.051459 kernel: raid6: neonx1 gen() 10501 MB/s Oct 29 00:34:13.068457 kernel: raid6: neonx1 xor() 8745 MB/s Oct 29 00:34:13.085452 kernel: raid6: int64x8 gen() 6234 MB/s Oct 29 00:34:13.102466 kernel: raid6: int64x8 xor() 3528 MB/s Oct 29 00:34:13.119472 kernel: raid6: int64x4 gen() 7198 MB/s Oct 29 00:34:13.136455 kernel: raid6: int64x4 xor() 3847 MB/s Oct 29 00:34:13.153456 kernel: raid6: int64x2 gen() 6134 MB/s Oct 29 00:34:13.170469 kernel: raid6: int64x2 xor() 3316 MB/s Oct 29 00:34:13.187477 kernel: raid6: int64x1 gen() 5033 MB/s Oct 29 00:34:13.204619 kernel: raid6: int64x1 xor() 2640 MB/s Oct 29 00:34:13.204640 kernel: raid6: using algorithm neonx8 gen() 13264 MB/s Oct 29 00:34:13.204650 kernel: raid6: .... xor() 10418 MB/s, rmw enabled Oct 29 00:34:13.205780 kernel: raid6: using neon recovery algorithm Oct 29 00:34:13.216881 kernel: xor: measuring software checksum speed Oct 29 00:34:13.216912 kernel: 8regs : 17195 MB/sec Oct 29 00:34:13.217598 kernel: 32regs : 20670 MB/sec Oct 29 00:34:13.218931 kernel: arm64_neon : 27626 MB/sec Oct 29 00:34:13.218948 kernel: xor: using function: arm64_neon (27626 MB/sec) Oct 29 00:34:13.271464 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 29 00:34:13.283444 systemd[1]: Finished dracut-pre-udev.service. Oct 29 00:34:13.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:13.287000 audit: BPF prog-id=7 op=LOAD Oct 29 00:34:13.287000 audit: BPF prog-id=8 op=LOAD Oct 29 00:34:13.288314 systemd[1]: Starting systemd-udevd.service... Oct 29 00:34:13.289869 kernel: audit: type=1130 audit(1761698053.283:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:13.301062 systemd-udevd[490]: Using default interface naming scheme 'v252'. Oct 29 00:34:13.304404 systemd[1]: Started systemd-udevd.service. Oct 29 00:34:13.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:13.306454 systemd[1]: Starting dracut-pre-trigger.service... Oct 29 00:34:13.317066 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Oct 29 00:34:13.344117 systemd[1]: Finished dracut-pre-trigger.service. Oct 29 00:34:13.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:13.345810 systemd[1]: Starting systemd-udev-trigger.service... Oct 29 00:34:13.384881 systemd[1]: Finished systemd-udev-trigger.service. Oct 29 00:34:13.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:13.433447 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Oct 29 00:34:13.440020 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 29 00:34:13.440036 kernel: GPT:9289727 != 19775487 Oct 29 00:34:13.440045 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 29 00:34:13.440059 kernel: GPT:9289727 != 19775487 Oct 29 00:34:13.440067 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 29 00:34:13.440075 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:13.459117 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 29 00:34:13.461445 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (552) Oct 29 00:34:13.462183 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 29 00:34:13.463280 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 29 00:34:13.467843 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 29 00:34:13.475706 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 29 00:34:13.477332 systemd[1]: Starting disk-uuid.service... Oct 29 00:34:13.487061 disk-uuid[565]: Primary Header is updated. Oct 29 00:34:13.487061 disk-uuid[565]: Secondary Entries is updated. Oct 29 00:34:13.487061 disk-uuid[565]: Secondary Header is updated. Oct 29 00:34:13.490733 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:13.494446 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:13.498471 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:14.498273 disk-uuid[566]: The operation has completed successfully. Oct 29 00:34:14.499646 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 29 00:34:14.522043 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 29 00:34:14.522158 systemd[1]: Finished disk-uuid.service. Oct 29 00:34:14.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.523755 systemd[1]: Starting verity-setup.service... Oct 29 00:34:14.537453 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 29 00:34:14.557696 systemd[1]: Found device dev-mapper-usr.device. Oct 29 00:34:14.559929 systemd[1]: Mounting sysusr-usr.mount... Oct 29 00:34:14.561938 systemd[1]: Finished verity-setup.service. Oct 29 00:34:14.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.606294 systemd[1]: Mounted sysusr-usr.mount. Oct 29 00:34:14.607681 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 29 00:34:14.607188 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 29 00:34:14.607880 systemd[1]: Starting ignition-setup.service... Oct 29 00:34:14.610407 systemd[1]: Starting parse-ip-for-networkd.service... Oct 29 00:34:14.619458 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 29 00:34:14.619497 kernel: BTRFS info (device vda6): using free space tree Oct 29 00:34:14.619508 kernel: BTRFS info (device vda6): has skinny extents Oct 29 00:34:14.627743 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 29 00:34:14.633676 systemd[1]: Finished ignition-setup.service. Oct 29 00:34:14.635175 systemd[1]: Starting ignition-fetch-offline.service... Oct 29 00:34:14.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.689754 ignition[659]: Ignition 2.14.0 Oct 29 00:34:14.689765 ignition[659]: Stage: fetch-offline Oct 29 00:34:14.689803 ignition[659]: no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:14.689812 ignition[659]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:14.689941 ignition[659]: parsed url from cmdline: "" Oct 29 00:34:14.689944 ignition[659]: no config URL provided Oct 29 00:34:14.689949 ignition[659]: reading system config file "/usr/lib/ignition/user.ign" Oct 29 00:34:14.689955 ignition[659]: no config at "/usr/lib/ignition/user.ign" Oct 29 00:34:14.689972 ignition[659]: op(1): [started] loading QEMU firmware config module Oct 29 00:34:14.689977 ignition[659]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 29 00:34:14.697272 systemd[1]: Finished parse-ip-for-networkd.service. Oct 29 00:34:14.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.698000 audit: BPF prog-id=9 op=LOAD Oct 29 00:34:14.694018 ignition[659]: op(1): [finished] loading QEMU firmware config module Oct 29 00:34:14.699876 systemd[1]: Starting systemd-networkd.service... Oct 29 00:34:14.721772 systemd-networkd[744]: lo: Link UP Oct 29 00:34:14.721785 systemd-networkd[744]: lo: Gained carrier Oct 29 00:34:14.722183 systemd-networkd[744]: Enumeration completed Oct 29 00:34:14.722366 systemd-networkd[744]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 29 00:34:14.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.722694 systemd[1]: Started systemd-networkd.service. Oct 29 00:34:14.723360 systemd-networkd[744]: eth0: Link UP Oct 29 00:34:14.723363 systemd-networkd[744]: eth0: Gained carrier Oct 29 00:34:14.723902 systemd[1]: Reached target network.target. Oct 29 00:34:14.725502 systemd[1]: Starting iscsiuio.service... Oct 29 00:34:14.735806 systemd[1]: Started iscsiuio.service. Oct 29 00:34:14.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.737481 systemd[1]: Starting iscsid.service... Oct 29 00:34:14.740793 iscsid[749]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 29 00:34:14.740793 iscsid[749]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 29 00:34:14.740793 iscsid[749]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 29 00:34:14.740793 iscsid[749]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 29 00:34:14.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.748299 systemd[1]: Started iscsid.service. Oct 29 00:34:14.753934 iscsid[749]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 29 00:34:14.753934 iscsid[749]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 29 00:34:14.749915 systemd[1]: Starting dracut-initqueue.service... Oct 29 00:34:14.753976 systemd-networkd[744]: eth0: DHCPv4 address 10.0.0.79/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 29 00:34:14.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.761931 systemd[1]: Finished dracut-initqueue.service. Oct 29 00:34:14.762934 systemd[1]: Reached target remote-fs-pre.target. Oct 29 00:34:14.763889 systemd[1]: Reached target remote-cryptsetup.target. Oct 29 00:34:14.764883 systemd[1]: Reached target remote-fs.target. Oct 29 00:34:14.766385 systemd[1]: Starting dracut-pre-mount.service... Oct 29 00:34:14.773560 systemd[1]: Finished dracut-pre-mount.service. Oct 29 00:34:14.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.776320 ignition[659]: parsing config with SHA512: 5b691380bbffd4ef34c16bab6117de66bdf9274671e20fb150ec9e7845051957a803492115c2c50c589d62f475d923bcd6cead1df6e711d77c6cadcdb65845f9 Oct 29 00:34:14.785194 unknown[659]: fetched base config from "system" Oct 29 00:34:14.786171 unknown[659]: fetched user config from "qemu" Oct 29 00:34:14.787592 ignition[659]: fetch-offline: fetch-offline passed Oct 29 00:34:14.788520 ignition[659]: Ignition finished successfully Oct 29 00:34:14.789614 systemd[1]: Finished ignition-fetch-offline.service. Oct 29 00:34:14.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.790567 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 29 00:34:14.791218 systemd[1]: Starting ignition-kargs.service... Oct 29 00:34:14.801156 ignition[764]: Ignition 2.14.0 Oct 29 00:34:14.801166 ignition[764]: Stage: kargs Oct 29 00:34:14.801255 ignition[764]: no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:14.803474 systemd[1]: Finished ignition-kargs.service. Oct 29 00:34:14.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.801264 ignition[764]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:14.802118 ignition[764]: kargs: kargs passed Oct 29 00:34:14.805675 systemd[1]: Starting ignition-disks.service... Oct 29 00:34:14.802156 ignition[764]: Ignition finished successfully Oct 29 00:34:14.812107 ignition[770]: Ignition 2.14.0 Oct 29 00:34:14.812116 ignition[770]: Stage: disks Oct 29 00:34:14.812201 ignition[770]: no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:14.814187 systemd[1]: Finished ignition-disks.service. Oct 29 00:34:14.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.812211 ignition[770]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:14.815781 systemd[1]: Reached target initrd-root-device.target. Oct 29 00:34:14.813090 ignition[770]: disks: disks passed Oct 29 00:34:14.817093 systemd[1]: Reached target local-fs-pre.target. Oct 29 00:34:14.813128 ignition[770]: Ignition finished successfully Oct 29 00:34:14.818714 systemd[1]: Reached target local-fs.target. Oct 29 00:34:14.820149 systemd[1]: Reached target sysinit.target. Oct 29 00:34:14.821346 systemd[1]: Reached target basic.target. Oct 29 00:34:14.823452 systemd[1]: Starting systemd-fsck-root.service... Oct 29 00:34:14.833966 systemd-fsck[779]: ROOT: clean, 637/553520 files, 56031/553472 blocks Oct 29 00:34:14.837794 systemd[1]: Finished systemd-fsck-root.service. Oct 29 00:34:14.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.839547 systemd[1]: Mounting sysroot.mount... Oct 29 00:34:14.845373 systemd[1]: Mounted sysroot.mount. Oct 29 00:34:14.846692 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 29 00:34:14.846186 systemd[1]: Reached target initrd-root-fs.target. Oct 29 00:34:14.848958 systemd[1]: Mounting sysroot-usr.mount... Oct 29 00:34:14.849829 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 29 00:34:14.849865 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 29 00:34:14.849885 systemd[1]: Reached target ignition-diskful.target. Oct 29 00:34:14.851864 systemd[1]: Mounted sysroot-usr.mount. Oct 29 00:34:14.853580 systemd[1]: Starting initrd-setup-root.service... Oct 29 00:34:14.857666 initrd-setup-root[789]: cut: /sysroot/etc/passwd: No such file or directory Oct 29 00:34:14.861275 initrd-setup-root[797]: cut: /sysroot/etc/group: No such file or directory Oct 29 00:34:14.865413 initrd-setup-root[805]: cut: /sysroot/etc/shadow: No such file or directory Oct 29 00:34:14.869091 initrd-setup-root[813]: cut: /sysroot/etc/gshadow: No such file or directory Oct 29 00:34:14.896084 systemd[1]: Finished initrd-setup-root.service. Oct 29 00:34:14.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.897722 systemd[1]: Starting ignition-mount.service... Oct 29 00:34:14.899124 systemd[1]: Starting sysroot-boot.service... Oct 29 00:34:14.904031 bash[830]: umount: /sysroot/usr/share/oem: not mounted. Oct 29 00:34:14.913094 ignition[832]: INFO : Ignition 2.14.0 Oct 29 00:34:14.914084 ignition[832]: INFO : Stage: mount Oct 29 00:34:14.914939 ignition[832]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:14.916054 ignition[832]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:14.917276 ignition[832]: INFO : mount: mount passed Oct 29 00:34:14.917276 ignition[832]: INFO : Ignition finished successfully Oct 29 00:34:14.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.917716 systemd[1]: Finished ignition-mount.service. Oct 29 00:34:14.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:14.918968 systemd[1]: Finished sysroot-boot.service. Oct 29 00:34:15.568796 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 29 00:34:15.574453 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (841) Oct 29 00:34:15.576500 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 29 00:34:15.576517 kernel: BTRFS info (device vda6): using free space tree Oct 29 00:34:15.576527 kernel: BTRFS info (device vda6): has skinny extents Oct 29 00:34:15.579803 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 29 00:34:15.581271 systemd[1]: Starting ignition-files.service... Oct 29 00:34:15.594095 ignition[861]: INFO : Ignition 2.14.0 Oct 29 00:34:15.594095 ignition[861]: INFO : Stage: files Oct 29 00:34:15.595666 ignition[861]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:15.595666 ignition[861]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:15.595666 ignition[861]: DEBUG : files: compiled without relabeling support, skipping Oct 29 00:34:15.598986 ignition[861]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 29 00:34:15.598986 ignition[861]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 29 00:34:15.601732 ignition[861]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 29 00:34:15.603052 ignition[861]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 29 00:34:15.604523 unknown[861]: wrote ssh authorized keys file for user: core Oct 29 00:34:15.605589 ignition[861]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 29 00:34:15.605589 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Oct 29 00:34:15.605589 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Oct 29 00:34:15.661720 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 29 00:34:15.764264 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Oct 29 00:34:15.766209 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Oct 29 00:34:15.766209 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Oct 29 00:34:15.766209 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Oct 29 00:34:15.771327 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Oct 29 00:34:16.187062 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Oct 29 00:34:16.451146 ignition[861]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Oct 29 00:34:16.451146 ignition[861]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Oct 29 00:34:16.454973 ignition[861]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Oct 29 00:34:16.454973 ignition[861]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Oct 29 00:34:16.454973 ignition[861]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Oct 29 00:34:16.454973 ignition[861]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Oct 29 00:34:16.454973 ignition[861]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 29 00:34:16.454973 ignition[861]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 29 00:34:16.454973 ignition[861]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Oct 29 00:34:16.454973 ignition[861]: INFO : files: op(f): [started] setting preset to disabled for "coreos-metadata.service" Oct 29 00:34:16.454973 ignition[861]: INFO : files: op(f): op(10): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 29 00:34:16.490980 ignition[861]: INFO : files: op(f): op(10): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 29 00:34:16.492949 ignition[861]: INFO : files: op(f): [finished] setting preset to disabled for "coreos-metadata.service" Oct 29 00:34:16.492949 ignition[861]: INFO : files: op(11): [started] setting preset to enabled for "prepare-helm.service" Oct 29 00:34:16.492949 ignition[861]: INFO : files: op(11): [finished] setting preset to enabled for "prepare-helm.service" Oct 29 00:34:16.492949 ignition[861]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 29 00:34:16.492949 ignition[861]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 29 00:34:16.492949 ignition[861]: INFO : files: files passed Oct 29 00:34:16.492949 ignition[861]: INFO : Ignition finished successfully Oct 29 00:34:16.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.492607 systemd[1]: Finished ignition-files.service. Oct 29 00:34:16.494455 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 29 00:34:16.496047 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 29 00:34:16.511419 initrd-setup-root-after-ignition[887]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 29 00:34:16.496693 systemd[1]: Starting ignition-quench.service... Oct 29 00:34:16.513967 initrd-setup-root-after-ignition[889]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 29 00:34:16.501827 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 29 00:34:16.501908 systemd[1]: Finished ignition-quench.service. Oct 29 00:34:16.504057 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 29 00:34:16.505464 systemd[1]: Reached target ignition-complete.target. Oct 29 00:34:16.507614 systemd[1]: Starting initrd-parse-etc.service... Oct 29 00:34:16.519644 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 29 00:34:16.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.519725 systemd[1]: Finished initrd-parse-etc.service. Oct 29 00:34:16.521081 systemd[1]: Reached target initrd-fs.target. Oct 29 00:34:16.522569 systemd[1]: Reached target initrd.target. Oct 29 00:34:16.524099 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 29 00:34:16.524772 systemd[1]: Starting dracut-pre-pivot.service... Oct 29 00:34:16.534722 systemd[1]: Finished dracut-pre-pivot.service. Oct 29 00:34:16.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.536180 systemd[1]: Starting initrd-cleanup.service... Oct 29 00:34:16.543905 systemd[1]: Stopped target nss-lookup.target. Oct 29 00:34:16.544792 systemd[1]: Stopped target remote-cryptsetup.target. Oct 29 00:34:16.546330 systemd[1]: Stopped target timers.target. Oct 29 00:34:16.547740 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 29 00:34:16.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.547850 systemd[1]: Stopped dracut-pre-pivot.service. Oct 29 00:34:16.549189 systemd[1]: Stopped target initrd.target. Oct 29 00:34:16.550580 systemd[1]: Stopped target basic.target. Oct 29 00:34:16.551879 systemd[1]: Stopped target ignition-complete.target. Oct 29 00:34:16.553277 systemd[1]: Stopped target ignition-diskful.target. Oct 29 00:34:16.554663 systemd[1]: Stopped target initrd-root-device.target. Oct 29 00:34:16.556162 systemd[1]: Stopped target remote-fs.target. Oct 29 00:34:16.557542 systemd[1]: Stopped target remote-fs-pre.target. Oct 29 00:34:16.559084 systemd[1]: Stopped target sysinit.target. Oct 29 00:34:16.560361 systemd[1]: Stopped target local-fs.target. Oct 29 00:34:16.561749 systemd[1]: Stopped target local-fs-pre.target. Oct 29 00:34:16.563219 systemd[1]: Stopped target swap.target. Oct 29 00:34:16.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.564557 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 29 00:34:16.564666 systemd[1]: Stopped dracut-pre-mount.service. Oct 29 00:34:16.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.566165 systemd[1]: Stopped target cryptsetup.target. Oct 29 00:34:16.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.567340 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 29 00:34:16.567470 systemd[1]: Stopped dracut-initqueue.service. Oct 29 00:34:16.569015 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 29 00:34:16.569120 systemd[1]: Stopped ignition-fetch-offline.service. Oct 29 00:34:16.570473 systemd[1]: Stopped target paths.target. Oct 29 00:34:16.571737 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 29 00:34:16.577464 systemd[1]: Stopped systemd-ask-password-console.path. Oct 29 00:34:16.578389 systemd[1]: Stopped target slices.target. Oct 29 00:34:16.579855 systemd[1]: Stopped target sockets.target. Oct 29 00:34:16.581165 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 29 00:34:16.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.581273 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 29 00:34:16.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.582634 systemd[1]: ignition-files.service: Deactivated successfully. Oct 29 00:34:16.582727 systemd[1]: Stopped ignition-files.service. Oct 29 00:34:16.585108 systemd[1]: Stopping ignition-mount.service... Oct 29 00:34:16.588512 iscsid[749]: iscsid shutting down. Oct 29 00:34:16.586804 systemd[1]: Stopping iscsid.service... Oct 29 00:34:16.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.588541 systemd[1]: Stopping sysroot-boot.service... Oct 29 00:34:16.591000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.589199 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 29 00:34:16.589321 systemd[1]: Stopped systemd-udev-trigger.service. Oct 29 00:34:16.594626 ignition[902]: INFO : Ignition 2.14.0 Oct 29 00:34:16.594626 ignition[902]: INFO : Stage: umount Oct 29 00:34:16.594626 ignition[902]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 29 00:34:16.594626 ignition[902]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 29 00:34:16.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.590673 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 29 00:34:16.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.603522 ignition[902]: INFO : umount: umount passed Oct 29 00:34:16.603522 ignition[902]: INFO : Ignition finished successfully Oct 29 00:34:16.590759 systemd[1]: Stopped dracut-pre-trigger.service. Oct 29 00:34:16.594246 systemd[1]: iscsid.service: Deactivated successfully. Oct 29 00:34:16.594339 systemd[1]: Stopped iscsid.service. Oct 29 00:34:16.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.597045 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 29 00:34:16.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.597152 systemd[1]: Stopped ignition-mount.service. Oct 29 00:34:16.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.599959 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 29 00:34:16.600349 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 29 00:34:16.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.600423 systemd[1]: Finished initrd-cleanup.service. Oct 29 00:34:16.603179 systemd[1]: iscsid.socket: Deactivated successfully. Oct 29 00:34:16.603210 systemd[1]: Closed iscsid.socket. Oct 29 00:34:16.604983 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 29 00:34:16.605026 systemd[1]: Stopped ignition-disks.service. Oct 29 00:34:16.608695 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 29 00:34:16.608737 systemd[1]: Stopped ignition-kargs.service. Oct 29 00:34:16.609951 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 29 00:34:16.609989 systemd[1]: Stopped ignition-setup.service. Oct 29 00:34:16.613907 systemd[1]: Stopping iscsiuio.service... Oct 29 00:34:16.617244 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 29 00:34:16.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.617335 systemd[1]: Stopped iscsiuio.service. Oct 29 00:34:16.618605 systemd[1]: Stopped target network.target. Oct 29 00:34:16.620091 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 29 00:34:16.620122 systemd[1]: Closed iscsiuio.socket. Oct 29 00:34:16.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.623390 systemd[1]: Stopping systemd-networkd.service... Oct 29 00:34:16.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.624870 systemd[1]: Stopping systemd-resolved.service... Oct 29 00:34:16.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.630478 systemd-networkd[744]: eth0: DHCPv6 lease lost Oct 29 00:34:16.631378 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 29 00:34:16.644000 audit: BPF prog-id=9 op=UNLOAD Oct 29 00:34:16.631487 systemd[1]: Stopped systemd-networkd.service. Oct 29 00:34:16.633094 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 29 00:34:16.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.633122 systemd[1]: Closed systemd-networkd.socket. Oct 29 00:34:16.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.635451 systemd[1]: Stopping network-cleanup.service... Oct 29 00:34:16.636853 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 29 00:34:16.636912 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 29 00:34:16.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.638501 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 29 00:34:16.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.653000 audit: BPF prog-id=6 op=UNLOAD Oct 29 00:34:16.638545 systemd[1]: Stopped systemd-sysctl.service. Oct 29 00:34:16.640534 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 29 00:34:16.640573 systemd[1]: Stopped systemd-modules-load.service. Oct 29 00:34:16.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.641509 systemd[1]: Stopping systemd-udevd.service... Oct 29 00:34:16.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.645678 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 29 00:34:16.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.646217 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 29 00:34:16.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.646308 systemd[1]: Stopped systemd-resolved.service. Oct 29 00:34:16.648047 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 29 00:34:16.648136 systemd[1]: Stopped sysroot-boot.service. Oct 29 00:34:16.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.651267 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 29 00:34:16.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.651401 systemd[1]: Stopped systemd-udevd.service. Oct 29 00:34:16.652979 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 29 00:34:16.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.653049 systemd[1]: Stopped network-cleanup.service. Oct 29 00:34:16.654294 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 29 00:34:16.654328 systemd[1]: Closed systemd-udevd-control.socket. Oct 29 00:34:16.655703 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 29 00:34:16.655735 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 29 00:34:16.657044 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 29 00:34:16.657098 systemd[1]: Stopped dracut-pre-udev.service. Oct 29 00:34:16.658707 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 29 00:34:16.658743 systemd[1]: Stopped dracut-cmdline.service. Oct 29 00:34:16.660074 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 29 00:34:16.660112 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 29 00:34:16.661419 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 29 00:34:16.661469 systemd[1]: Stopped initrd-setup-root.service. Oct 29 00:34:16.664006 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 29 00:34:16.664947 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 29 00:34:16.665013 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 29 00:34:16.667222 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 29 00:34:16.667264 systemd[1]: Stopped kmod-static-nodes.service. Oct 29 00:34:16.668183 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 29 00:34:16.668222 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 29 00:34:16.670282 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 29 00:34:16.670701 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 29 00:34:16.697107 systemd-journald[291]: Received SIGTERM from PID 1 (n/a). Oct 29 00:34:16.670783 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 29 00:34:16.672062 systemd[1]: Reached target initrd-switch-root.target. Oct 29 00:34:16.674378 systemd[1]: Starting initrd-switch-root.service... Oct 29 00:34:16.681167 systemd[1]: Switching root. Oct 29 00:34:16.700372 systemd-journald[291]: Journal stopped Oct 29 00:34:18.731949 kernel: SELinux: Class mctp_socket not defined in policy. Oct 29 00:34:18.731997 kernel: SELinux: Class anon_inode not defined in policy. Oct 29 00:34:18.732013 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 29 00:34:18.732023 kernel: SELinux: policy capability network_peer_controls=1 Oct 29 00:34:18.732039 kernel: SELinux: policy capability open_perms=1 Oct 29 00:34:18.732061 kernel: SELinux: policy capability extended_socket_class=1 Oct 29 00:34:18.732073 kernel: SELinux: policy capability always_check_network=0 Oct 29 00:34:18.732083 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 29 00:34:18.732093 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 29 00:34:18.732102 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 29 00:34:18.732111 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 29 00:34:18.732124 systemd[1]: Successfully loaded SELinux policy in 37.998ms. Oct 29 00:34:18.732141 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.733ms. Oct 29 00:34:18.732154 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 29 00:34:18.732165 systemd[1]: Detected virtualization kvm. Oct 29 00:34:18.732175 systemd[1]: Detected architecture arm64. Oct 29 00:34:18.732185 systemd[1]: Detected first boot. Oct 29 00:34:18.732196 systemd[1]: Initializing machine ID from VM UUID. Oct 29 00:34:18.732207 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Oct 29 00:34:18.732217 systemd[1]: Populated /etc with preset unit settings. Oct 29 00:34:18.732228 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 29 00:34:18.732240 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 29 00:34:18.732253 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 29 00:34:18.732265 kernel: kauditd_printk_skb: 81 callbacks suppressed Oct 29 00:34:18.732274 kernel: audit: type=1334 audit(1761698058.601:85): prog-id=12 op=LOAD Oct 29 00:34:18.732284 kernel: audit: type=1334 audit(1761698058.601:86): prog-id=3 op=UNLOAD Oct 29 00:34:18.732293 kernel: audit: type=1334 audit(1761698058.602:87): prog-id=13 op=LOAD Oct 29 00:34:18.732303 kernel: audit: type=1334 audit(1761698058.602:88): prog-id=14 op=LOAD Oct 29 00:34:18.732312 kernel: audit: type=1334 audit(1761698058.602:89): prog-id=4 op=UNLOAD Oct 29 00:34:18.732321 kernel: audit: type=1334 audit(1761698058.602:90): prog-id=5 op=UNLOAD Oct 29 00:34:18.732331 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 29 00:34:18.732341 kernel: audit: type=1334 audit(1761698058.603:91): prog-id=15 op=LOAD Oct 29 00:34:18.732352 systemd[1]: Stopped initrd-switch-root.service. Oct 29 00:34:18.732362 kernel: audit: type=1334 audit(1761698058.603:92): prog-id=12 op=UNLOAD Oct 29 00:34:18.732372 kernel: audit: type=1334 audit(1761698058.604:93): prog-id=16 op=LOAD Oct 29 00:34:18.732383 kernel: audit: type=1334 audit(1761698058.605:94): prog-id=17 op=LOAD Oct 29 00:34:18.732394 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 29 00:34:18.732404 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 29 00:34:18.732414 systemd[1]: Created slice system-addon\x2drun.slice. Oct 29 00:34:18.732425 systemd[1]: Created slice system-getty.slice. Oct 29 00:34:18.732451 systemd[1]: Created slice system-modprobe.slice. Oct 29 00:34:18.732463 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 29 00:34:18.732474 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 29 00:34:18.732489 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 29 00:34:18.732500 systemd[1]: Created slice user.slice. Oct 29 00:34:18.732511 systemd[1]: Started systemd-ask-password-console.path. Oct 29 00:34:18.732521 systemd[1]: Started systemd-ask-password-wall.path. Oct 29 00:34:18.732532 systemd[1]: Set up automount boot.automount. Oct 29 00:34:18.732542 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 29 00:34:18.732554 systemd[1]: Stopped target initrd-switch-root.target. Oct 29 00:34:18.732565 systemd[1]: Stopped target initrd-fs.target. Oct 29 00:34:18.732619 systemd[1]: Stopped target initrd-root-fs.target. Oct 29 00:34:18.732634 systemd[1]: Reached target integritysetup.target. Oct 29 00:34:18.732645 systemd[1]: Reached target remote-cryptsetup.target. Oct 29 00:34:18.732656 systemd[1]: Reached target remote-fs.target. Oct 29 00:34:18.732666 systemd[1]: Reached target slices.target. Oct 29 00:34:18.732677 systemd[1]: Reached target swap.target. Oct 29 00:34:18.732688 systemd[1]: Reached target torcx.target. Oct 29 00:34:18.732698 systemd[1]: Reached target veritysetup.target. Oct 29 00:34:18.732711 systemd[1]: Listening on systemd-coredump.socket. Oct 29 00:34:18.732722 systemd[1]: Listening on systemd-initctl.socket. Oct 29 00:34:18.732733 systemd[1]: Listening on systemd-networkd.socket. Oct 29 00:34:18.732744 systemd[1]: Listening on systemd-udevd-control.socket. Oct 29 00:34:18.732754 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 29 00:34:18.732765 systemd[1]: Listening on systemd-userdbd.socket. Oct 29 00:34:18.732775 systemd[1]: Mounting dev-hugepages.mount... Oct 29 00:34:18.732785 systemd[1]: Mounting dev-mqueue.mount... Oct 29 00:34:18.732796 systemd[1]: Mounting media.mount... Oct 29 00:34:18.732807 systemd[1]: Mounting sys-kernel-debug.mount... Oct 29 00:34:18.732818 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 29 00:34:18.732828 systemd[1]: Mounting tmp.mount... Oct 29 00:34:18.732838 systemd[1]: Starting flatcar-tmpfiles.service... Oct 29 00:34:18.732893 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.732910 systemd[1]: Starting kmod-static-nodes.service... Oct 29 00:34:18.732922 systemd[1]: Starting modprobe@configfs.service... Oct 29 00:34:18.732932 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:18.732942 systemd[1]: Starting modprobe@drm.service... Oct 29 00:34:18.732955 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:18.732965 systemd[1]: Starting modprobe@fuse.service... Oct 29 00:34:18.732975 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:18.732987 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 29 00:34:18.732998 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 29 00:34:18.733009 systemd[1]: Stopped systemd-fsck-root.service. Oct 29 00:34:18.733019 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 29 00:34:18.733029 systemd[1]: Stopped systemd-fsck-usr.service. Oct 29 00:34:18.733039 kernel: fuse: init (API version 7.34) Oct 29 00:34:18.733061 systemd[1]: Stopped systemd-journald.service. Oct 29 00:34:18.733073 kernel: loop: module loaded Oct 29 00:34:18.733083 systemd[1]: Starting systemd-journald.service... Oct 29 00:34:18.733093 systemd[1]: Starting systemd-modules-load.service... Oct 29 00:34:18.733105 systemd[1]: Starting systemd-network-generator.service... Oct 29 00:34:18.733115 systemd[1]: Starting systemd-remount-fs.service... Oct 29 00:34:18.733125 systemd[1]: Starting systemd-udev-trigger.service... Oct 29 00:34:18.733135 systemd[1]: verity-setup.service: Deactivated successfully. Oct 29 00:34:18.733146 systemd[1]: Stopped verity-setup.service. Oct 29 00:34:18.733158 systemd[1]: Mounted dev-hugepages.mount. Oct 29 00:34:18.733170 systemd-journald[1005]: Journal started Oct 29 00:34:18.733219 systemd-journald[1005]: Runtime Journal (/run/log/journal/294bddbc818d44cdb72a890ac74505c7) is 6.0M, max 48.7M, 42.6M free. Oct 29 00:34:16.756000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 29 00:34:16.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 29 00:34:16.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 29 00:34:16.841000 audit: BPF prog-id=10 op=LOAD Oct 29 00:34:16.841000 audit: BPF prog-id=10 op=UNLOAD Oct 29 00:34:16.841000 audit: BPF prog-id=11 op=LOAD Oct 29 00:34:16.841000 audit: BPF prog-id=11 op=UNLOAD Oct 29 00:34:16.881000 audit[935]: AVC avc: denied { associate } for pid=935 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Oct 29 00:34:16.881000 audit[935]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=918 pid=935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:16.881000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Oct 29 00:34:16.882000 audit[935]: AVC avc: denied { associate } for pid=935 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Oct 29 00:34:16.882000 audit[935]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5975 a2=1ed a3=0 items=2 ppid=918 pid=935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:16.882000 audit: CWD cwd="/" Oct 29 00:34:16.882000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:34:16.882000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:34:16.882000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Oct 29 00:34:18.601000 audit: BPF prog-id=12 op=LOAD Oct 29 00:34:18.601000 audit: BPF prog-id=3 op=UNLOAD Oct 29 00:34:18.602000 audit: BPF prog-id=13 op=LOAD Oct 29 00:34:18.602000 audit: BPF prog-id=14 op=LOAD Oct 29 00:34:18.602000 audit: BPF prog-id=4 op=UNLOAD Oct 29 00:34:18.602000 audit: BPF prog-id=5 op=UNLOAD Oct 29 00:34:18.603000 audit: BPF prog-id=15 op=LOAD Oct 29 00:34:18.603000 audit: BPF prog-id=12 op=UNLOAD Oct 29 00:34:18.604000 audit: BPF prog-id=16 op=LOAD Oct 29 00:34:18.605000 audit: BPF prog-id=17 op=LOAD Oct 29 00:34:18.605000 audit: BPF prog-id=13 op=UNLOAD Oct 29 00:34:18.605000 audit: BPF prog-id=14 op=UNLOAD Oct 29 00:34:18.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.627000 audit: BPF prog-id=15 op=UNLOAD Oct 29 00:34:18.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.713000 audit: BPF prog-id=18 op=LOAD Oct 29 00:34:18.713000 audit: BPF prog-id=19 op=LOAD Oct 29 00:34:18.713000 audit: BPF prog-id=20 op=LOAD Oct 29 00:34:18.713000 audit: BPF prog-id=16 op=UNLOAD Oct 29 00:34:18.713000 audit: BPF prog-id=17 op=UNLOAD Oct 29 00:34:18.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.730000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 29 00:34:18.730000 audit[1005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffe193a820 a2=4000 a3=1 items=0 ppid=1 pid=1005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:18.730000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 29 00:34:18.600570 systemd[1]: Queued start job for default target multi-user.target. Oct 29 00:34:16.879624 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 29 00:34:18.600582 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 29 00:34:16.879901 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 29 00:34:18.606847 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 29 00:34:16.879920 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 29 00:34:16.879952 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 29 00:34:16.879962 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 29 00:34:16.879990 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 29 00:34:16.880002 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 29 00:34:16.880211 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 29 00:34:16.880247 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 29 00:34:16.880259 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 29 00:34:16.881059 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 29 00:34:18.735442 systemd[1]: Started systemd-journald.service. Oct 29 00:34:16.881104 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 29 00:34:18.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:16.881122 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Oct 29 00:34:16.881136 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 29 00:34:16.881153 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Oct 29 00:34:16.881168 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:16Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 29 00:34:18.330096 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:18Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 29 00:34:18.330374 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:18Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 29 00:34:18.735939 systemd[1]: Mounted dev-mqueue.mount. Oct 29 00:34:18.330554 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:18Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 29 00:34:18.330722 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:18Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 29 00:34:18.330777 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:18Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 29 00:34:18.330836 /usr/lib/systemd/system-generators/torcx-generator[935]: time="2025-10-29T00:34:18Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 29 00:34:18.736796 systemd[1]: Mounted media.mount. Oct 29 00:34:18.737553 systemd[1]: Mounted sys-kernel-debug.mount. Oct 29 00:34:18.738374 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 29 00:34:18.739302 systemd[1]: Mounted tmp.mount. Oct 29 00:34:18.743621 systemd[1]: Finished kmod-static-nodes.service. Oct 29 00:34:18.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.744668 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 29 00:34:18.744815 systemd[1]: Finished modprobe@configfs.service. Oct 29 00:34:18.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.745940 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:18.746092 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:18.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.747164 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 29 00:34:18.747319 systemd[1]: Finished modprobe@drm.service. Oct 29 00:34:18.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.748418 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:18.748575 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:18.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.749770 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 29 00:34:18.749906 systemd[1]: Finished modprobe@fuse.service. Oct 29 00:34:18.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.750934 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:18.751083 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:18.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.752242 systemd[1]: Finished systemd-modules-load.service. Oct 29 00:34:18.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.753411 systemd[1]: Finished systemd-network-generator.service. Oct 29 00:34:18.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.754686 systemd[1]: Finished flatcar-tmpfiles.service. Oct 29 00:34:18.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.755845 systemd[1]: Finished systemd-remount-fs.service. Oct 29 00:34:18.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.757133 systemd[1]: Reached target network-pre.target. Oct 29 00:34:18.760149 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 29 00:34:18.762108 systemd[1]: Mounting sys-kernel-config.mount... Oct 29 00:34:18.762866 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 29 00:34:18.764348 systemd[1]: Starting systemd-hwdb-update.service... Oct 29 00:34:18.766157 systemd[1]: Starting systemd-journal-flush.service... Oct 29 00:34:18.767048 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 29 00:34:18.768138 systemd[1]: Starting systemd-random-seed.service... Oct 29 00:34:18.769013 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 29 00:34:18.769988 systemd[1]: Starting systemd-sysctl.service... Oct 29 00:34:18.771829 systemd-journald[1005]: Time spent on flushing to /var/log/journal/294bddbc818d44cdb72a890ac74505c7 is 12.505ms for 996 entries. Oct 29 00:34:18.771829 systemd-journald[1005]: System Journal (/var/log/journal/294bddbc818d44cdb72a890ac74505c7) is 8.0M, max 195.6M, 187.6M free. Oct 29 00:34:18.798478 systemd-journald[1005]: Received client request to flush runtime journal. Oct 29 00:34:18.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.771896 systemd[1]: Starting systemd-sysusers.service... Oct 29 00:34:18.775854 systemd[1]: Finished systemd-udev-trigger.service. Oct 29 00:34:18.799075 udevadm[1035]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 29 00:34:18.777173 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 29 00:34:18.778172 systemd[1]: Mounted sys-kernel-config.mount. Oct 29 00:34:18.780004 systemd[1]: Starting systemd-udev-settle.service... Oct 29 00:34:18.781728 systemd[1]: Finished systemd-random-seed.service. Oct 29 00:34:18.782930 systemd[1]: Reached target first-boot-complete.target. Oct 29 00:34:18.791029 systemd[1]: Finished systemd-sysctl.service. Oct 29 00:34:18.792224 systemd[1]: Finished systemd-sysusers.service. Oct 29 00:34:18.794314 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 29 00:34:18.800651 systemd[1]: Finished systemd-journal-flush.service. Oct 29 00:34:18.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:18.814399 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 29 00:34:18.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.154653 systemd[1]: Finished systemd-hwdb-update.service. Oct 29 00:34:19.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.155000 audit: BPF prog-id=21 op=LOAD Oct 29 00:34:19.155000 audit: BPF prog-id=22 op=LOAD Oct 29 00:34:19.155000 audit: BPF prog-id=7 op=UNLOAD Oct 29 00:34:19.155000 audit: BPF prog-id=8 op=UNLOAD Oct 29 00:34:19.156783 systemd[1]: Starting systemd-udevd.service... Oct 29 00:34:19.171353 systemd-udevd[1041]: Using default interface naming scheme 'v252'. Oct 29 00:34:19.183357 systemd[1]: Started systemd-udevd.service. Oct 29 00:34:19.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.187000 audit: BPF prog-id=23 op=LOAD Oct 29 00:34:19.190112 systemd[1]: Starting systemd-networkd.service... Oct 29 00:34:19.194000 audit: BPF prog-id=24 op=LOAD Oct 29 00:34:19.194000 audit: BPF prog-id=25 op=LOAD Oct 29 00:34:19.194000 audit: BPF prog-id=26 op=LOAD Oct 29 00:34:19.195285 systemd[1]: Starting systemd-userdbd.service... Oct 29 00:34:19.203573 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 29 00:34:19.248423 systemd[1]: Started systemd-userdbd.service. Oct 29 00:34:19.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.258490 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 29 00:34:19.295530 systemd-networkd[1059]: lo: Link UP Oct 29 00:34:19.295543 systemd-networkd[1059]: lo: Gained carrier Oct 29 00:34:19.295913 systemd-networkd[1059]: Enumeration completed Oct 29 00:34:19.296014 systemd[1]: Started systemd-networkd.service. Oct 29 00:34:19.296019 systemd-networkd[1059]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 29 00:34:19.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.298875 systemd-networkd[1059]: eth0: Link UP Oct 29 00:34:19.298888 systemd-networkd[1059]: eth0: Gained carrier Oct 29 00:34:19.303831 systemd[1]: Finished systemd-udev-settle.service. Oct 29 00:34:19.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.305879 systemd[1]: Starting lvm2-activation-early.service... Oct 29 00:34:19.314573 systemd-networkd[1059]: eth0: DHCPv4 address 10.0.0.79/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 29 00:34:19.315121 lvm[1074]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 29 00:34:19.345308 systemd[1]: Finished lvm2-activation-early.service. Oct 29 00:34:19.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.346354 systemd[1]: Reached target cryptsetup.target. Oct 29 00:34:19.348279 systemd[1]: Starting lvm2-activation.service... Oct 29 00:34:19.351947 lvm[1075]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 29 00:34:19.376445 systemd[1]: Finished lvm2-activation.service. Oct 29 00:34:19.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.377388 systemd[1]: Reached target local-fs-pre.target. Oct 29 00:34:19.378327 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 29 00:34:19.378358 systemd[1]: Reached target local-fs.target. Oct 29 00:34:19.379180 systemd[1]: Reached target machines.target. Oct 29 00:34:19.381275 systemd[1]: Starting ldconfig.service... Oct 29 00:34:19.382696 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.382770 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:19.384158 systemd[1]: Starting systemd-boot-update.service... Oct 29 00:34:19.386222 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 29 00:34:19.388501 systemd[1]: Starting systemd-machine-id-commit.service... Oct 29 00:34:19.390596 systemd[1]: Starting systemd-sysext.service... Oct 29 00:34:19.391630 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1077 (bootctl) Oct 29 00:34:19.392694 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 29 00:34:19.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.398261 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 29 00:34:19.405606 systemd[1]: Unmounting usr-share-oem.mount... Oct 29 00:34:19.412817 systemd[1]: usr-share-oem.mount: Deactivated successfully. Oct 29 00:34:19.413003 systemd[1]: Unmounted usr-share-oem.mount. Oct 29 00:34:19.425463 kernel: loop0: detected capacity change from 0 to 207008 Oct 29 00:34:19.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.467380 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 29 00:34:19.468042 systemd[1]: Finished systemd-machine-id-commit.service. Oct 29 00:34:19.471672 systemd-fsck[1085]: fsck.fat 4.2 (2021-01-31) Oct 29 00:34:19.471672 systemd-fsck[1085]: /dev/vda1: 236 files, 117310/258078 clusters Oct 29 00:34:19.475439 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 29 00:34:19.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.480467 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Oct 29 00:34:19.480769 systemd[1]: Mounting boot.mount... Oct 29 00:34:19.489718 systemd[1]: Mounted boot.mount. Oct 29 00:34:19.498797 systemd[1]: Finished systemd-boot-update.service. Oct 29 00:34:19.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.507449 kernel: loop1: detected capacity change from 0 to 207008 Oct 29 00:34:19.513516 (sd-sysext)[1092]: Using extensions 'kubernetes'. Oct 29 00:34:19.513866 (sd-sysext)[1092]: Merged extensions into '/usr'. Oct 29 00:34:19.535915 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.537290 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:19.539318 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:19.541202 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:19.542072 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.542205 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:19.542962 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:19.543094 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:19.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.544503 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:19.544610 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:19.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.545000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.546056 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:19.546176 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:19.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.547690 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 29 00:34:19.547790 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.601962 ldconfig[1076]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 29 00:34:19.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.606232 systemd[1]: Finished ldconfig.service. Oct 29 00:34:19.733672 systemd[1]: Mounting usr-share-oem.mount... Oct 29 00:34:19.738498 systemd[1]: Mounted usr-share-oem.mount. Oct 29 00:34:19.740419 systemd[1]: Finished systemd-sysext.service. Oct 29 00:34:19.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.742390 systemd[1]: Starting ensure-sysext.service... Oct 29 00:34:19.744074 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 29 00:34:19.748475 systemd[1]: Reloading. Oct 29 00:34:19.755034 systemd-tmpfiles[1099]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 29 00:34:19.756354 systemd-tmpfiles[1099]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 29 00:34:19.757820 systemd-tmpfiles[1099]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 29 00:34:19.796668 /usr/lib/systemd/system-generators/torcx-generator[1125]: time="2025-10-29T00:34:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 29 00:34:19.796979 /usr/lib/systemd/system-generators/torcx-generator[1125]: time="2025-10-29T00:34:19Z" level=info msg="torcx already run" Oct 29 00:34:19.852987 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 29 00:34:19.853009 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 29 00:34:19.868887 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 29 00:34:19.911000 audit: BPF prog-id=27 op=LOAD Oct 29 00:34:19.911000 audit: BPF prog-id=18 op=UNLOAD Oct 29 00:34:19.911000 audit: BPF prog-id=28 op=LOAD Oct 29 00:34:19.911000 audit: BPF prog-id=29 op=LOAD Oct 29 00:34:19.911000 audit: BPF prog-id=19 op=UNLOAD Oct 29 00:34:19.911000 audit: BPF prog-id=20 op=UNLOAD Oct 29 00:34:19.912000 audit: BPF prog-id=30 op=LOAD Oct 29 00:34:19.912000 audit: BPF prog-id=31 op=LOAD Oct 29 00:34:19.912000 audit: BPF prog-id=21 op=UNLOAD Oct 29 00:34:19.912000 audit: BPF prog-id=22 op=UNLOAD Oct 29 00:34:19.913000 audit: BPF prog-id=32 op=LOAD Oct 29 00:34:19.913000 audit: BPF prog-id=23 op=UNLOAD Oct 29 00:34:19.913000 audit: BPF prog-id=33 op=LOAD Oct 29 00:34:19.913000 audit: BPF prog-id=24 op=UNLOAD Oct 29 00:34:19.914000 audit: BPF prog-id=34 op=LOAD Oct 29 00:34:19.914000 audit: BPF prog-id=35 op=LOAD Oct 29 00:34:19.914000 audit: BPF prog-id=25 op=UNLOAD Oct 29 00:34:19.914000 audit: BPF prog-id=26 op=UNLOAD Oct 29 00:34:19.916818 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 29 00:34:19.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.921294 systemd[1]: Starting audit-rules.service... Oct 29 00:34:19.923245 systemd[1]: Starting clean-ca-certificates.service... Oct 29 00:34:19.925405 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 29 00:34:19.926000 audit: BPF prog-id=36 op=LOAD Oct 29 00:34:19.928003 systemd[1]: Starting systemd-resolved.service... Oct 29 00:34:19.929000 audit: BPF prog-id=37 op=LOAD Oct 29 00:34:19.930225 systemd[1]: Starting systemd-timesyncd.service... Oct 29 00:34:19.932192 systemd[1]: Starting systemd-update-utmp.service... Oct 29 00:34:19.933525 systemd[1]: Finished clean-ca-certificates.service. Oct 29 00:34:19.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.937353 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 29 00:34:19.941201 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.942629 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:19.942000 audit[1169]: SYSTEM_BOOT pid=1169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.944634 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:19.946638 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:19.947483 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.947623 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:19.947755 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 29 00:34:19.948567 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:19.948705 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:19.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.949991 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:19.950126 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:19.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.951602 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 29 00:34:19.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.953178 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:19.953308 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:19.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.956202 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 29 00:34:19.956347 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.957897 systemd[1]: Starting systemd-update-done.service... Oct 29 00:34:19.959424 systemd[1]: Finished systemd-update-utmp.service. Oct 29 00:34:19.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.962647 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.964198 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:19.966369 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:19.968448 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:19.969291 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.969450 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:19.969546 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 29 00:34:19.970372 systemd[1]: Finished systemd-update-done.service. Oct 29 00:34:19.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.971994 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:19.972127 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:19.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.973560 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:19.973681 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:19.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.975153 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:19.975274 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:19.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:19.978798 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.980201 systemd[1]: Starting modprobe@dm_mod.service... Oct 29 00:34:19.982256 systemd[1]: Starting modprobe@drm.service... Oct 29 00:34:19.984243 systemd[1]: Starting modprobe@efi_pstore.service... Oct 29 00:34:19.986250 systemd[1]: Starting modprobe@loop.service... Oct 29 00:34:19.985000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 29 00:34:19.985000 audit[1185]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe9b83b10 a2=420 a3=0 items=0 ppid=1158 pid=1185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:19.985000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 29 00:34:19.986769 augenrules[1185]: No rules Oct 29 00:34:19.987269 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 29 00:34:19.987406 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:19.988679 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 29 00:34:19.989832 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 29 00:34:19.990926 systemd[1]: Finished audit-rules.service. Oct 29 00:34:19.992187 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 29 00:34:19.992311 systemd[1]: Finished modprobe@dm_mod.service. Oct 29 00:34:19.993717 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 29 00:34:19.993834 systemd[1]: Finished modprobe@drm.service. Oct 29 00:34:19.995109 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 29 00:34:19.995226 systemd[1]: Finished modprobe@efi_pstore.service. Oct 29 00:34:19.995991 systemd-resolved[1162]: Positive Trust Anchors: Oct 29 00:34:19.996003 systemd-resolved[1162]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 29 00:34:19.996028 systemd-resolved[1162]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 29 00:34:19.996166 systemd-timesyncd[1163]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 29 00:34:19.996216 systemd-timesyncd[1163]: Initial clock synchronization to Wed 2025-10-29 00:34:20.159692 UTC. Oct 29 00:34:19.996645 systemd[1]: Started systemd-timesyncd.service. Oct 29 00:34:19.998457 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 29 00:34:19.998610 systemd[1]: Finished modprobe@loop.service. Oct 29 00:34:20.000189 systemd[1]: Reached target time-set.target. Oct 29 00:34:20.001242 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 29 00:34:20.001288 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 29 00:34:20.001608 systemd[1]: Finished ensure-sysext.service. Oct 29 00:34:20.006523 systemd-resolved[1162]: Defaulting to hostname 'linux'. Oct 29 00:34:20.008013 systemd[1]: Started systemd-resolved.service. Oct 29 00:34:20.009031 systemd[1]: Reached target network.target. Oct 29 00:34:20.009856 systemd[1]: Reached target nss-lookup.target. Oct 29 00:34:20.010660 systemd[1]: Reached target sysinit.target. Oct 29 00:34:20.011504 systemd[1]: Started motdgen.path. Oct 29 00:34:20.012201 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 29 00:34:20.013513 systemd[1]: Started logrotate.timer. Oct 29 00:34:20.014385 systemd[1]: Started mdadm.timer. Oct 29 00:34:20.015131 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 29 00:34:20.016049 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 29 00:34:20.016083 systemd[1]: Reached target paths.target. Oct 29 00:34:20.016955 systemd[1]: Reached target timers.target. Oct 29 00:34:20.018080 systemd[1]: Listening on dbus.socket. Oct 29 00:34:20.019912 systemd[1]: Starting docker.socket... Oct 29 00:34:20.023255 systemd[1]: Listening on sshd.socket. Oct 29 00:34:20.024206 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:20.024664 systemd[1]: Listening on docker.socket. Oct 29 00:34:20.025521 systemd[1]: Reached target sockets.target. Oct 29 00:34:20.026326 systemd[1]: Reached target basic.target. Oct 29 00:34:20.027334 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 29 00:34:20.027370 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 29 00:34:20.028323 systemd[1]: Starting containerd.service... Oct 29 00:34:20.030185 systemd[1]: Starting dbus.service... Oct 29 00:34:20.031974 systemd[1]: Starting enable-oem-cloudinit.service... Oct 29 00:34:20.033936 systemd[1]: Starting extend-filesystems.service... Oct 29 00:34:20.034898 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 29 00:34:20.036009 systemd[1]: Starting motdgen.service... Oct 29 00:34:20.037360 jq[1200]: false Oct 29 00:34:20.037883 systemd[1]: Starting prepare-helm.service... Oct 29 00:34:20.039556 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 29 00:34:20.041506 systemd[1]: Starting sshd-keygen.service... Oct 29 00:34:20.044329 systemd[1]: Starting systemd-logind.service... Oct 29 00:34:20.045326 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 29 00:34:20.045428 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 29 00:34:20.045920 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 29 00:34:20.047190 systemd[1]: Starting update-engine.service... Oct 29 00:34:20.049901 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 29 00:34:20.052441 jq[1219]: true Oct 29 00:34:20.053869 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 29 00:34:20.054055 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 29 00:34:20.055175 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 29 00:34:20.055341 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 29 00:34:20.060857 extend-filesystems[1201]: Found loop1 Oct 29 00:34:20.060857 extend-filesystems[1201]: Found vda Oct 29 00:34:20.060857 extend-filesystems[1201]: Found vda1 Oct 29 00:34:20.060857 extend-filesystems[1201]: Found vda2 Oct 29 00:34:20.060698 systemd[1]: motdgen.service: Deactivated successfully. Oct 29 00:34:20.068415 tar[1221]: linux-arm64/LICENSE Oct 29 00:34:20.068415 tar[1221]: linux-arm64/helm Oct 29 00:34:20.068642 extend-filesystems[1201]: Found vda3 Oct 29 00:34:20.068642 extend-filesystems[1201]: Found usr Oct 29 00:34:20.068642 extend-filesystems[1201]: Found vda4 Oct 29 00:34:20.068642 extend-filesystems[1201]: Found vda6 Oct 29 00:34:20.068642 extend-filesystems[1201]: Found vda7 Oct 29 00:34:20.068642 extend-filesystems[1201]: Found vda9 Oct 29 00:34:20.068642 extend-filesystems[1201]: Checking size of /dev/vda9 Oct 29 00:34:20.082865 jq[1222]: true Oct 29 00:34:20.060847 systemd[1]: Finished motdgen.service. Oct 29 00:34:20.108463 extend-filesystems[1201]: Resized partition /dev/vda9 Oct 29 00:34:20.119004 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Oct 29 00:34:20.102595 systemd[1]: Started dbus.service. Oct 29 00:34:20.102406 dbus-daemon[1199]: [system] SELinux support is enabled Oct 29 00:34:20.119297 bash[1246]: Updated "/home/core/.ssh/authorized_keys" Oct 29 00:34:20.119365 extend-filesystems[1250]: resize2fs 1.46.5 (30-Dec-2021) Oct 29 00:34:20.105118 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 29 00:34:20.136522 update_engine[1214]: I1029 00:34:20.123411 1214 main.cc:92] Flatcar Update Engine starting Oct 29 00:34:20.136522 update_engine[1214]: I1029 00:34:20.125926 1214 update_check_scheduler.cc:74] Next update check in 5m23s Oct 29 00:34:20.105154 systemd[1]: Reached target system-config.target. Oct 29 00:34:20.108151 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 29 00:34:20.108168 systemd[1]: Reached target user-config.target. Oct 29 00:34:20.108534 systemd-logind[1211]: Watching system buttons on /dev/input/event0 (Power Button) Oct 29 00:34:20.108888 systemd-logind[1211]: New seat seat0. Oct 29 00:34:20.135888 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 29 00:34:20.138746 systemd[1]: Started update-engine.service. Oct 29 00:34:20.141366 systemd[1]: Started locksmithd.service. Oct 29 00:34:20.144310 systemd[1]: Started systemd-logind.service. Oct 29 00:34:20.144469 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Oct 29 00:34:20.160876 extend-filesystems[1250]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Oct 29 00:34:20.160876 extend-filesystems[1250]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 29 00:34:20.160876 extend-filesystems[1250]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Oct 29 00:34:20.164914 extend-filesystems[1201]: Resized filesystem in /dev/vda9 Oct 29 00:34:20.163901 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 29 00:34:20.164052 systemd[1]: Finished extend-filesystems.service. Oct 29 00:34:20.166566 env[1223]: time="2025-10-29T00:34:20.166430307Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 29 00:34:20.208903 env[1223]: time="2025-10-29T00:34:20.208852685Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 29 00:34:20.209113 env[1223]: time="2025-10-29T00:34:20.209088327Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.217683877Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.217718287Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.217942623Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.217960746Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.217974257Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.217983808Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.218059117Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.218385417Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.218536403Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 29 00:34:20.218773 env[1223]: time="2025-10-29T00:34:20.218553628Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 29 00:34:20.219070 env[1223]: time="2025-10-29T00:34:20.218609059Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 29 00:34:20.219070 env[1223]: time="2025-10-29T00:34:20.218621754Z" level=info msg="metadata content store policy set" policy=shared Oct 29 00:34:20.230840 locksmithd[1251]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.231810886Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.231853460Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.231904278Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.231941504Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.231967383Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.231982363Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.231995058Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.232379441Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.232410790Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.232426056Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.232458751Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 29 00:34:20.232462 env[1223]: time="2025-10-29T00:34:20.232473241Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 29 00:34:20.232776 env[1223]: time="2025-10-29T00:34:20.232626799Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 29 00:34:20.232776 env[1223]: time="2025-10-29T00:34:20.232733130Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 29 00:34:20.233026 env[1223]: time="2025-10-29T00:34:20.232999917Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 29 00:34:20.233065 env[1223]: time="2025-10-29T00:34:20.233044817Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233065 env[1223]: time="2025-10-29T00:34:20.233060042Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 29 00:34:20.233189 env[1223]: time="2025-10-29T00:34:20.233173924Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233227 env[1223]: time="2025-10-29T00:34:20.233191435Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233227 env[1223]: time="2025-10-29T00:34:20.233203966Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233227 env[1223]: time="2025-10-29T00:34:20.233215150Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233285 env[1223]: time="2025-10-29T00:34:20.233236457Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233285 env[1223]: time="2025-10-29T00:34:20.233250540Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233285 env[1223]: time="2025-10-29T00:34:20.233261846Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233285 env[1223]: time="2025-10-29T00:34:20.233273847Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233378 env[1223]: time="2025-10-29T00:34:20.233338952Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 29 00:34:20.233584 env[1223]: time="2025-10-29T00:34:20.233494468Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233584 env[1223]: time="2025-10-29T00:34:20.233533572Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233584 env[1223]: time="2025-10-29T00:34:20.233546879Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233584 env[1223]: time="2025-10-29T00:34:20.233558838Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 29 00:34:20.233584 env[1223]: time="2025-10-29T00:34:20.233574431Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 29 00:34:20.233584 env[1223]: time="2025-10-29T00:34:20.233586064Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 29 00:34:20.233759 env[1223]: time="2025-10-29T00:34:20.233611004Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 29 00:34:20.233759 env[1223]: time="2025-10-29T00:34:20.233645903Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 29 00:34:20.233924 env[1223]: time="2025-10-29T00:34:20.233862851Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 29 00:34:20.234640 env[1223]: time="2025-10-29T00:34:20.233929671Z" level=info msg="Connect containerd service" Oct 29 00:34:20.234640 env[1223]: time="2025-10-29T00:34:20.233960039Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 29 00:34:20.234819 env[1223]: time="2025-10-29T00:34:20.234789462Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 29 00:34:20.235022 env[1223]: time="2025-10-29T00:34:20.234990777Z" level=info msg="Start subscribing containerd event" Oct 29 00:34:20.235064 env[1223]: time="2025-10-29T00:34:20.235040004Z" level=info msg="Start recovering state" Oct 29 00:34:20.235126 env[1223]: time="2025-10-29T00:34:20.235106864Z" level=info msg="Start event monitor" Oct 29 00:34:20.235173 env[1223]: time="2025-10-29T00:34:20.235130456Z" level=info msg="Start snapshots syncer" Oct 29 00:34:20.235203 env[1223]: time="2025-10-29T00:34:20.235173234Z" level=info msg="Start cni network conf syncer for default" Oct 29 00:34:20.235203 env[1223]: time="2025-10-29T00:34:20.235182704Z" level=info msg="Start streaming server" Oct 29 00:34:20.235634 env[1223]: time="2025-10-29T00:34:20.235610681Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 29 00:34:20.235735 env[1223]: time="2025-10-29T00:34:20.235722073Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 29 00:34:20.235816 env[1223]: time="2025-10-29T00:34:20.235786892Z" level=info msg="containerd successfully booted in 0.078978s" Oct 29 00:34:20.235860 systemd[1]: Started containerd.service. Oct 29 00:34:20.483666 tar[1221]: linux-arm64/README.md Oct 29 00:34:20.488148 systemd[1]: Finished prepare-helm.service. Oct 29 00:34:21.014088 systemd-networkd[1059]: eth0: Gained IPv6LL Oct 29 00:34:21.016370 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 29 00:34:21.017776 systemd[1]: Reached target network-online.target. Oct 29 00:34:21.020133 systemd[1]: Starting kubelet.service... Oct 29 00:34:21.660691 systemd[1]: Started kubelet.service. Oct 29 00:34:22.088858 kubelet[1267]: E1029 00:34:22.088741 1267 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 29 00:34:22.093634 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 29 00:34:22.093766 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 29 00:34:22.427354 sshd_keygen[1215]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 29 00:34:22.445005 systemd[1]: Finished sshd-keygen.service. Oct 29 00:34:22.447271 systemd[1]: Starting issuegen.service... Oct 29 00:34:22.452547 systemd[1]: issuegen.service: Deactivated successfully. Oct 29 00:34:22.452706 systemd[1]: Finished issuegen.service. Oct 29 00:34:22.455026 systemd[1]: Starting systemd-user-sessions.service... Oct 29 00:34:22.461909 systemd[1]: Finished systemd-user-sessions.service. Oct 29 00:34:22.464279 systemd[1]: Started getty@tty1.service. Oct 29 00:34:22.466592 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 29 00:34:22.467714 systemd[1]: Reached target getty.target. Oct 29 00:34:22.468576 systemd[1]: Reached target multi-user.target. Oct 29 00:34:22.470675 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 29 00:34:22.477790 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 29 00:34:22.477953 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 29 00:34:22.479062 systemd[1]: Startup finished in 599ms (kernel) + 4.158s (initrd) + 5.762s (userspace) = 10.520s. Oct 29 00:34:25.140053 systemd[1]: Created slice system-sshd.slice. Oct 29 00:34:25.141477 systemd[1]: Started sshd@0-10.0.0.79:22-10.0.0.1:39864.service. Oct 29 00:34:25.204502 sshd[1289]: Accepted publickey for core from 10.0.0.1 port 39864 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:25.207369 sshd[1289]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:25.216797 systemd[1]: Created slice user-500.slice. Oct 29 00:34:25.218087 systemd[1]: Starting user-runtime-dir@500.service... Oct 29 00:34:25.220758 systemd-logind[1211]: New session 1 of user core. Oct 29 00:34:25.228286 systemd[1]: Finished user-runtime-dir@500.service. Oct 29 00:34:25.230266 systemd[1]: Starting user@500.service... Oct 29 00:34:25.233965 (systemd)[1292]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:25.310803 systemd[1292]: Queued start job for default target default.target. Oct 29 00:34:25.311330 systemd[1292]: Reached target paths.target. Oct 29 00:34:25.311362 systemd[1292]: Reached target sockets.target. Oct 29 00:34:25.311373 systemd[1292]: Reached target timers.target. Oct 29 00:34:25.311383 systemd[1292]: Reached target basic.target. Oct 29 00:34:25.311422 systemd[1292]: Reached target default.target. Oct 29 00:34:25.311467 systemd[1292]: Startup finished in 69ms. Oct 29 00:34:25.312022 systemd[1]: Started user@500.service. Oct 29 00:34:25.312988 systemd[1]: Started session-1.scope. Oct 29 00:34:25.366959 systemd[1]: Started sshd@1-10.0.0.79:22-10.0.0.1:39878.service. Oct 29 00:34:25.415454 sshd[1301]: Accepted publickey for core from 10.0.0.1 port 39878 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:25.417711 sshd[1301]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:25.421929 systemd-logind[1211]: New session 2 of user core. Oct 29 00:34:25.423045 systemd[1]: Started session-2.scope. Oct 29 00:34:25.479663 sshd[1301]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:25.482637 systemd[1]: Started sshd@2-10.0.0.79:22-10.0.0.1:39880.service. Oct 29 00:34:25.483202 systemd[1]: sshd@1-10.0.0.79:22-10.0.0.1:39878.service: Deactivated successfully. Oct 29 00:34:25.483895 systemd[1]: session-2.scope: Deactivated successfully. Oct 29 00:34:25.484420 systemd-logind[1211]: Session 2 logged out. Waiting for processes to exit. Oct 29 00:34:25.485369 systemd-logind[1211]: Removed session 2. Oct 29 00:34:25.527199 sshd[1306]: Accepted publickey for core from 10.0.0.1 port 39880 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:25.528545 sshd[1306]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:25.532115 systemd-logind[1211]: New session 3 of user core. Oct 29 00:34:25.532958 systemd[1]: Started session-3.scope. Oct 29 00:34:25.583463 sshd[1306]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:25.587382 systemd[1]: Started sshd@3-10.0.0.79:22-10.0.0.1:39888.service. Oct 29 00:34:25.587922 systemd[1]: sshd@2-10.0.0.79:22-10.0.0.1:39880.service: Deactivated successfully. Oct 29 00:34:25.588566 systemd[1]: session-3.scope: Deactivated successfully. Oct 29 00:34:25.589137 systemd-logind[1211]: Session 3 logged out. Waiting for processes to exit. Oct 29 00:34:25.590101 systemd-logind[1211]: Removed session 3. Oct 29 00:34:25.636332 sshd[1312]: Accepted publickey for core from 10.0.0.1 port 39888 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:25.638021 sshd[1312]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:25.641699 systemd-logind[1211]: New session 4 of user core. Oct 29 00:34:25.642551 systemd[1]: Started session-4.scope. Oct 29 00:34:25.697985 sshd[1312]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:25.701331 systemd[1]: Started sshd@4-10.0.0.79:22-10.0.0.1:39894.service. Oct 29 00:34:25.701879 systemd[1]: sshd@3-10.0.0.79:22-10.0.0.1:39888.service: Deactivated successfully. Oct 29 00:34:25.702512 systemd[1]: session-4.scope: Deactivated successfully. Oct 29 00:34:25.703048 systemd-logind[1211]: Session 4 logged out. Waiting for processes to exit. Oct 29 00:34:25.704123 systemd-logind[1211]: Removed session 4. Oct 29 00:34:25.745651 sshd[1318]: Accepted publickey for core from 10.0.0.1 port 39894 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:25.747714 sshd[1318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:25.751057 systemd-logind[1211]: New session 5 of user core. Oct 29 00:34:25.751874 systemd[1]: Started session-5.scope. Oct 29 00:34:25.810422 sudo[1322]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 29 00:34:25.810668 sudo[1322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 29 00:34:25.819635 dbus-daemon[1199]: avc: received setenforce notice (enforcing=1) Oct 29 00:34:25.820538 sudo[1322]: pam_unix(sudo:session): session closed for user root Oct 29 00:34:25.822832 sshd[1318]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:25.825748 systemd[1]: sshd@4-10.0.0.79:22-10.0.0.1:39894.service: Deactivated successfully. Oct 29 00:34:25.826360 systemd[1]: session-5.scope: Deactivated successfully. Oct 29 00:34:25.826940 systemd-logind[1211]: Session 5 logged out. Waiting for processes to exit. Oct 29 00:34:25.828080 systemd[1]: Started sshd@5-10.0.0.79:22-10.0.0.1:39898.service. Oct 29 00:34:25.828730 systemd-logind[1211]: Removed session 5. Oct 29 00:34:25.873934 sshd[1326]: Accepted publickey for core from 10.0.0.1 port 39898 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:25.875749 sshd[1326]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:25.879112 systemd-logind[1211]: New session 6 of user core. Oct 29 00:34:25.879965 systemd[1]: Started session-6.scope. Oct 29 00:34:25.932933 sudo[1330]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 29 00:34:25.933167 sudo[1330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 29 00:34:25.936906 sudo[1330]: pam_unix(sudo:session): session closed for user root Oct 29 00:34:25.942282 sudo[1329]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 29 00:34:25.942608 sudo[1329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 29 00:34:25.953639 systemd[1]: Stopping audit-rules.service... Oct 29 00:34:25.953000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 29 00:34:25.955956 kernel: kauditd_printk_skb: 111 callbacks suppressed Oct 29 00:34:25.956000 kernel: audit: type=1305 audit(1761698065.953:202): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 29 00:34:25.956708 auditctl[1333]: No rules Oct 29 00:34:25.957017 systemd[1]: audit-rules.service: Deactivated successfully. Oct 29 00:34:25.957187 systemd[1]: Stopped audit-rules.service. Oct 29 00:34:25.966466 kernel: audit: type=1300 audit(1761698065.953:202): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd57f0e70 a2=420 a3=0 items=0 ppid=1 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.966587 kernel: audit: type=1327 audit(1761698065.953:202): proctitle=2F7362696E2F617564697463746C002D44 Oct 29 00:34:25.966604 kernel: audit: type=1131 audit(1761698065.956:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.953000 audit[1333]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd57f0e70 a2=420 a3=0 items=0 ppid=1 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:25.953000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 29 00:34:25.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.958769 systemd[1]: Starting audit-rules.service... Oct 29 00:34:25.979880 augenrules[1350]: No rules Oct 29 00:34:25.980609 systemd[1]: Finished audit-rules.service. Oct 29 00:34:25.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.982484 sudo[1329]: pam_unix(sudo:session): session closed for user root Oct 29 00:34:25.981000 audit[1329]: USER_END pid=1329 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.985047 sshd[1326]: pam_unix(sshd:session): session closed for user core Oct 29 00:34:25.988729 kernel: audit: type=1130 audit(1761698065.979:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.988780 kernel: audit: type=1106 audit(1761698065.981:205): pid=1329 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.988816 kernel: audit: type=1104 audit(1761698065.981:206): pid=1329 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.981000 audit[1329]: CRED_DISP pid=1329 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.988372 systemd[1]: Started sshd@6-10.0.0.79:22-10.0.0.1:39910.service. Oct 29 00:34:25.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.79:22-10.0.0.1:39910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.995353 kernel: audit: type=1130 audit(1761698065.986:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.79:22-10.0.0.1:39910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:25.994000 audit[1326]: USER_END pid=1326 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:26.000650 kernel: audit: type=1106 audit(1761698065.994:208): pid=1326 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:25.994000 audit[1326]: CRED_DISP pid=1326 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:26.001046 systemd[1]: sshd@5-10.0.0.79:22-10.0.0.1:39898.service: Deactivated successfully. Oct 29 00:34:26.001783 systemd[1]: session-6.scope: Deactivated successfully. Oct 29 00:34:26.002347 systemd-logind[1211]: Session 6 logged out. Waiting for processes to exit. Oct 29 00:34:26.003097 systemd-logind[1211]: Removed session 6. Oct 29 00:34:26.004576 kernel: audit: type=1104 audit(1761698065.994:209): pid=1326 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:25.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.79:22-10.0.0.1:39898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:26.037000 audit[1355]: USER_ACCT pid=1355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:26.038457 sshd[1355]: Accepted publickey for core from 10.0.0.1 port 39910 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:34:26.038000 audit[1355]: CRED_ACQ pid=1355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:26.039000 audit[1355]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9a4a1b0 a2=3 a3=1 items=0 ppid=1 pid=1355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.039000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:34:26.039763 sshd[1355]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:34:26.043508 systemd-logind[1211]: New session 7 of user core. Oct 29 00:34:26.044688 systemd[1]: Started session-7.scope. Oct 29 00:34:26.048000 audit[1355]: USER_START pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:26.049000 audit[1358]: CRED_ACQ pid=1358 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:34:26.097000 audit[1359]: USER_ACCT pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:26.098000 audit[1359]: CRED_REFR pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:26.099529 sudo[1359]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 29 00:34:26.099866 sudo[1359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 29 00:34:26.100000 audit[1359]: USER_START pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:34:26.149763 systemd[1]: Starting docker.service... Oct 29 00:34:26.214881 env[1371]: time="2025-10-29T00:34:26.214721505Z" level=info msg="Starting up" Oct 29 00:34:26.219944 env[1371]: time="2025-10-29T00:34:26.219909328Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 29 00:34:26.220066 env[1371]: time="2025-10-29T00:34:26.220051905Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 29 00:34:26.220136 env[1371]: time="2025-10-29T00:34:26.220120691Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 29 00:34:26.220188 env[1371]: time="2025-10-29T00:34:26.220175429Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 29 00:34:26.222415 env[1371]: time="2025-10-29T00:34:26.222385651Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 29 00:34:26.222532 env[1371]: time="2025-10-29T00:34:26.222517853Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 29 00:34:26.222612 env[1371]: time="2025-10-29T00:34:26.222596932Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 29 00:34:26.222675 env[1371]: time="2025-10-29T00:34:26.222661964Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 29 00:34:26.403460 env[1371]: time="2025-10-29T00:34:26.403402982Z" level=info msg="Loading containers: start." Oct 29 00:34:26.456000 audit[1405]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.456000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc07bc090 a2=0 a3=1 items=0 ppid=1371 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.456000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 29 00:34:26.457000 audit[1407]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.457000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe9229e40 a2=0 a3=1 items=0 ppid=1371 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.457000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 29 00:34:26.460000 audit[1409]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.460000 audit[1409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffbdd4630 a2=0 a3=1 items=0 ppid=1371 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.460000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 29 00:34:26.462000 audit[1411]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.462000 audit[1411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe70c21b0 a2=0 a3=1 items=0 ppid=1371 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.462000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 29 00:34:26.464000 audit[1413]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.464000 audit[1413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcc30b990 a2=0 a3=1 items=0 ppid=1371 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.464000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 29 00:34:26.495000 audit[1418]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.495000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcb87d670 a2=0 a3=1 items=0 ppid=1371 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.495000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 29 00:34:26.502000 audit[1420]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.502000 audit[1420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc67a4620 a2=0 a3=1 items=0 ppid=1371 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.502000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 29 00:34:26.505000 audit[1422]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.505000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd68c0b70 a2=0 a3=1 items=0 ppid=1371 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.505000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 29 00:34:26.506000 audit[1424]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.506000 audit[1424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe0e65950 a2=0 a3=1 items=0 ppid=1371 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.506000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:26.515000 audit[1428]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.515000 audit[1428]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd70f70b0 a2=0 a3=1 items=0 ppid=1371 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.515000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:26.524000 audit[1429]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.524000 audit[1429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffde7e4d80 a2=0 a3=1 items=0 ppid=1371 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.524000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:26.535477 kernel: Initializing XFRM netlink socket Oct 29 00:34:26.563369 env[1371]: time="2025-10-29T00:34:26.563324525Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 29 00:34:26.579000 audit[1437]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.579000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc9db62e0 a2=0 a3=1 items=0 ppid=1371 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.579000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 29 00:34:26.604000 audit[1440]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.604000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc78b7690 a2=0 a3=1 items=0 ppid=1371 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.604000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 29 00:34:26.607000 audit[1443]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.607000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc0851650 a2=0 a3=1 items=0 ppid=1371 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.607000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 29 00:34:26.609000 audit[1445]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.609000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe0c3b9c0 a2=0 a3=1 items=0 ppid=1371 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.609000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 29 00:34:26.611000 audit[1447]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.611000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffdc5c6b90 a2=0 a3=1 items=0 ppid=1371 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.611000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 29 00:34:26.613000 audit[1449]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.613000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff9c309b0 a2=0 a3=1 items=0 ppid=1371 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.613000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 29 00:34:26.615000 audit[1451]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.615000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd0699f00 a2=0 a3=1 items=0 ppid=1371 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.615000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 29 00:34:26.621000 audit[1454]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.621000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe8cbf5e0 a2=0 a3=1 items=0 ppid=1371 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.621000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 29 00:34:26.623000 audit[1456]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.623000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffeabaeb90 a2=0 a3=1 items=0 ppid=1371 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.623000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 29 00:34:26.625000 audit[1458]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.625000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffdd933430 a2=0 a3=1 items=0 ppid=1371 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.625000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 29 00:34:26.627000 audit[1460]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.627000 audit[1460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff03c0c40 a2=0 a3=1 items=0 ppid=1371 pid=1460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.627000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 29 00:34:26.629582 systemd-networkd[1059]: docker0: Link UP Oct 29 00:34:26.636000 audit[1464]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1464 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.636000 audit[1464]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffea6d08d0 a2=0 a3=1 items=0 ppid=1371 pid=1464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.636000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:26.648000 audit[1465]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1465 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:26.648000 audit[1465]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd87a4a20 a2=0 a3=1 items=0 ppid=1371 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:26.648000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 29 00:34:26.650113 env[1371]: time="2025-10-29T00:34:26.650060761Z" level=info msg="Loading containers: done." Oct 29 00:34:26.668350 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck4082473457-merged.mount: Deactivated successfully. Oct 29 00:34:26.678917 env[1371]: time="2025-10-29T00:34:26.678865059Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 29 00:34:26.679343 env[1371]: time="2025-10-29T00:34:26.679317211Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 29 00:34:26.679599 env[1371]: time="2025-10-29T00:34:26.679581051Z" level=info msg="Daemon has completed initialization" Oct 29 00:34:26.705308 systemd[1]: Started docker.service. Oct 29 00:34:26.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:26.713809 env[1371]: time="2025-10-29T00:34:26.713736377Z" level=info msg="API listen on /run/docker.sock" Oct 29 00:34:27.377319 env[1223]: time="2025-10-29T00:34:27.377266268Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Oct 29 00:34:28.085209 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3129079814.mount: Deactivated successfully. Oct 29 00:34:29.748744 env[1223]: time="2025-10-29T00:34:29.748698480Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:29.751695 env[1223]: time="2025-10-29T00:34:29.751666861Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:29.754706 env[1223]: time="2025-10-29T00:34:29.753970056Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:29.756144 env[1223]: time="2025-10-29T00:34:29.756108042Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:29.757359 env[1223]: time="2025-10-29T00:34:29.757093102Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002\"" Oct 29 00:34:29.758332 env[1223]: time="2025-10-29T00:34:29.758305552Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Oct 29 00:34:31.207522 env[1223]: time="2025-10-29T00:34:31.207472376Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:31.209423 env[1223]: time="2025-10-29T00:34:31.209383451Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:31.212076 env[1223]: time="2025-10-29T00:34:31.212042068Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:31.213074 env[1223]: time="2025-10-29T00:34:31.213047419Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:31.213966 env[1223]: time="2025-10-29T00:34:31.213940644Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b\"" Oct 29 00:34:31.214484 env[1223]: time="2025-10-29T00:34:31.214460360Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Oct 29 00:34:32.353688 kernel: kauditd_printk_skb: 84 callbacks suppressed Oct 29 00:34:32.353792 kernel: audit: type=1130 audit(1761698072.343:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:32.353816 kernel: audit: type=1131 audit(1761698072.343:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:32.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:32.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:32.344646 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 29 00:34:32.344823 systemd[1]: Stopped kubelet.service. Oct 29 00:34:32.346319 systemd[1]: Starting kubelet.service... Oct 29 00:34:32.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:32.451050 systemd[1]: Started kubelet.service. Oct 29 00:34:32.454512 kernel: audit: type=1130 audit(1761698072.449:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:32.494821 kubelet[1507]: E1029 00:34:32.494780 1507 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 29 00:34:32.497000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 29 00:34:32.497343 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 29 00:34:32.497480 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 29 00:34:32.501481 kernel: audit: type=1131 audit(1761698072.497:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 29 00:34:32.695538 env[1223]: time="2025-10-29T00:34:32.695267524Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:32.697279 env[1223]: time="2025-10-29T00:34:32.697251544Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:32.699216 env[1223]: time="2025-10-29T00:34:32.699188731Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:32.701123 env[1223]: time="2025-10-29T00:34:32.701073061Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:32.702048 env[1223]: time="2025-10-29T00:34:32.701941343Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27\"" Oct 29 00:34:32.702650 env[1223]: time="2025-10-29T00:34:32.702428060Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Oct 29 00:34:34.227065 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2115648145.mount: Deactivated successfully. Oct 29 00:34:34.807578 env[1223]: time="2025-10-29T00:34:34.807531407Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:34.809163 env[1223]: time="2025-10-29T00:34:34.809130434Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:34.810686 env[1223]: time="2025-10-29T00:34:34.810657114Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:34.812216 env[1223]: time="2025-10-29T00:34:34.812056192Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:34.812746 env[1223]: time="2025-10-29T00:34:34.812702544Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4\"" Oct 29 00:34:34.814661 env[1223]: time="2025-10-29T00:34:34.814626353Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Oct 29 00:34:35.270407 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3338274423.mount: Deactivated successfully. Oct 29 00:34:36.269474 env[1223]: time="2025-10-29T00:34:36.269382369Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:36.270954 env[1223]: time="2025-10-29T00:34:36.270925085Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:36.272699 env[1223]: time="2025-10-29T00:34:36.272669487Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:36.274588 env[1223]: time="2025-10-29T00:34:36.274556473Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:36.275451 env[1223]: time="2025-10-29T00:34:36.275405197Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Oct 29 00:34:36.275921 env[1223]: time="2025-10-29T00:34:36.275876132Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Oct 29 00:34:36.693390 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3063940719.mount: Deactivated successfully. Oct 29 00:34:36.697855 env[1223]: time="2025-10-29T00:34:36.697799239Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:36.700139 env[1223]: time="2025-10-29T00:34:36.700089636Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:36.702089 env[1223]: time="2025-10-29T00:34:36.702061145Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:36.703995 env[1223]: time="2025-10-29T00:34:36.703956791Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:36.704603 env[1223]: time="2025-10-29T00:34:36.704577406Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Oct 29 00:34:36.705088 env[1223]: time="2025-10-29T00:34:36.705062776Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Oct 29 00:34:37.207227 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2888680303.mount: Deactivated successfully. Oct 29 00:34:40.168388 env[1223]: time="2025-10-29T00:34:40.168318434Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:40.170334 env[1223]: time="2025-10-29T00:34:40.170291823Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:40.172367 env[1223]: time="2025-10-29T00:34:40.172336073Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:40.174374 env[1223]: time="2025-10-29T00:34:40.174346995Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:40.176236 env[1223]: time="2025-10-29T00:34:40.176196689Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Oct 29 00:34:42.748292 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 29 00:34:42.748486 systemd[1]: Stopped kubelet.service. Oct 29 00:34:42.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:42.749815 systemd[1]: Starting kubelet.service... Oct 29 00:34:42.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:42.755618 kernel: audit: type=1130 audit(1761698082.748:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:42.755685 kernel: audit: type=1131 audit(1761698082.748:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:42.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:42.842224 systemd[1]: Started kubelet.service. Oct 29 00:34:42.851101 kernel: audit: type=1130 audit(1761698082.842:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:42.879599 kubelet[1538]: E1029 00:34:42.879541 1538 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 29 00:34:42.881927 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 29 00:34:42.882047 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 29 00:34:42.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 29 00:34:42.887364 kernel: audit: type=1131 audit(1761698082.881:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 29 00:34:45.706153 systemd[1]: Stopped kubelet.service. Oct 29 00:34:45.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:45.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:45.713719 systemd[1]: Starting kubelet.service... Oct 29 00:34:45.716874 kernel: audit: type=1130 audit(1761698085.703:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:45.718707 kernel: audit: type=1131 audit(1761698085.703:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:45.757940 systemd[1]: Reloading. Oct 29 00:34:45.823771 /usr/lib/systemd/system-generators/torcx-generator[1573]: time="2025-10-29T00:34:45Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 29 00:34:45.823802 /usr/lib/systemd/system-generators/torcx-generator[1573]: time="2025-10-29T00:34:45Z" level=info msg="torcx already run" Oct 29 00:34:45.933230 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 29 00:34:45.933252 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 29 00:34:45.950409 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 29 00:34:46.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009945 kernel: audit: type=1400 audit(1761698086.002:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.010026 kernel: audit: type=1400 audit(1761698086.004:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.010055 kernel: audit: type=1400 audit(1761698086.004:256): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015454 kernel: audit: type=1400 audit(1761698086.004:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.006000 audit: BPF prog-id=43 op=LOAD Oct 29 00:34:46.006000 audit: BPF prog-id=27 op=UNLOAD Oct 29 00:34:46.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009000 audit: BPF prog-id=44 op=LOAD Oct 29 00:34:46.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.009000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.011000 audit: BPF prog-id=45 op=LOAD Oct 29 00:34:46.011000 audit: BPF prog-id=28 op=UNLOAD Oct 29 00:34:46.011000 audit: BPF prog-id=29 op=UNLOAD Oct 29 00:34:46.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit: BPF prog-id=46 op=LOAD Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.015000 audit: BPF prog-id=47 op=LOAD Oct 29 00:34:46.015000 audit: BPF prog-id=30 op=UNLOAD Oct 29 00:34:46.015000 audit: BPF prog-id=31 op=UNLOAD Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.016000 audit: BPF prog-id=48 op=LOAD Oct 29 00:34:46.016000 audit: BPF prog-id=37 op=UNLOAD Oct 29 00:34:46.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit: BPF prog-id=49 op=LOAD Oct 29 00:34:46.020000 audit: BPF prog-id=38 op=UNLOAD Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit: BPF prog-id=50 op=LOAD Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit: BPF prog-id=51 op=LOAD Oct 29 00:34:46.020000 audit: BPF prog-id=39 op=UNLOAD Oct 29 00:34:46.020000 audit: BPF prog-id=40 op=UNLOAD Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit: BPF prog-id=52 op=LOAD Oct 29 00:34:46.021000 audit: BPF prog-id=32 op=UNLOAD Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.021000 audit: BPF prog-id=53 op=LOAD Oct 29 00:34:46.021000 audit: BPF prog-id=36 op=UNLOAD Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit: BPF prog-id=54 op=LOAD Oct 29 00:34:46.022000 audit: BPF prog-id=33 op=UNLOAD Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit: BPF prog-id=55 op=LOAD Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.022000 audit: BPF prog-id=56 op=LOAD Oct 29 00:34:46.022000 audit: BPF prog-id=34 op=UNLOAD Oct 29 00:34:46.022000 audit: BPF prog-id=35 op=UNLOAD Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:46.023000 audit: BPF prog-id=57 op=LOAD Oct 29 00:34:46.023000 audit: BPF prog-id=41 op=UNLOAD Oct 29 00:34:46.033300 systemd[1]: Started kubelet.service. Oct 29 00:34:46.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.036423 systemd[1]: Stopping kubelet.service... Oct 29 00:34:46.036871 systemd[1]: kubelet.service: Deactivated successfully. Oct 29 00:34:46.037073 systemd[1]: Stopped kubelet.service. Oct 29 00:34:46.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.038663 systemd[1]: Starting kubelet.service... Oct 29 00:34:46.144471 systemd[1]: Started kubelet.service. Oct 29 00:34:46.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:46.181640 kubelet[1619]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 29 00:34:46.181640 kubelet[1619]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Oct 29 00:34:46.181640 kubelet[1619]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 29 00:34:46.182011 kubelet[1619]: I1029 00:34:46.181738 1619 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 29 00:34:46.956751 kubelet[1619]: I1029 00:34:46.956699 1619 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Oct 29 00:34:46.956751 kubelet[1619]: I1029 00:34:46.956735 1619 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 29 00:34:46.957013 kubelet[1619]: I1029 00:34:46.956998 1619 server.go:954] "Client rotation is on, will bootstrap in background" Oct 29 00:34:46.987689 kubelet[1619]: E1029 00:34:46.987655 1619 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.79:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.79:6443: connect: connection refused" logger="UnhandledError" Oct 29 00:34:46.988673 kubelet[1619]: I1029 00:34:46.988647 1619 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 29 00:34:46.995861 kubelet[1619]: E1029 00:34:46.995747 1619 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Oct 29 00:34:46.995861 kubelet[1619]: I1029 00:34:46.995862 1619 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Oct 29 00:34:46.998977 kubelet[1619]: I1029 00:34:46.998955 1619 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 29 00:34:46.999277 kubelet[1619]: I1029 00:34:46.999247 1619 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 29 00:34:46.999521 kubelet[1619]: I1029 00:34:46.999334 1619 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Oct 29 00:34:46.999723 kubelet[1619]: I1029 00:34:46.999710 1619 topology_manager.go:138] "Creating topology manager with none policy" Oct 29 00:34:46.999779 kubelet[1619]: I1029 00:34:46.999770 1619 container_manager_linux.go:304] "Creating device plugin manager" Oct 29 00:34:47.000012 kubelet[1619]: I1029 00:34:46.999999 1619 state_mem.go:36] "Initialized new in-memory state store" Oct 29 00:34:47.002717 kubelet[1619]: I1029 00:34:47.002697 1619 kubelet.go:446] "Attempting to sync node with API server" Oct 29 00:34:47.002807 kubelet[1619]: I1029 00:34:47.002796 1619 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 29 00:34:47.002878 kubelet[1619]: I1029 00:34:47.002868 1619 kubelet.go:352] "Adding apiserver pod source" Oct 29 00:34:47.002931 kubelet[1619]: I1029 00:34:47.002922 1619 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 29 00:34:47.012362 kubelet[1619]: I1029 00:34:47.012329 1619 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 29 00:34:47.013058 kubelet[1619]: I1029 00:34:47.013038 1619 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Oct 29 00:34:47.013229 kubelet[1619]: W1029 00:34:47.013217 1619 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 29 00:34:47.014054 kubelet[1619]: I1029 00:34:47.014034 1619 watchdog_linux.go:99] "Systemd watchdog is not enabled" Oct 29 00:34:47.014146 kubelet[1619]: I1029 00:34:47.014135 1619 server.go:1287] "Started kubelet" Oct 29 00:34:47.016738 kubelet[1619]: W1029 00:34:47.016692 1619 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.79:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.79:6443: connect: connection refused Oct 29 00:34:47.016812 kubelet[1619]: E1029 00:34:47.016754 1619 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.79:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.79:6443: connect: connection refused" logger="UnhandledError" Oct 29 00:34:47.016949 kubelet[1619]: I1029 00:34:47.016923 1619 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Oct 29 00:34:47.017750 kubelet[1619]: I1029 00:34:47.017730 1619 server.go:479] "Adding debug handlers to kubelet server" Oct 29 00:34:47.019000 audit[1619]: AVC avc: denied { mac_admin } for pid=1619 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:47.019000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:47.019000 audit[1619]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000516720 a1=4000891f98 a2=40005166c0 a3=25 items=0 ppid=1 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.019000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:47.020945 kubelet[1619]: I1029 00:34:47.020916 1619 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Oct 29 00:34:47.019000 audit[1619]: AVC avc: denied { mac_admin } for pid=1619 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:47.019000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:47.019000 audit[1619]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40000eaa80 a1=4000891fb0 a2=4000516840 a3=25 items=0 ppid=1 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.019000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:47.021100 kubelet[1619]: I1029 00:34:47.021002 1619 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Oct 29 00:34:47.021100 kubelet[1619]: I1029 00:34:47.021094 1619 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 29 00:34:47.024064 kubelet[1619]: W1029 00:34:47.024020 1619 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.79:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.79:6443: connect: connection refused Oct 29 00:34:47.022000 audit[1632]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.022000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcac8fdb0 a2=0 a3=1 items=0 ppid=1619 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.022000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 29 00:34:47.024344 kubelet[1619]: E1029 00:34:47.024167 1619 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.79:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.79:6443: connect: connection refused" logger="UnhandledError" Oct 29 00:34:47.025051 kubelet[1619]: I1029 00:34:47.025028 1619 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Oct 29 00:34:47.024000 audit[1633]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.024000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff07fd560 a2=0 a3=1 items=0 ppid=1619 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.024000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 29 00:34:47.026979 kubelet[1619]: I1029 00:34:47.026958 1619 volume_manager.go:297] "Starting Kubelet Volume Manager" Oct 29 00:34:47.027407 kubelet[1619]: E1029 00:34:47.027382 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:47.027540 kubelet[1619]: I1029 00:34:47.027526 1619 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Oct 29 00:34:47.027661 kubelet[1619]: I1029 00:34:47.027651 1619 reconciler.go:26] "Reconciler: start to sync state" Oct 29 00:34:47.028144 kubelet[1619]: E1029 00:34:47.028106 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.79:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.79:6443: connect: connection refused" interval="200ms" Oct 29 00:34:47.026000 audit[1635]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.026000 audit[1635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffdfabe00 a2=0 a3=1 items=0 ppid=1619 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.026000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 29 00:34:47.028504 kubelet[1619]: W1029 00:34:47.028472 1619 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.79:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.79:6443: connect: connection refused Oct 29 00:34:47.028595 kubelet[1619]: E1029 00:34:47.028579 1619 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.79:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.79:6443: connect: connection refused" logger="UnhandledError" Oct 29 00:34:47.028928 kubelet[1619]: I1029 00:34:47.028885 1619 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Oct 29 00:34:47.029170 kubelet[1619]: I1029 00:34:47.029154 1619 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 29 00:34:47.029350 kubelet[1619]: E1029 00:34:47.029334 1619 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 29 00:34:47.029614 kubelet[1619]: E1029 00:34:47.029245 1619 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.79:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.79:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1872cf1385f62e9a default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-10-29 00:34:47.014117018 +0000 UTC m=+0.866167348,LastTimestamp:2025-10-29 00:34:47.014117018 +0000 UTC m=+0.866167348,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Oct 29 00:34:47.030535 kubelet[1619]: I1029 00:34:47.030515 1619 factory.go:221] Registration of the containerd container factory successfully Oct 29 00:34:47.030618 kubelet[1619]: I1029 00:34:47.030607 1619 factory.go:221] Registration of the systemd container factory successfully Oct 29 00:34:47.030748 kubelet[1619]: I1029 00:34:47.030732 1619 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Oct 29 00:34:47.029000 audit[1637]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.029000 audit[1637]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd399c250 a2=0 a3=1 items=0 ppid=1619 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.029000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 29 00:34:47.043649 kubelet[1619]: I1029 00:34:47.043628 1619 cpu_manager.go:221] "Starting CPU manager" policy="none" Oct 29 00:34:47.043747 kubelet[1619]: I1029 00:34:47.043735 1619 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Oct 29 00:34:47.043806 kubelet[1619]: I1029 00:34:47.043796 1619 state_mem.go:36] "Initialized new in-memory state store" Oct 29 00:34:47.043000 audit[1646]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.043000 audit[1646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff7a4e5d0 a2=0 a3=1 items=0 ppid=1619 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.043000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 29 00:34:47.044996 kubelet[1619]: I1029 00:34:47.044964 1619 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 29 00:34:47.044000 audit[1647]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.044000 audit[1647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe632e070 a2=0 a3=1 items=0 ppid=1619 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.044000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 29 00:34:47.044000 audit[1648]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:34:47.044000 audit[1648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffee833570 a2=0 a3=1 items=0 ppid=1619 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.044000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 29 00:34:47.046640 kubelet[1619]: I1029 00:34:47.046609 1619 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 29 00:34:47.046640 kubelet[1619]: I1029 00:34:47.046641 1619 status_manager.go:227] "Starting to sync pod status with apiserver" Oct 29 00:34:47.046713 kubelet[1619]: I1029 00:34:47.046663 1619 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Oct 29 00:34:47.046713 kubelet[1619]: I1029 00:34:47.046671 1619 kubelet.go:2382] "Starting kubelet main sync loop" Oct 29 00:34:47.045000 audit[1649]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.045000 audit[1649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff5d05020 a2=0 a3=1 items=0 ppid=1619 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.045000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 29 00:34:47.046876 kubelet[1619]: E1029 00:34:47.046712 1619 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 29 00:34:47.046000 audit[1650]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:34:47.046000 audit[1650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffebb612f0 a2=0 a3=1 items=0 ppid=1619 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 29 00:34:47.046000 audit[1651]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1651 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:34:47.046000 audit[1651]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffde805410 a2=0 a3=1 items=0 ppid=1619 pid=1651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.046000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 29 00:34:47.048000 audit[1652]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1652 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:34:47.048000 audit[1652]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffcd006c50 a2=0 a3=1 items=0 ppid=1619 pid=1652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.048000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 29 00:34:47.050000 audit[1653]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1653 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:34:47.050000 audit[1653]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd8b97c10 a2=0 a3=1 items=0 ppid=1619 pid=1653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.050000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 29 00:34:47.119587 kubelet[1619]: W1029 00:34:47.119522 1619 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.79:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.79:6443: connect: connection refused Oct 29 00:34:47.119697 kubelet[1619]: E1029 00:34:47.119592 1619 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.79:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.79:6443: connect: connection refused" logger="UnhandledError" Oct 29 00:34:47.123902 kubelet[1619]: I1029 00:34:47.123884 1619 policy_none.go:49] "None policy: Start" Oct 29 00:34:47.123978 kubelet[1619]: I1029 00:34:47.123967 1619 memory_manager.go:186] "Starting memorymanager" policy="None" Oct 29 00:34:47.124041 kubelet[1619]: I1029 00:34:47.124033 1619 state_mem.go:35] "Initializing new in-memory state store" Oct 29 00:34:47.127577 kubelet[1619]: E1029 00:34:47.127536 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:47.129104 systemd[1]: Created slice kubepods.slice. Oct 29 00:34:47.133609 systemd[1]: Created slice kubepods-burstable.slice. Oct 29 00:34:47.136109 systemd[1]: Created slice kubepods-besteffort.slice. Oct 29 00:34:47.147055 kubelet[1619]: E1029 00:34:47.147025 1619 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 29 00:34:47.147381 kubelet[1619]: I1029 00:34:47.147273 1619 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 29 00:34:47.145000 audit[1619]: AVC avc: denied { mac_admin } for pid=1619 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:47.145000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:47.145000 audit[1619]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e57e60 a1=400076d5c0 a2=4000e57e30 a3=25 items=0 ppid=1 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:47.145000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:47.147649 kubelet[1619]: I1029 00:34:47.147456 1619 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Oct 29 00:34:47.147683 kubelet[1619]: I1029 00:34:47.147656 1619 eviction_manager.go:189] "Eviction manager: starting control loop" Oct 29 00:34:47.147706 kubelet[1619]: I1029 00:34:47.147673 1619 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Oct 29 00:34:47.148269 kubelet[1619]: I1029 00:34:47.148155 1619 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 29 00:34:47.148823 kubelet[1619]: E1029 00:34:47.148784 1619 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Oct 29 00:34:47.149023 kubelet[1619]: E1029 00:34:47.149008 1619 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 29 00:34:47.229656 kubelet[1619]: E1029 00:34:47.229534 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.79:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.79:6443: connect: connection refused" interval="400ms" Oct 29 00:34:47.249754 kubelet[1619]: I1029 00:34:47.249720 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:47.250720 kubelet[1619]: E1029 00:34:47.250693 1619 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.79:6443/api/v1/nodes\": dial tcp 10.0.0.79:6443: connect: connection refused" node="localhost" Oct 29 00:34:47.353730 systemd[1]: Created slice kubepods-burstable-pod556ab1427b216bb92a3071d2fd2166a7.slice. Oct 29 00:34:47.373818 kubelet[1619]: E1029 00:34:47.373774 1619 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:47.376307 systemd[1]: Created slice kubepods-burstable-pod4654b122dbb389158fe3c0766e603624.slice. Oct 29 00:34:47.387476 kubelet[1619]: E1029 00:34:47.387451 1619 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:47.389417 systemd[1]: Created slice kubepods-burstable-poda1d51be1ff02022474f2598f6e43038f.slice. Oct 29 00:34:47.391146 kubelet[1619]: E1029 00:34:47.390829 1619 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:47.429498 kubelet[1619]: I1029 00:34:47.429462 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.429654 kubelet[1619]: I1029 00:34:47.429636 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/556ab1427b216bb92a3071d2fd2166a7-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"556ab1427b216bb92a3071d2fd2166a7\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:47.429731 kubelet[1619]: I1029 00:34:47.429716 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/556ab1427b216bb92a3071d2fd2166a7-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"556ab1427b216bb92a3071d2fd2166a7\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:47.429798 kubelet[1619]: I1029 00:34:47.429786 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.429866 kubelet[1619]: I1029 00:34:47.429854 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.429962 kubelet[1619]: I1029 00:34:47.429948 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.430031 kubelet[1619]: I1029 00:34:47.430020 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:47.430106 kubelet[1619]: I1029 00:34:47.430093 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a1d51be1ff02022474f2598f6e43038f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a1d51be1ff02022474f2598f6e43038f\") " pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:47.430184 kubelet[1619]: I1029 00:34:47.430163 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/556ab1427b216bb92a3071d2fd2166a7-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"556ab1427b216bb92a3071d2fd2166a7\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:47.452601 kubelet[1619]: I1029 00:34:47.452565 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:47.452966 kubelet[1619]: E1029 00:34:47.452908 1619 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.79:6443/api/v1/nodes\": dial tcp 10.0.0.79:6443: connect: connection refused" node="localhost" Oct 29 00:34:47.631064 kubelet[1619]: E1029 00:34:47.630924 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.79:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.79:6443: connect: connection refused" interval="800ms" Oct 29 00:34:47.675339 kubelet[1619]: E1029 00:34:47.675296 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:47.676362 env[1223]: time="2025-10-29T00:34:47.676305240Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:556ab1427b216bb92a3071d2fd2166a7,Namespace:kube-system,Attempt:0,}" Oct 29 00:34:47.688563 kubelet[1619]: E1029 00:34:47.688520 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:47.689204 env[1223]: time="2025-10-29T00:34:47.688936537Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:4654b122dbb389158fe3c0766e603624,Namespace:kube-system,Attempt:0,}" Oct 29 00:34:47.691469 kubelet[1619]: E1029 00:34:47.691414 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:47.691792 env[1223]: time="2025-10-29T00:34:47.691748019Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a1d51be1ff02022474f2598f6e43038f,Namespace:kube-system,Attempt:0,}" Oct 29 00:34:47.854348 kubelet[1619]: I1029 00:34:47.854304 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:47.854735 kubelet[1619]: E1029 00:34:47.854625 1619 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.79:6443/api/v1/nodes\": dial tcp 10.0.0.79:6443: connect: connection refused" node="localhost" Oct 29 00:34:48.089531 kubelet[1619]: W1029 00:34:48.089352 1619 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.79:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.79:6443: connect: connection refused Oct 29 00:34:48.089870 kubelet[1619]: E1029 00:34:48.089684 1619 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.79:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.79:6443: connect: connection refused" logger="UnhandledError" Oct 29 00:34:48.186558 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2771214896.mount: Deactivated successfully. Oct 29 00:34:48.210087 kubelet[1619]: W1029 00:34:48.210019 1619 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.79:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.79:6443: connect: connection refused Oct 29 00:34:48.210087 kubelet[1619]: E1029 00:34:48.210089 1619 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.79:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.79:6443: connect: connection refused" logger="UnhandledError" Oct 29 00:34:48.339842 env[1223]: time="2025-10-29T00:34:48.339694254Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.342983 env[1223]: time="2025-10-29T00:34:48.342947115Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.346468 env[1223]: time="2025-10-29T00:34:48.346416601Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.357237 env[1223]: time="2025-10-29T00:34:48.357197762Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.361134 env[1223]: time="2025-10-29T00:34:48.361059560Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.363076 env[1223]: time="2025-10-29T00:34:48.363037841Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.365233 env[1223]: time="2025-10-29T00:34:48.365205495Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.366277 env[1223]: time="2025-10-29T00:34:48.366179569Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.368533 env[1223]: time="2025-10-29T00:34:48.368505899Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.370567 env[1223]: time="2025-10-29T00:34:48.369662742Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.372315 env[1223]: time="2025-10-29T00:34:48.372290579Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.375697 env[1223]: time="2025-10-29T00:34:48.375648892Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:34:48.389392 kubelet[1619]: W1029 00:34:48.389096 1619 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.79:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.79:6443: connect: connection refused Oct 29 00:34:48.389392 kubelet[1619]: E1029 00:34:48.389176 1619 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.79:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.79:6443: connect: connection refused" logger="UnhandledError" Oct 29 00:34:48.394405 kubelet[1619]: W1029 00:34:48.392794 1619 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.79:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.79:6443: connect: connection refused Oct 29 00:34:48.394405 kubelet[1619]: E1029 00:34:48.392830 1619 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.79:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.79:6443: connect: connection refused" logger="UnhandledError" Oct 29 00:34:48.412025 env[1223]: time="2025-10-29T00:34:48.411786219Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:34:48.412025 env[1223]: time="2025-10-29T00:34:48.411829080Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:34:48.412025 env[1223]: time="2025-10-29T00:34:48.411839805Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:34:48.412200 env[1223]: time="2025-10-29T00:34:48.412055830Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b9c207178be27b1384c1301ac630eb39a590f585fe2cc9e9903941624be70af0 pid=1675 runtime=io.containerd.runc.v2 Oct 29 00:34:48.414541 env[1223]: time="2025-10-29T00:34:48.414456797Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:34:48.414541 env[1223]: time="2025-10-29T00:34:48.414494936Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:34:48.414541 env[1223]: time="2025-10-29T00:34:48.414505541Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:34:48.414706 env[1223]: time="2025-10-29T00:34:48.414655534Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:34:48.414706 env[1223]: time="2025-10-29T00:34:48.414688190Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:34:48.414706 env[1223]: time="2025-10-29T00:34:48.414698354Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:34:48.414882 env[1223]: time="2025-10-29T00:34:48.414839703Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/25b4850d40e6d2f29d2b41eedacaab577341e5b39deeb805482596eb4867c82c pid=1674 runtime=io.containerd.runc.v2 Oct 29 00:34:48.415061 env[1223]: time="2025-10-29T00:34:48.415016349Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b80b5a012ae373bfcd887e78617a8ebebb6f65bd851ba6457d83ddc11362d538 pid=1686 runtime=io.containerd.runc.v2 Oct 29 00:34:48.426732 systemd[1]: Started cri-containerd-b9c207178be27b1384c1301ac630eb39a590f585fe2cc9e9903941624be70af0.scope. Oct 29 00:34:48.431984 kubelet[1619]: E1029 00:34:48.431878 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.79:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.79:6443: connect: connection refused" interval="1.6s" Oct 29 00:34:48.444321 systemd[1]: Started cri-containerd-b80b5a012ae373bfcd887e78617a8ebebb6f65bd851ba6457d83ddc11362d538.scope. Oct 29 00:34:48.448072 systemd[1]: Started cri-containerd-25b4850d40e6d2f29d2b41eedacaab577341e5b39deeb805482596eb4867c82c.scope. Oct 29 00:34:48.456085 kernel: kauditd_printk_skb: 219 callbacks suppressed Oct 29 00:34:48.456183 kernel: audit: type=1400 audit(1761698088.452:444): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456209 kernel: audit: type=1400 audit(1761698088.452:445): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461062 kernel: audit: type=1400 audit(1761698088.452:446): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463863 kernel: audit: type=1400 audit(1761698088.452:447): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463890 kernel: audit: type=1400 audit(1761698088.452:448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.466171 kernel: audit: audit_backlog=66 > audit_backlog_limit=64 Oct 29 00:34:48.466330 kernel: audit: audit_backlog=66 > audit_backlog_limit=64 Oct 29 00:34:48.466359 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 29 00:34:48.466378 kernel: audit: backlog limit exceeded Oct 29 00:34:48.466391 kernel: audit: audit_backlog=66 > audit_backlog_limit=64 Oct 29 00:34:48.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.455000 audit: BPF prog-id=58 op=LOAD Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1675 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633230373137386265323762313338346331333031616336333065 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1675 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633230373137386265323762313338346331333031616336333065 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.456000 audit: BPF prog-id=59 op=LOAD Oct 29 00:34:48.456000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1675 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633230373137386265323762313338346331333031616336333065 Oct 29 00:34:48.459000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.459000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.459000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.459000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.459000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.459000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.459000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.459000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit: BPF prog-id=60 op=LOAD Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1686 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238306235613031326165333733626663643838376537383631376138 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1686 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238306235613031326165333733626663643838376537383631376138 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.459000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.459000 audit: BPF prog-id=61 op=LOAD Oct 29 00:34:48.459000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1675 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633230373137386265323762313338346331333031616336333065 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit: BPF prog-id=61 op=UNLOAD Oct 29 00:34:48.463000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit: BPF prog-id=62 op=LOAD Oct 29 00:34:48.463000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1675 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633230373137386265323762313338346331333031616336333065 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.463000 audit: BPF prog-id=63 op=LOAD Oct 29 00:34:48.463000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1686 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238306235613031326165333733626663643838376537383631376138 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit: BPF prog-id=64 op=LOAD Oct 29 00:34:48.469000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1686 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238306235613031326165333733626663643838376537383631376138 Oct 29 00:34:48.469000 audit: BPF prog-id=64 op=UNLOAD Oct 29 00:34:48.469000 audit: BPF prog-id=63 op=UNLOAD Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit: BPF prog-id=65 op=LOAD Oct 29 00:34:48.469000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1686 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238306235613031326165333733626663643838376537383631376138 Oct 29 00:34:48.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.469000 audit: BPF prog-id=66 op=LOAD Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235623438353064343065366432663239643262343165656461636161 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235623438353064343065366432663239643262343165656461636161 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.471000 audit: BPF prog-id=67 op=LOAD Oct 29 00:34:48.471000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235623438353064343065366432663239643262343165656461636161 Oct 29 00:34:48.472000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.472000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.472000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.472000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.472000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.472000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.472000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.472000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.472000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.472000 audit: BPF prog-id=68 op=LOAD Oct 29 00:34:48.472000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235623438353064343065366432663239643262343165656461636161 Oct 29 00:34:48.472000 audit: BPF prog-id=68 op=UNLOAD Oct 29 00:34:48.472000 audit: BPF prog-id=67 op=UNLOAD Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.473000 audit: BPF prog-id=69 op=LOAD Oct 29 00:34:48.473000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1674 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235623438353064343065366432663239643262343165656461636161 Oct 29 00:34:48.495535 env[1223]: time="2025-10-29T00:34:48.495473981Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:4654b122dbb389158fe3c0766e603624,Namespace:kube-system,Attempt:0,} returns sandbox id \"25b4850d40e6d2f29d2b41eedacaab577341e5b39deeb805482596eb4867c82c\"" Oct 29 00:34:48.498924 kubelet[1619]: E1029 00:34:48.496654 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:48.498924 kubelet[1619]: E1029 00:34:48.498017 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:48.499061 env[1223]: time="2025-10-29T00:34:48.496846448Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:556ab1427b216bb92a3071d2fd2166a7,Namespace:kube-system,Attempt:0,} returns sandbox id \"b80b5a012ae373bfcd887e78617a8ebebb6f65bd851ba6457d83ddc11362d538\"" Oct 29 00:34:48.499535 env[1223]: time="2025-10-29T00:34:48.499502699Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a1d51be1ff02022474f2598f6e43038f,Namespace:kube-system,Attempt:0,} returns sandbox id \"b9c207178be27b1384c1301ac630eb39a590f585fe2cc9e9903941624be70af0\"" Oct 29 00:34:48.500303 env[1223]: time="2025-10-29T00:34:48.499815972Z" level=info msg="CreateContainer within sandbox \"25b4850d40e6d2f29d2b41eedacaab577341e5b39deeb805482596eb4867c82c\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 29 00:34:48.500379 kubelet[1619]: E1029 00:34:48.500161 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:48.501142 env[1223]: time="2025-10-29T00:34:48.500945441Z" level=info msg="CreateContainer within sandbox \"b80b5a012ae373bfcd887e78617a8ebebb6f65bd851ba6457d83ddc11362d538\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 29 00:34:48.502721 env[1223]: time="2025-10-29T00:34:48.502680284Z" level=info msg="CreateContainer within sandbox \"b9c207178be27b1384c1301ac630eb39a590f585fe2cc9e9903941624be70af0\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 29 00:34:48.512118 env[1223]: time="2025-10-29T00:34:48.512078573Z" level=info msg="CreateContainer within sandbox \"25b4850d40e6d2f29d2b41eedacaab577341e5b39deeb805482596eb4867c82c\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"d2bc2b632b46d77d0713fcc656a45a49ccf26c9b64a7ef21656950bbfcb2da7f\"" Oct 29 00:34:48.512822 env[1223]: time="2025-10-29T00:34:48.512789758Z" level=info msg="StartContainer for \"d2bc2b632b46d77d0713fcc656a45a49ccf26c9b64a7ef21656950bbfcb2da7f\"" Oct 29 00:34:48.518572 env[1223]: time="2025-10-29T00:34:48.518531069Z" level=info msg="CreateContainer within sandbox \"b80b5a012ae373bfcd887e78617a8ebebb6f65bd851ba6457d83ddc11362d538\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"40909e8996228d26afea49b72c82296798df7999916140b4861d16d598b77bea\"" Oct 29 00:34:48.519206 env[1223]: time="2025-10-29T00:34:48.519090942Z" level=info msg="StartContainer for \"40909e8996228d26afea49b72c82296798df7999916140b4861d16d598b77bea\"" Oct 29 00:34:48.519909 env[1223]: time="2025-10-29T00:34:48.519872442Z" level=info msg="CreateContainer within sandbox \"b9c207178be27b1384c1301ac630eb39a590f585fe2cc9e9903941624be70af0\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c3c9e024fda110cb8c6e80d78f3203cf75eba9528d25b7e44859496cc448a2e1\"" Oct 29 00:34:48.520278 env[1223]: time="2025-10-29T00:34:48.520212087Z" level=info msg="StartContainer for \"c3c9e024fda110cb8c6e80d78f3203cf75eba9528d25b7e44859496cc448a2e1\"" Oct 29 00:34:48.529956 systemd[1]: Started cri-containerd-d2bc2b632b46d77d0713fcc656a45a49ccf26c9b64a7ef21656950bbfcb2da7f.scope. Oct 29 00:34:48.536211 systemd[1]: Started cri-containerd-40909e8996228d26afea49b72c82296798df7999916140b4861d16d598b77bea.scope. Oct 29 00:34:48.541568 systemd[1]: Started cri-containerd-c3c9e024fda110cb8c6e80d78f3203cf75eba9528d25b7e44859496cc448a2e1.scope. Oct 29 00:34:48.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.552000 audit: BPF prog-id=70 op=LOAD Oct 29 00:34:48.552000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.552000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1674 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432626332623633326234366437376430373133666363363536613435 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1674 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432626332623633326234366437376430373133666363363536613435 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.553000 audit: BPF prog-id=71 op=LOAD Oct 29 00:34:48.553000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1674 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432626332623633326234366437376430373133666363363536613435 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit: BPF prog-id=72 op=LOAD Oct 29 00:34:48.554000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1674 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432626332623633326234366437376430373133666363363536613435 Oct 29 00:34:48.554000 audit: BPF prog-id=72 op=UNLOAD Oct 29 00:34:48.554000 audit: BPF prog-id=71 op=UNLOAD Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.554000 audit: BPF prog-id=73 op=LOAD Oct 29 00:34:48.554000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1674 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432626332623633326234366437376430373133666363363536613435 Oct 29 00:34:48.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.562000 audit: BPF prog-id=74 op=LOAD Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1686 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393039653839393632323864323661666561343962373263383232 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1686 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393039653839393632323864323661666561343962373263383232 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.563000 audit: BPF prog-id=75 op=LOAD Oct 29 00:34:48.563000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1686 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393039653839393632323864323661666561343962373263383232 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit: BPF prog-id=76 op=LOAD Oct 29 00:34:48.564000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1686 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393039653839393632323864323661666561343962373263383232 Oct 29 00:34:48.564000 audit: BPF prog-id=76 op=UNLOAD Oct 29 00:34:48.564000 audit: BPF prog-id=75 op=UNLOAD Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.564000 audit: BPF prog-id=77 op=LOAD Oct 29 00:34:48.564000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1686 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393039653839393632323864323661666561343962373263383232 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit: BPF prog-id=78 op=LOAD Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000245b38 a2=10 a3=0 items=0 ppid=1675 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333633965303234666461313130636238633665383064373866333230 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40002455a0 a2=3c a3=0 items=0 ppid=1675 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333633965303234666461313130636238633665383064373866333230 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.569000 audit: BPF prog-id=79 op=LOAD Oct 29 00:34:48.569000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40002458e0 a2=78 a3=0 items=0 ppid=1675 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333633965303234666461313130636238633665383064373866333230 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit: BPF prog-id=80 op=LOAD Oct 29 00:34:48.570000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000245670 a2=78 a3=0 items=0 ppid=1675 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333633965303234666461313130636238633665383064373866333230 Oct 29 00:34:48.570000 audit: BPF prog-id=80 op=UNLOAD Oct 29 00:34:48.570000 audit: BPF prog-id=79 op=UNLOAD Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:48.570000 audit: BPF prog-id=81 op=LOAD Oct 29 00:34:48.570000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000245b40 a2=78 a3=0 items=0 ppid=1675 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:48.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333633965303234666461313130636238633665383064373866333230 Oct 29 00:34:48.586809 env[1223]: time="2025-10-29T00:34:48.586696086Z" level=info msg="StartContainer for \"d2bc2b632b46d77d0713fcc656a45a49ccf26c9b64a7ef21656950bbfcb2da7f\" returns successfully" Oct 29 00:34:48.599172 env[1223]: time="2025-10-29T00:34:48.598991423Z" level=info msg="StartContainer for \"c3c9e024fda110cb8c6e80d78f3203cf75eba9528d25b7e44859496cc448a2e1\" returns successfully" Oct 29 00:34:48.611268 env[1223]: time="2025-10-29T00:34:48.611228731Z" level=info msg="StartContainer for \"40909e8996228d26afea49b72c82296798df7999916140b4861d16d598b77bea\" returns successfully" Oct 29 00:34:48.656340 kubelet[1619]: I1029 00:34:48.656289 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:48.656644 kubelet[1619]: E1029 00:34:48.656620 1619 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.79:6443/api/v1/nodes\": dial tcp 10.0.0.79:6443: connect: connection refused" node="localhost" Oct 29 00:34:49.055033 kubelet[1619]: E1029 00:34:49.054922 1619 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:49.055186 kubelet[1619]: E1029 00:34:49.055042 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:49.056865 kubelet[1619]: E1029 00:34:49.056826 1619 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:49.056936 kubelet[1619]: E1029 00:34:49.056920 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:49.058229 kubelet[1619]: E1029 00:34:49.058208 1619 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:49.058310 kubelet[1619]: E1029 00:34:49.058303 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:50.059929 kubelet[1619]: E1029 00:34:50.059879 1619 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:50.060233 kubelet[1619]: E1029 00:34:50.059999 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:50.060233 kubelet[1619]: E1029 00:34:50.060200 1619 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 29 00:34:50.060308 kubelet[1619]: E1029 00:34:50.060271 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:50.257956 kubelet[1619]: I1029 00:34:50.257918 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:50.857000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.857000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003fe0e0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:34:50.857000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:50.857000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.857000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000ccc000 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:34:50.857000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:50.985000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.985000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4007a31ad0 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:34:50.985000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.985000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.985000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4007a31b30 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:34:50.985000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.991000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.991000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400861e600 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:34:50.991000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.991000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.991000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40045d2e10 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:34:50.991000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.998000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.998000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=4006826280 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:34:50.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:50.998000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:50.998000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=4003440510 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:34:50.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:34:51.072675 kubelet[1619]: E1029 00:34:51.072630 1619 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 29 00:34:51.129392 kubelet[1619]: I1029 00:34:51.129280 1619 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Oct 29 00:34:51.228073 kubelet[1619]: I1029 00:34:51.228017 1619 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:51.233922 kubelet[1619]: E1029 00:34:51.233889 1619 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:51.233922 kubelet[1619]: I1029 00:34:51.233916 1619 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:51.236093 kubelet[1619]: E1029 00:34:51.235904 1619 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:51.236093 kubelet[1619]: I1029 00:34:51.235930 1619 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:51.237495 kubelet[1619]: E1029 00:34:51.237467 1619 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:52.020572 kubelet[1619]: I1029 00:34:52.020540 1619 apiserver.go:52] "Watching apiserver" Oct 29 00:34:52.028135 kubelet[1619]: I1029 00:34:52.028100 1619 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Oct 29 00:34:52.766463 kubelet[1619]: I1029 00:34:52.766408 1619 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:52.772679 kubelet[1619]: E1029 00:34:52.772654 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:53.067184 kubelet[1619]: E1029 00:34:53.067083 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:53.104562 systemd[1]: Reloading. Oct 29 00:34:53.151449 /usr/lib/systemd/system-generators/torcx-generator[1923]: time="2025-10-29T00:34:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 29 00:34:53.151481 /usr/lib/systemd/system-generators/torcx-generator[1923]: time="2025-10-29T00:34:53Z" level=info msg="torcx already run" Oct 29 00:34:53.223109 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 29 00:34:53.223130 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 29 00:34:53.239685 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit: BPF prog-id=82 op=LOAD Oct 29 00:34:53.302000 audit: BPF prog-id=43 op=UNLOAD Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit: BPF prog-id=83 op=LOAD Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit: BPF prog-id=84 op=LOAD Oct 29 00:34:53.302000 audit: BPF prog-id=44 op=UNLOAD Oct 29 00:34:53.302000 audit: BPF prog-id=45 op=UNLOAD Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit: BPF prog-id=85 op=LOAD Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.302000 audit: BPF prog-id=86 op=LOAD Oct 29 00:34:53.302000 audit: BPF prog-id=46 op=UNLOAD Oct 29 00:34:53.302000 audit: BPF prog-id=47 op=UNLOAD Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit: BPF prog-id=87 op=LOAD Oct 29 00:34:53.303000 audit: BPF prog-id=48 op=UNLOAD Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.303000 audit: BPF prog-id=88 op=LOAD Oct 29 00:34:53.303000 audit: BPF prog-id=74 op=UNLOAD Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.305000 audit: BPF prog-id=89 op=LOAD Oct 29 00:34:53.305000 audit: BPF prog-id=60 op=UNLOAD Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit: BPF prog-id=90 op=LOAD Oct 29 00:34:53.306000 audit: BPF prog-id=58 op=UNLOAD Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit: BPF prog-id=91 op=LOAD Oct 29 00:34:53.307000 audit: BPF prog-id=49 op=UNLOAD Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit: BPF prog-id=92 op=LOAD Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit: BPF prog-id=93 op=LOAD Oct 29 00:34:53.308000 audit: BPF prog-id=50 op=UNLOAD Oct 29 00:34:53.308000 audit: BPF prog-id=51 op=UNLOAD Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.308000 audit: BPF prog-id=94 op=LOAD Oct 29 00:34:53.308000 audit: BPF prog-id=52 op=UNLOAD Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit: BPF prog-id=95 op=LOAD Oct 29 00:34:53.309000 audit: BPF prog-id=53 op=UNLOAD Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit: BPF prog-id=96 op=LOAD Oct 29 00:34:53.309000 audit: BPF prog-id=54 op=UNLOAD Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit: BPF prog-id=97 op=LOAD Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.310000 audit: BPF prog-id=98 op=LOAD Oct 29 00:34:53.310000 audit: BPF prog-id=55 op=UNLOAD Oct 29 00:34:53.310000 audit: BPF prog-id=56 op=UNLOAD Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit: BPF prog-id=99 op=LOAD Oct 29 00:34:53.311000 audit: BPF prog-id=66 op=UNLOAD Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit: BPF prog-id=100 op=LOAD Oct 29 00:34:53.311000 audit: BPF prog-id=78 op=UNLOAD Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.311000 audit: BPF prog-id=101 op=LOAD Oct 29 00:34:53.311000 audit: BPF prog-id=57 op=UNLOAD Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.312000 audit: BPF prog-id=102 op=LOAD Oct 29 00:34:53.312000 audit: BPF prog-id=70 op=UNLOAD Oct 29 00:34:53.324741 kubelet[1619]: I1029 00:34:53.323850 1619 dynamic_cafile_content.go:175] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 29 00:34:53.324096 systemd[1]: Stopping kubelet.service... Oct 29 00:34:53.350956 systemd[1]: kubelet.service: Deactivated successfully. Oct 29 00:34:53.351275 systemd[1]: Stopped kubelet.service. Oct 29 00:34:53.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:53.351549 systemd[1]: kubelet.service: Consumed 1.208s CPU time. Oct 29 00:34:53.354137 systemd[1]: Starting kubelet.service... Oct 29 00:34:53.466066 systemd[1]: Started kubelet.service. Oct 29 00:34:53.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:53.468055 kernel: kauditd_printk_skb: 623 callbacks suppressed Oct 29 00:34:53.468102 kernel: audit: type=1130 audit(1761698093.466:804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:34:53.522219 kubelet[1963]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 29 00:34:53.522219 kubelet[1963]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Oct 29 00:34:53.522219 kubelet[1963]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 29 00:34:53.522219 kubelet[1963]: I1029 00:34:53.520259 1963 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 29 00:34:53.527901 kubelet[1963]: I1029 00:34:53.527856 1963 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Oct 29 00:34:53.527901 kubelet[1963]: I1029 00:34:53.527893 1963 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 29 00:34:53.528174 kubelet[1963]: I1029 00:34:53.528158 1963 server.go:954] "Client rotation is on, will bootstrap in background" Oct 29 00:34:53.532486 kubelet[1963]: I1029 00:34:53.529509 1963 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 29 00:34:53.532486 kubelet[1963]: I1029 00:34:53.532102 1963 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 29 00:34:53.535802 kubelet[1963]: E1029 00:34:53.535752 1963 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Oct 29 00:34:53.535926 kubelet[1963]: I1029 00:34:53.535805 1963 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Oct 29 00:34:53.539914 kubelet[1963]: I1029 00:34:53.539875 1963 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 29 00:34:53.540399 kubelet[1963]: I1029 00:34:53.540080 1963 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 29 00:34:53.540399 kubelet[1963]: I1029 00:34:53.540105 1963 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Oct 29 00:34:53.540399 kubelet[1963]: I1029 00:34:53.540380 1963 topology_manager.go:138] "Creating topology manager with none policy" Oct 29 00:34:53.540399 kubelet[1963]: I1029 00:34:53.540389 1963 container_manager_linux.go:304] "Creating device plugin manager" Oct 29 00:34:53.540598 kubelet[1963]: I1029 00:34:53.540447 1963 state_mem.go:36] "Initialized new in-memory state store" Oct 29 00:34:53.540598 kubelet[1963]: I1029 00:34:53.540584 1963 kubelet.go:446] "Attempting to sync node with API server" Oct 29 00:34:53.540598 kubelet[1963]: I1029 00:34:53.540597 1963 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 29 00:34:53.540665 kubelet[1963]: I1029 00:34:53.540617 1963 kubelet.go:352] "Adding apiserver pod source" Oct 29 00:34:53.540665 kubelet[1963]: I1029 00:34:53.540627 1963 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 29 00:34:53.542037 kubelet[1963]: I1029 00:34:53.542013 1963 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 29 00:34:53.545932 kubelet[1963]: I1029 00:34:53.542573 1963 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Oct 29 00:34:53.545932 kubelet[1963]: I1029 00:34:53.543095 1963 watchdog_linux.go:99] "Systemd watchdog is not enabled" Oct 29 00:34:53.545932 kubelet[1963]: I1029 00:34:53.543126 1963 server.go:1287] "Started kubelet" Oct 29 00:34:53.545932 kubelet[1963]: I1029 00:34:53.543397 1963 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Oct 29 00:34:53.545932 kubelet[1963]: I1029 00:34:53.543543 1963 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Oct 29 00:34:53.545932 kubelet[1963]: I1029 00:34:53.543868 1963 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 29 00:34:53.545932 kubelet[1963]: I1029 00:34:53.544256 1963 server.go:479] "Adding debug handlers to kubelet server" Oct 29 00:34:53.546000 audit[1963]: AVC avc: denied { mac_admin } for pid=1963 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.549530 kubelet[1963]: I1029 00:34:53.547263 1963 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Oct 29 00:34:53.549530 kubelet[1963]: I1029 00:34:53.547342 1963 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Oct 29 00:34:53.549530 kubelet[1963]: I1029 00:34:53.547401 1963 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 29 00:34:53.546000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:53.551604 kernel: audit: type=1400 audit(1761698093.546:805): avc: denied { mac_admin } for pid=1963 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.551646 kernel: audit: type=1401 audit(1761698093.546:805): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:53.551663 kernel: audit: type=1300 audit(1761698093.546:805): arch=c00000b7 syscall=5 success=no exit=-22 a0=40001382d0 a1=4000bd68a0 a2=4000a1bfb0 a3=25 items=0 ppid=1 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:53.546000 audit[1963]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40001382d0 a1=4000bd68a0 a2=4000a1bfb0 a3=25 items=0 ppid=1 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:53.557355 kernel: audit: type=1327 audit(1761698093.546:805): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:53.546000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:53.559505 kubelet[1963]: E1029 00:34:53.559476 1963 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 29 00:34:53.560774 kubelet[1963]: I1029 00:34:53.560750 1963 volume_manager.go:297] "Starting Kubelet Volume Manager" Oct 29 00:34:53.560945 kubelet[1963]: I1029 00:34:53.560911 1963 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Oct 29 00:34:53.561098 kubelet[1963]: E1029 00:34:53.561074 1963 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 29 00:34:53.546000 audit[1963]: AVC avc: denied { mac_admin } for pid=1963 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.563122 kubelet[1963]: I1029 00:34:53.563095 1963 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Oct 29 00:34:53.563248 kubelet[1963]: I1029 00:34:53.563235 1963 reconciler.go:26] "Reconciler: start to sync state" Oct 29 00:34:53.564309 kubelet[1963]: I1029 00:34:53.564287 1963 factory.go:221] Registration of the systemd container factory successfully Oct 29 00:34:53.564416 kernel: audit: type=1400 audit(1761698093.546:806): avc: denied { mac_admin } for pid=1963 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.564465 kubelet[1963]: I1029 00:34:53.564395 1963 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Oct 29 00:34:53.546000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:53.566655 kernel: audit: type=1401 audit(1761698093.546:806): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:53.566723 kernel: audit: type=1300 audit(1761698093.546:806): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a0ee00 a1=4000bd68b8 a2=4000138600 a3=25 items=0 ppid=1 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:53.546000 audit[1963]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a0ee00 a1=4000bd68b8 a2=4000138600 a3=25 items=0 ppid=1 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:53.546000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:53.572414 kubelet[1963]: I1029 00:34:53.572389 1963 factory.go:221] Registration of the containerd container factory successfully Oct 29 00:34:53.576089 kernel: audit: type=1327 audit(1761698093.546:806): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:53.577662 kubelet[1963]: I1029 00:34:53.576522 1963 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 29 00:34:53.577662 kubelet[1963]: I1029 00:34:53.577492 1963 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 29 00:34:53.577662 kubelet[1963]: I1029 00:34:53.577514 1963 status_manager.go:227] "Starting to sync pod status with apiserver" Oct 29 00:34:53.577662 kubelet[1963]: I1029 00:34:53.577533 1963 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Oct 29 00:34:53.577662 kubelet[1963]: I1029 00:34:53.577539 1963 kubelet.go:2382] "Starting kubelet main sync loop" Oct 29 00:34:53.577662 kubelet[1963]: E1029 00:34:53.577583 1963 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 29 00:34:53.608548 kubelet[1963]: I1029 00:34:53.608518 1963 cpu_manager.go:221] "Starting CPU manager" policy="none" Oct 29 00:34:53.608548 kubelet[1963]: I1029 00:34:53.608541 1963 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Oct 29 00:34:53.608686 kubelet[1963]: I1029 00:34:53.608563 1963 state_mem.go:36] "Initialized new in-memory state store" Oct 29 00:34:53.608820 kubelet[1963]: I1029 00:34:53.608796 1963 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 29 00:34:53.608861 kubelet[1963]: I1029 00:34:53.608819 1963 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 29 00:34:53.608861 kubelet[1963]: I1029 00:34:53.608842 1963 policy_none.go:49] "None policy: Start" Oct 29 00:34:53.608861 kubelet[1963]: I1029 00:34:53.608851 1963 memory_manager.go:186] "Starting memorymanager" policy="None" Oct 29 00:34:53.608926 kubelet[1963]: I1029 00:34:53.608863 1963 state_mem.go:35] "Initializing new in-memory state store" Oct 29 00:34:53.608993 kubelet[1963]: I1029 00:34:53.608979 1963 state_mem.go:75] "Updated machine memory state" Oct 29 00:34:53.612591 kubelet[1963]: I1029 00:34:53.612567 1963 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 29 00:34:53.612000 audit[1963]: AVC avc: denied { mac_admin } for pid=1963 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.612832 kubelet[1963]: I1029 00:34:53.612624 1963 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Oct 29 00:34:53.613903 kubelet[1963]: I1029 00:34:53.613857 1963 eviction_manager.go:189] "Eviction manager: starting control loop" Oct 29 00:34:53.613967 kubelet[1963]: I1029 00:34:53.613886 1963 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Oct 29 00:34:53.614238 kubelet[1963]: I1029 00:34:53.614218 1963 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 29 00:34:53.612000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 29 00:34:53.612000 audit[1963]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d93ce0 a1=4001097698 a2=4000d93cb0 a3=25 items=0 ppid=1 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:34:53.612000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 29 00:34:53.616455 kernel: audit: type=1400 audit(1761698093.612:807): avc: denied { mac_admin } for pid=1963 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:34:53.616512 kubelet[1963]: E1029 00:34:53.616453 1963 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Oct 29 00:34:53.678741 kubelet[1963]: I1029 00:34:53.678705 1963 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:53.678916 kubelet[1963]: I1029 00:34:53.678894 1963 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.679005 kubelet[1963]: I1029 00:34:53.678832 1963 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:53.710125 kubelet[1963]: E1029 00:34:53.710083 1963 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:53.716984 kubelet[1963]: I1029 00:34:53.716945 1963 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 29 00:34:53.764727 kubelet[1963]: I1029 00:34:53.764685 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/556ab1427b216bb92a3071d2fd2166a7-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"556ab1427b216bb92a3071d2fd2166a7\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:53.764901 kubelet[1963]: I1029 00:34:53.764884 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.765002 kubelet[1963]: I1029 00:34:53.764976 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.765086 kubelet[1963]: I1029 00:34:53.765072 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/556ab1427b216bb92a3071d2fd2166a7-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"556ab1427b216bb92a3071d2fd2166a7\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:53.765215 kubelet[1963]: I1029 00:34:53.765201 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/556ab1427b216bb92a3071d2fd2166a7-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"556ab1427b216bb92a3071d2fd2166a7\") " pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:53.765299 kubelet[1963]: I1029 00:34:53.765285 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.765382 kubelet[1963]: I1029 00:34:53.765366 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.765478 kubelet[1963]: I1029 00:34:53.765464 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:53.765569 kubelet[1963]: I1029 00:34:53.765554 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a1d51be1ff02022474f2598f6e43038f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a1d51be1ff02022474f2598f6e43038f\") " pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:53.770527 kubelet[1963]: I1029 00:34:53.770503 1963 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Oct 29 00:34:53.770691 kubelet[1963]: I1029 00:34:53.770679 1963 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Oct 29 00:34:54.005745 kubelet[1963]: E1029 00:34:54.005637 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:54.005868 kubelet[1963]: E1029 00:34:54.005802 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:54.011175 kubelet[1963]: E1029 00:34:54.011123 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:54.541019 kubelet[1963]: I1029 00:34:54.540985 1963 apiserver.go:52] "Watching apiserver" Oct 29 00:34:54.563320 kubelet[1963]: I1029 00:34:54.563281 1963 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Oct 29 00:34:54.593937 kubelet[1963]: I1029 00:34:54.593905 1963 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:54.594212 kubelet[1963]: I1029 00:34:54.594185 1963 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:54.594280 kubelet[1963]: I1029 00:34:54.594261 1963 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:54.604206 kubelet[1963]: E1029 00:34:54.604168 1963 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 29 00:34:54.604376 kubelet[1963]: E1029 00:34:54.604177 1963 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 29 00:34:54.604456 kubelet[1963]: E1029 00:34:54.604261 1963 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 29 00:34:54.604544 kubelet[1963]: E1029 00:34:54.604523 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:54.604580 kubelet[1963]: E1029 00:34:54.604550 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:54.604671 kubelet[1963]: E1029 00:34:54.604655 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:54.619354 kubelet[1963]: I1029 00:34:54.619243 1963 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.6191621440000001 podStartE2EDuration="1.619162144s" podCreationTimestamp="2025-10-29 00:34:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:34:54.618926243 +0000 UTC m=+1.147559299" watchObservedRunningTime="2025-10-29 00:34:54.619162144 +0000 UTC m=+1.147795160" Oct 29 00:34:54.640836 kubelet[1963]: I1029 00:34:54.640784 1963 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.640767494 podStartE2EDuration="2.640767494s" podCreationTimestamp="2025-10-29 00:34:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:34:54.632407011 +0000 UTC m=+1.161040067" watchObservedRunningTime="2025-10-29 00:34:54.640767494 +0000 UTC m=+1.169400510" Oct 29 00:34:54.653065 kubelet[1963]: I1029 00:34:54.653014 1963 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.652994578 podStartE2EDuration="1.652994578s" podCreationTimestamp="2025-10-29 00:34:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:34:54.641290349 +0000 UTC m=+1.169923406" watchObservedRunningTime="2025-10-29 00:34:54.652994578 +0000 UTC m=+1.181627634" Oct 29 00:34:54.940000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:54.940000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003feee0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:34:54.940000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:54.940000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:54.940000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d3dcc0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:34:54.940000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:54.941000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:54.941000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:34:54.941000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40001758a0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:34:54.941000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:54.941000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003fef60 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:34:54.941000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:55.595883 kubelet[1963]: E1029 00:34:55.595841 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:55.596523 kubelet[1963]: E1029 00:34:55.596458 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:55.596809 kubelet[1963]: E1029 00:34:55.596787 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:56.597766 kubelet[1963]: E1029 00:34:56.597737 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:57.816000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 29 00:34:57.816000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40011c03c0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:34:57.816000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:34:58.200773 kubelet[1963]: E1029 00:34:58.200666 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:58.385376 kubelet[1963]: E1029 00:34:58.385343 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:58.600565 kubelet[1963]: E1029 00:34:58.600403 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:58.601008 kubelet[1963]: E1029 00:34:58.600968 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:34:59.539399 kubelet[1963]: I1029 00:34:59.539339 1963 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 29 00:34:59.539759 env[1223]: time="2025-10-29T00:34:59.539704805Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 29 00:34:59.539951 kubelet[1963]: I1029 00:34:59.539917 1963 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 29 00:34:59.601519 kubelet[1963]: E1029 00:34:59.601487 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:00.541203 systemd[1]: Created slice kubepods-besteffort-pod747af049_4dbd_4f4c_ae2e_21055073c729.slice. Oct 29 00:35:00.603250 systemd[1]: Created slice kubepods-besteffort-pod6a0d6c53_a933_47e8_a1c2_bdcefd2b3c96.slice. Oct 29 00:35:00.613211 kubelet[1963]: I1029 00:35:00.613181 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/747af049-4dbd-4f4c-ae2e-21055073c729-kube-proxy\") pod \"kube-proxy-h4lkd\" (UID: \"747af049-4dbd-4f4c-ae2e-21055073c729\") " pod="kube-system/kube-proxy-h4lkd" Oct 29 00:35:00.613580 kubelet[1963]: I1029 00:35:00.613559 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/747af049-4dbd-4f4c-ae2e-21055073c729-xtables-lock\") pod \"kube-proxy-h4lkd\" (UID: \"747af049-4dbd-4f4c-ae2e-21055073c729\") " pod="kube-system/kube-proxy-h4lkd" Oct 29 00:35:00.613675 kubelet[1963]: I1029 00:35:00.613661 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/747af049-4dbd-4f4c-ae2e-21055073c729-lib-modules\") pod \"kube-proxy-h4lkd\" (UID: \"747af049-4dbd-4f4c-ae2e-21055073c729\") " pod="kube-system/kube-proxy-h4lkd" Oct 29 00:35:00.613761 kubelet[1963]: I1029 00:35:00.613744 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n2gj4\" (UniqueName: \"kubernetes.io/projected/747af049-4dbd-4f4c-ae2e-21055073c729-kube-api-access-n2gj4\") pod \"kube-proxy-h4lkd\" (UID: \"747af049-4dbd-4f4c-ae2e-21055073c729\") " pod="kube-system/kube-proxy-h4lkd" Oct 29 00:35:00.613851 kubelet[1963]: I1029 00:35:00.613836 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6a0d6c53-a933-47e8-a1c2-bdcefd2b3c96-var-lib-calico\") pod \"tigera-operator-7dcd859c48-5mcxd\" (UID: \"6a0d6c53-a933-47e8-a1c2-bdcefd2b3c96\") " pod="tigera-operator/tigera-operator-7dcd859c48-5mcxd" Oct 29 00:35:00.613943 kubelet[1963]: I1029 00:35:00.613929 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9rcxr\" (UniqueName: \"kubernetes.io/projected/6a0d6c53-a933-47e8-a1c2-bdcefd2b3c96-kube-api-access-9rcxr\") pod \"tigera-operator-7dcd859c48-5mcxd\" (UID: \"6a0d6c53-a933-47e8-a1c2-bdcefd2b3c96\") " pod="tigera-operator/tigera-operator-7dcd859c48-5mcxd" Oct 29 00:35:00.722816 kubelet[1963]: I1029 00:35:00.722780 1963 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Oct 29 00:35:00.850548 kubelet[1963]: E1029 00:35:00.850410 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:00.851570 env[1223]: time="2025-10-29T00:35:00.851500533Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-h4lkd,Uid:747af049-4dbd-4f4c-ae2e-21055073c729,Namespace:kube-system,Attempt:0,}" Oct 29 00:35:00.863969 env[1223]: time="2025-10-29T00:35:00.863911274Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:00.863969 env[1223]: time="2025-10-29T00:35:00.863953762Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:00.864106 env[1223]: time="2025-10-29T00:35:00.863971445Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:00.864223 env[1223]: time="2025-10-29T00:35:00.864189646Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a4b6557d183882e8c610ae99df18a81b3b40a5ea85c19250bf9c45f9ca6075c5 pid=2024 runtime=io.containerd.runc.v2 Oct 29 00:35:00.880737 systemd[1]: Started cri-containerd-a4b6557d183882e8c610ae99df18a81b3b40a5ea85c19250bf9c45f9ca6075c5.scope. Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.900099 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 29 00:35:00.900181 kernel: audit: type=1400 audit(1761698100.895:813): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.900205 kernel: audit: type=1400 audit(1761698100.895:814): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.905693 kernel: audit: type=1400 audit(1761698100.895:815): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.905773 kernel: audit: type=1400 audit(1761698100.895:816): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.909369 kernel: audit: type=1400 audit(1761698100.895:817): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.909785 env[1223]: time="2025-10-29T00:35:00.909741053Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-5mcxd,Uid:6a0d6c53-a933-47e8-a1c2-bdcefd2b3c96,Namespace:tigera-operator,Attempt:0,}" Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.915924 kernel: audit: type=1400 audit(1761698100.895:818): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.915998 kernel: audit: type=1400 audit(1761698100.895:819): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.921690 kernel: audit: type=1400 audit(1761698100.895:820): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.922102 kernel: audit: type=1400 audit(1761698100.895:821): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.928631 kernel: audit: type=1400 audit(1761698100.895:822): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.895000 audit: BPF prog-id=103 op=LOAD Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2024 pid=2033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623635353764313833383832653863363130616539396466313861 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2024 pid=2033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623635353764313833383832653863363130616539396466313861 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.896000 audit: BPF prog-id=104 op=LOAD Oct 29 00:35:00.896000 audit[2033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2024 pid=2033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623635353764313833383832653863363130616539396466313861 Oct 29 00:35:00.898000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.898000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.898000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.898000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.898000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.898000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.898000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.898000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.898000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.898000 audit: BPF prog-id=105 op=LOAD Oct 29 00:35:00.898000 audit[2033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2024 pid=2033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623635353764313833383832653863363130616539396466313861 Oct 29 00:35:00.901000 audit: BPF prog-id=105 op=UNLOAD Oct 29 00:35:00.901000 audit: BPF prog-id=104 op=UNLOAD Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { perfmon } for pid=2033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit[2033]: AVC avc: denied { bpf } for pid=2033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.901000 audit: BPF prog-id=106 op=LOAD Oct 29 00:35:00.901000 audit[2033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2024 pid=2033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134623635353764313833383832653863363130616539396466313861 Oct 29 00:35:00.932501 env[1223]: time="2025-10-29T00:35:00.929256512Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:00.932501 env[1223]: time="2025-10-29T00:35:00.929307762Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:00.932501 env[1223]: time="2025-10-29T00:35:00.929318804Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:00.932501 env[1223]: time="2025-10-29T00:35:00.929471752Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/25d8583c756887217676eccb82af9b8745268bf19f0100f4e8cbec6e94bb2771 pid=2057 runtime=io.containerd.runc.v2 Oct 29 00:35:00.940384 systemd[1]: Started cri-containerd-25d8583c756887217676eccb82af9b8745268bf19f0100f4e8cbec6e94bb2771.scope. Oct 29 00:35:00.946246 env[1223]: time="2025-10-29T00:35:00.946204735Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-h4lkd,Uid:747af049-4dbd-4f4c-ae2e-21055073c729,Namespace:kube-system,Attempt:0,} returns sandbox id \"a4b6557d183882e8c610ae99df18a81b3b40a5ea85c19250bf9c45f9ca6075c5\"" Oct 29 00:35:00.947028 kubelet[1963]: E1029 00:35:00.946954 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:00.949174 env[1223]: time="2025-10-29T00:35:00.949144281Z" level=info msg="CreateContainer within sandbox \"a4b6557d183882e8c610ae99df18a81b3b40a5ea85c19250bf9c45f9ca6075c5\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.957000 audit: BPF prog-id=107 op=LOAD Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2057 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235643835383363373536383837323137363736656363623832616639 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2057 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235643835383363373536383837323137363736656363623832616639 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit: BPF prog-id=108 op=LOAD Oct 29 00:35:00.958000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2057 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235643835383363373536383837323137363736656363623832616639 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit: BPF prog-id=109 op=LOAD Oct 29 00:35:00.958000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2057 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235643835383363373536383837323137363736656363623832616639 Oct 29 00:35:00.958000 audit: BPF prog-id=109 op=UNLOAD Oct 29 00:35:00.958000 audit: BPF prog-id=108 op=UNLOAD Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:00.958000 audit: BPF prog-id=110 op=LOAD Oct 29 00:35:00.958000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2057 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:00.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235643835383363373536383837323137363736656363623832616639 Oct 29 00:35:00.972156 env[1223]: time="2025-10-29T00:35:00.972100418Z" level=info msg="CreateContainer within sandbox \"a4b6557d183882e8c610ae99df18a81b3b40a5ea85c19250bf9c45f9ca6075c5\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"a2b8182810de024b990b25e47d5c926d4f4892d095138becc87754126dd0bf67\"" Oct 29 00:35:00.974936 env[1223]: time="2025-10-29T00:35:00.974890615Z" level=info msg="StartContainer for \"a2b8182810de024b990b25e47d5c926d4f4892d095138becc87754126dd0bf67\"" Oct 29 00:35:00.983385 env[1223]: time="2025-10-29T00:35:00.983349464Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-5mcxd,Uid:6a0d6c53-a933-47e8-a1c2-bdcefd2b3c96,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"25d8583c756887217676eccb82af9b8745268bf19f0100f4e8cbec6e94bb2771\"" Oct 29 00:35:00.984979 env[1223]: time="2025-10-29T00:35:00.984948280Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Oct 29 00:35:00.992365 systemd[1]: Started cri-containerd-a2b8182810de024b990b25e47d5c926d4f4892d095138becc87754126dd0bf67.scope. Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2024 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623831383238313064653032346239393062323565343764356339 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit: BPF prog-id=111 op=LOAD Oct 29 00:35:01.011000 audit[2107]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2024 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623831383238313064653032346239393062323565343764356339 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.011000 audit: BPF prog-id=112 op=LOAD Oct 29 00:35:01.011000 audit[2107]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2024 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623831383238313064653032346239393062323565343764356339 Oct 29 00:35:01.012000 audit: BPF prog-id=112 op=UNLOAD Oct 29 00:35:01.012000 audit: BPF prog-id=111 op=UNLOAD Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:01.012000 audit: BPF prog-id=113 op=LOAD Oct 29 00:35:01.012000 audit[2107]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2024 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623831383238313064653032346239393062323565343764356339 Oct 29 00:35:01.027473 env[1223]: time="2025-10-29T00:35:01.027397941Z" level=info msg="StartContainer for \"a2b8182810de024b990b25e47d5c926d4f4892d095138becc87754126dd0bf67\" returns successfully" Oct 29 00:35:01.170000 audit[2169]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.170000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffed8845f0 a2=0 a3=1 items=0 ppid=2118 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.170000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 29 00:35:01.170000 audit[2170]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.170000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcde97ac0 a2=0 a3=1 items=0 ppid=2118 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.170000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 29 00:35:01.171000 audit[2171]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.171000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe4a59000 a2=0 a3=1 items=0 ppid=2118 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.171000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 29 00:35:01.174000 audit[2172]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.174000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc1f4f80 a2=0 a3=1 items=0 ppid=2118 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.174000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 29 00:35:01.176000 audit[2173]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.176000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc2e2f4f0 a2=0 a3=1 items=0 ppid=2118 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.176000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 29 00:35:01.177000 audit[2174]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.177000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffed9dd2a0 a2=0 a3=1 items=0 ppid=2118 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.177000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 29 00:35:01.274000 audit[2175]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.274000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe5f90410 a2=0 a3=1 items=0 ppid=2118 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.274000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 29 00:35:01.277000 audit[2177]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.277000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffeb9c250 a2=0 a3=1 items=0 ppid=2118 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.277000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 29 00:35:01.280000 audit[2180]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.280000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe3e74e50 a2=0 a3=1 items=0 ppid=2118 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.280000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 29 00:35:01.282000 audit[2181]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.282000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff0624b30 a2=0 a3=1 items=0 ppid=2118 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.282000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 29 00:35:01.286000 audit[2183]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.286000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdae92030 a2=0 a3=1 items=0 ppid=2118 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.286000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 29 00:35:01.286000 audit[2184]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.286000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd068dff0 a2=0 a3=1 items=0 ppid=2118 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.286000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 29 00:35:01.289000 audit[2186]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.289000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff5f4e9f0 a2=0 a3=1 items=0 ppid=2118 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.289000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 29 00:35:01.291000 audit[2189]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.291000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcf57a560 a2=0 a3=1 items=0 ppid=2118 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.291000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 29 00:35:01.292000 audit[2190]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.292000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0addd90 a2=0 a3=1 items=0 ppid=2118 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.292000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 29 00:35:01.294000 audit[2192]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.294000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffd771280 a2=0 a3=1 items=0 ppid=2118 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.294000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 29 00:35:01.295000 audit[2193]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.295000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdbb7f350 a2=0 a3=1 items=0 ppid=2118 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.295000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 29 00:35:01.297000 audit[2195]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.297000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffb2efbe0 a2=0 a3=1 items=0 ppid=2118 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.297000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 29 00:35:01.300000 audit[2198]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.300000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeab40780 a2=0 a3=1 items=0 ppid=2118 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 29 00:35:01.305000 audit[2201]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.305000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff00bec90 a2=0 a3=1 items=0 ppid=2118 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.305000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 29 00:35:01.307000 audit[2202]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.307000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffddeb5e60 a2=0 a3=1 items=0 ppid=2118 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.307000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 29 00:35:01.309000 audit[2204]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.309000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff3f17190 a2=0 a3=1 items=0 ppid=2118 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.309000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 29 00:35:01.312000 audit[2207]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.312000 audit[2207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff8d59120 a2=0 a3=1 items=0 ppid=2118 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 29 00:35:01.313000 audit[2208]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.313000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff0a8e540 a2=0 a3=1 items=0 ppid=2118 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.313000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 29 00:35:01.316000 audit[2210]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 29 00:35:01.316000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffc1940c70 a2=0 a3=1 items=0 ppid=2118 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.316000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 29 00:35:01.337000 audit[2216]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:01.337000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe33d6b80 a2=0 a3=1 items=0 ppid=2118 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.337000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:01.352000 audit[2216]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:01.352000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe33d6b80 a2=0 a3=1 items=0 ppid=2118 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.352000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:01.353000 audit[2221]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.353000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe4944c00 a2=0 a3=1 items=0 ppid=2118 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.353000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 29 00:35:01.362000 audit[2223]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.362000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdee6eea0 a2=0 a3=1 items=0 ppid=2118 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.362000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 29 00:35:01.366000 audit[2226]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.366000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc6fabf50 a2=0 a3=1 items=0 ppid=2118 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.366000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 29 00:35:01.368000 audit[2227]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.368000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea244b30 a2=0 a3=1 items=0 ppid=2118 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.368000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 29 00:35:01.371000 audit[2229]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.371000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffea3ebe90 a2=0 a3=1 items=0 ppid=2118 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.371000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 29 00:35:01.372000 audit[2230]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.372000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe16f9550 a2=0 a3=1 items=0 ppid=2118 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.372000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 29 00:35:01.375000 audit[2232]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.375000 audit[2232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcfe64280 a2=0 a3=1 items=0 ppid=2118 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.375000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 29 00:35:01.378000 audit[2235]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.378000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc8cd61a0 a2=0 a3=1 items=0 ppid=2118 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.378000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 29 00:35:01.379000 audit[2236]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.379000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeae00080 a2=0 a3=1 items=0 ppid=2118 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.379000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 29 00:35:01.381000 audit[2238]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.381000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff8ea99b0 a2=0 a3=1 items=0 ppid=2118 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.381000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 29 00:35:01.383000 audit[2239]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.383000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdc642ca0 a2=0 a3=1 items=0 ppid=2118 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.383000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 29 00:35:01.388000 audit[2241]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.388000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe21744a0 a2=0 a3=1 items=0 ppid=2118 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.388000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 29 00:35:01.391000 audit[2244]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.391000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd3cb2a30 a2=0 a3=1 items=0 ppid=2118 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.391000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 29 00:35:01.394000 audit[2247]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.394000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff26d8c60 a2=0 a3=1 items=0 ppid=2118 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.394000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 29 00:35:01.395000 audit[2248]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.395000 audit[2248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe8341800 a2=0 a3=1 items=0 ppid=2118 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 29 00:35:01.397000 audit[2250]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2250 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.397000 audit[2250]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffc6b078b0 a2=0 a3=1 items=0 ppid=2118 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.397000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 29 00:35:01.401000 audit[2253]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.401000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd1a39df0 a2=0 a3=1 items=0 ppid=2118 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.401000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 29 00:35:01.402000 audit[2254]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.402000 audit[2254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff1de0e90 a2=0 a3=1 items=0 ppid=2118 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.402000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 29 00:35:01.404000 audit[2256]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.404000 audit[2256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffffd196df0 a2=0 a3=1 items=0 ppid=2118 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.404000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 29 00:35:01.405000 audit[2257]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.405000 audit[2257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2bf4b60 a2=0 a3=1 items=0 ppid=2118 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 29 00:35:01.408000 audit[2259]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2259 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.408000 audit[2259]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc7b9dfe0 a2=0 a3=1 items=0 ppid=2118 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.408000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 29 00:35:01.411000 audit[2262]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 29 00:35:01.411000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd0c013e0 a2=0 a3=1 items=0 ppid=2118 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.411000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 29 00:35:01.417000 audit[2264]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 29 00:35:01.417000 audit[2264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffc63d38b0 a2=0 a3=1 items=0 ppid=2118 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.417000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:01.418000 audit[2264]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 29 00:35:01.418000 audit[2264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffc63d38b0 a2=0 a3=1 items=0 ppid=2118 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:01.418000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:01.528447 kubelet[1963]: E1029 00:35:01.528388 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:01.605810 kubelet[1963]: E1029 00:35:01.605777 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:01.607196 kubelet[1963]: E1029 00:35:01.607174 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:01.621572 kubelet[1963]: I1029 00:35:01.621521 1963 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-h4lkd" podStartSLOduration=1.621506562 podStartE2EDuration="1.621506562s" podCreationTimestamp="2025-10-29 00:35:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:35:01.619460163 +0000 UTC m=+8.148093219" watchObservedRunningTime="2025-10-29 00:35:01.621506562 +0000 UTC m=+8.150139618" Oct 29 00:35:02.612405 kubelet[1963]: E1029 00:35:02.612182 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:03.214655 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount471580042.mount: Deactivated successfully. Oct 29 00:35:04.589605 env[1223]: time="2025-10-29T00:35:04.589556665Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:04.591424 env[1223]: time="2025-10-29T00:35:04.591385660Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:04.593367 env[1223]: time="2025-10-29T00:35:04.593315110Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:04.595517 env[1223]: time="2025-10-29T00:35:04.595475114Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:04.596008 env[1223]: time="2025-10-29T00:35:04.595940464Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b\"" Oct 29 00:35:04.598545 env[1223]: time="2025-10-29T00:35:04.598514370Z" level=info msg="CreateContainer within sandbox \"25d8583c756887217676eccb82af9b8745268bf19f0100f4e8cbec6e94bb2771\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 29 00:35:04.615762 env[1223]: time="2025-10-29T00:35:04.615372022Z" level=info msg="CreateContainer within sandbox \"25d8583c756887217676eccb82af9b8745268bf19f0100f4e8cbec6e94bb2771\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469\"" Oct 29 00:35:04.617263 env[1223]: time="2025-10-29T00:35:04.616054045Z" level=info msg="StartContainer for \"73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469\"" Oct 29 00:35:04.632745 systemd[1]: run-containerd-runc-k8s.io-73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469-runc.bDceme.mount: Deactivated successfully. Oct 29 00:35:04.635075 systemd[1]: Started cri-containerd-73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469.scope. Oct 29 00:35:04.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit: BPF prog-id=114 op=LOAD Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2057 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:04.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663832373964666234623932356535666262383266303563626264 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2057 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:04.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663832373964666234623932356535666262383266303563626264 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit: BPF prog-id=115 op=LOAD Oct 29 00:35:04.649000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2057 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:04.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663832373964666234623932356535666262383266303563626264 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit: BPF prog-id=116 op=LOAD Oct 29 00:35:04.649000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2057 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:04.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663832373964666234623932356535666262383266303563626264 Oct 29 00:35:04.649000 audit: BPF prog-id=116 op=UNLOAD Oct 29 00:35:04.649000 audit: BPF prog-id=115 op=UNLOAD Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:04.649000 audit: BPF prog-id=117 op=LOAD Oct 29 00:35:04.649000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2057 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:04.649000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663832373964666234623932356535666262383266303563626264 Oct 29 00:35:04.664134 env[1223]: time="2025-10-29T00:35:04.664069496Z" level=info msg="StartContainer for \"73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469\" returns successfully" Oct 29 00:35:04.959531 update_engine[1214]: I1029 00:35:04.959012 1214 update_attempter.cc:509] Updating boot flags... Oct 29 00:35:06.638786 systemd[1]: cri-containerd-73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469.scope: Deactivated successfully. Oct 29 00:35:06.637000 audit: BPF prog-id=114 op=UNLOAD Oct 29 00:35:06.640248 kernel: kauditd_printk_skb: 357 callbacks suppressed Oct 29 00:35:06.640306 kernel: audit: type=1334 audit(1761698106.637:924): prog-id=114 op=UNLOAD Oct 29 00:35:06.643000 audit: BPF prog-id=117 op=UNLOAD Oct 29 00:35:06.646465 kernel: audit: type=1334 audit(1761698106.643:925): prog-id=117 op=UNLOAD Oct 29 00:35:06.679719 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469-rootfs.mount: Deactivated successfully. Oct 29 00:35:06.789057 env[1223]: time="2025-10-29T00:35:06.789003121Z" level=info msg="shim disconnected" id=73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469 Oct 29 00:35:06.789057 env[1223]: time="2025-10-29T00:35:06.789052928Z" level=warning msg="cleaning up after shim disconnected" id=73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469 namespace=k8s.io Oct 29 00:35:06.789057 env[1223]: time="2025-10-29T00:35:06.789066210Z" level=info msg="cleaning up dead shim" Oct 29 00:35:06.806988 env[1223]: time="2025-10-29T00:35:06.806902590Z" level=warning msg="cleanup warnings time=\"2025-10-29T00:35:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2330 runtime=io.containerd.runc.v2\n" Oct 29 00:35:07.626656 kubelet[1963]: I1029 00:35:07.626621 1963 scope.go:117] "RemoveContainer" containerID="73f8279dfb4b925e5fbb82f05cbbd6e20521e138ace3b049f7342676cc3f4469" Oct 29 00:35:07.629024 env[1223]: time="2025-10-29T00:35:07.628074371Z" level=info msg="CreateContainer within sandbox \"25d8583c756887217676eccb82af9b8745268bf19f0100f4e8cbec6e94bb2771\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Oct 29 00:35:07.646759 env[1223]: time="2025-10-29T00:35:07.646611604Z" level=info msg="CreateContainer within sandbox \"25d8583c756887217676eccb82af9b8745268bf19f0100f4e8cbec6e94bb2771\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"de5c46288908f51bdd434aacbf8d2c94dea05f98f6834a6ea551807680a3aafb\"" Oct 29 00:35:07.647571 env[1223]: time="2025-10-29T00:35:07.647381824Z" level=info msg="StartContainer for \"de5c46288908f51bdd434aacbf8d2c94dea05f98f6834a6ea551807680a3aafb\"" Oct 29 00:35:07.671378 systemd[1]: Started cri-containerd-de5c46288908f51bdd434aacbf8d2c94dea05f98f6834a6ea551807680a3aafb.scope. Oct 29 00:35:07.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.698193 kernel: audit: type=1400 audit(1761698107.691:926): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.698265 kernel: audit: type=1400 audit(1761698107.691:927): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.701052 kernel: audit: type=1400 audit(1761698107.691:928): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.701124 kernel: audit: type=1400 audit(1761698107.691:929): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.708570 kernel: audit: type=1400 audit(1761698107.691:930): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.708755 kernel: audit: type=1400 audit(1761698107.691:931): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.715370 kernel: audit: type=1400 audit(1761698107.691:932): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.715481 kernel: audit: type=1400 audit(1761698107.691:933): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.694000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.694000 audit: BPF prog-id=118 op=LOAD Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2057 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:07.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465356334363238383930386635316264643433346161636266386432 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2057 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:07.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465356334363238383930386635316264643433346161636266386432 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.697000 audit: BPF prog-id=119 op=LOAD Oct 29 00:35:07.697000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2057 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:07.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465356334363238383930386635316264643433346161636266386432 Oct 29 00:35:07.700000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.700000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.700000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.700000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.700000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.700000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.700000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.700000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.700000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.700000 audit: BPF prog-id=120 op=LOAD Oct 29 00:35:07.700000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2057 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:07.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465356334363238383930386635316264643433346161636266386432 Oct 29 00:35:07.703000 audit: BPF prog-id=120 op=UNLOAD Oct 29 00:35:07.703000 audit: BPF prog-id=119 op=UNLOAD Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:07.703000 audit: BPF prog-id=121 op=LOAD Oct 29 00:35:07.703000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2057 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:07.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465356334363238383930386635316264643433346161636266386432 Oct 29 00:35:07.734690 env[1223]: time="2025-10-29T00:35:07.734632329Z" level=info msg="StartContainer for \"de5c46288908f51bdd434aacbf8d2c94dea05f98f6834a6ea551807680a3aafb\" returns successfully" Oct 29 00:35:08.640287 kubelet[1963]: I1029 00:35:08.639618 1963 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-5mcxd" podStartSLOduration=5.027158181 podStartE2EDuration="8.639600917s" podCreationTimestamp="2025-10-29 00:35:00 +0000 UTC" firstStartedPulling="2025-10-29 00:35:00.98451288 +0000 UTC m=+7.513145936" lastFinishedPulling="2025-10-29 00:35:04.596955616 +0000 UTC m=+11.125588672" observedRunningTime="2025-10-29 00:35:05.631605763 +0000 UTC m=+12.160238819" watchObservedRunningTime="2025-10-29 00:35:08.639600917 +0000 UTC m=+15.168233973" Oct 29 00:35:10.022607 sudo[1359]: pam_unix(sudo:session): session closed for user root Oct 29 00:35:10.022000 audit[1359]: USER_END pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:35:10.022000 audit[1359]: CRED_DISP pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 29 00:35:10.025397 sshd[1355]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:10.025000 audit[1355]: USER_END pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:10.026000 audit[1355]: CRED_DISP pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:10.028214 systemd[1]: sshd@6-10.0.0.79:22-10.0.0.1:39910.service: Deactivated successfully. Oct 29 00:35:10.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.79:22-10.0.0.1:39910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:10.028956 systemd[1]: session-7.scope: Deactivated successfully. Oct 29 00:35:10.029118 systemd[1]: session-7.scope: Consumed 7.279s CPU time. Oct 29 00:35:10.029560 systemd-logind[1211]: Session 7 logged out. Waiting for processes to exit. Oct 29 00:35:10.030492 systemd-logind[1211]: Removed session 7. Oct 29 00:35:13.455000 audit[2437]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.458247 kernel: kauditd_printk_skb: 54 callbacks suppressed Oct 29 00:35:13.458348 kernel: audit: type=1325 audit(1761698113.455:949): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.455000 audit[2437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd5119d20 a2=0 a3=1 items=0 ppid=2118 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.466003 kernel: audit: type=1300 audit(1761698113.455:949): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd5119d20 a2=0 a3=1 items=0 ppid=2118 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.455000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.469478 kernel: audit: type=1327 audit(1761698113.455:949): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.469000 audit[2437]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.473476 kernel: audit: type=1325 audit(1761698113.469:950): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2437 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.469000 audit[2437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd5119d20 a2=0 a3=1 items=0 ppid=2118 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.469000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.482103 kernel: audit: type=1300 audit(1761698113.469:950): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd5119d20 a2=0 a3=1 items=0 ppid=2118 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.482202 kernel: audit: type=1327 audit(1761698113.469:950): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.495000 audit[2439]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2439 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.495000 audit[2439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd16bba60 a2=0 a3=1 items=0 ppid=2118 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.504584 kernel: audit: type=1325 audit(1761698113.495:951): table=filter:91 family=2 entries=16 op=nft_register_rule pid=2439 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.504675 kernel: audit: type=1300 audit(1761698113.495:951): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd16bba60 a2=0 a3=1 items=0 ppid=2118 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.495000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.506901 kernel: audit: type=1327 audit(1761698113.495:951): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.508000 audit[2439]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2439 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:13.508000 audit[2439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd16bba60 a2=0 a3=1 items=0 ppid=2118 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:13.508000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:13.511456 kernel: audit: type=1325 audit(1761698113.508:952): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2439 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:17.839000 audit[2442]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2442 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:17.839000 audit[2442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeda4b940 a2=0 a3=1 items=0 ppid=2118 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:17.839000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:17.845000 audit[2442]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2442 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:17.845000 audit[2442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeda4b940 a2=0 a3=1 items=0 ppid=2118 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:17.845000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:17.867000 audit[2444]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2444 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:17.867000 audit[2444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffddddc9c0 a2=0 a3=1 items=0 ppid=2118 pid=2444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:17.867000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:17.872000 audit[2444]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2444 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:17.872000 audit[2444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffddddc9c0 a2=0 a3=1 items=0 ppid=2118 pid=2444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:17.872000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:18.888000 audit[2447]: NETFILTER_CFG table=filter:97 family=2 entries=19 op=nft_register_rule pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:18.890540 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 29 00:35:18.890626 kernel: audit: type=1325 audit(1761698118.888:957): table=filter:97 family=2 entries=19 op=nft_register_rule pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:18.888000 audit[2447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff76f7950 a2=0 a3=1 items=0 ppid=2118 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:18.896519 kernel: audit: type=1300 audit(1761698118.888:957): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff76f7950 a2=0 a3=1 items=0 ppid=2118 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:18.896604 kernel: audit: type=1327 audit(1761698118.888:957): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:18.888000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:18.902000 audit[2447]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:18.902000 audit[2447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff76f7950 a2=0 a3=1 items=0 ppid=2118 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:18.910387 kernel: audit: type=1325 audit(1761698118.902:958): table=nat:98 family=2 entries=12 op=nft_register_rule pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:18.910503 kernel: audit: type=1300 audit(1761698118.902:958): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff76f7950 a2=0 a3=1 items=0 ppid=2118 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:18.910537 kernel: audit: type=1327 audit(1761698118.902:958): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:18.902000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:20.542000 audit[2449]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:20.542000 audit[2449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffffcd344d0 a2=0 a3=1 items=0 ppid=2118 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:20.549643 kernel: audit: type=1325 audit(1761698120.542:959): table=filter:99 family=2 entries=21 op=nft_register_rule pid=2449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:20.549749 kernel: audit: type=1300 audit(1761698120.542:959): arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffffcd344d0 a2=0 a3=1 items=0 ppid=2118 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:20.549925 kernel: audit: type=1327 audit(1761698120.542:959): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:20.542000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:20.555000 audit[2449]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:20.555000 audit[2449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffcd344d0 a2=0 a3=1 items=0 ppid=2118 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:20.555000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:20.559462 kernel: audit: type=1325 audit(1761698120.555:960): table=nat:100 family=2 entries=12 op=nft_register_rule pid=2449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:20.581337 systemd[1]: Created slice kubepods-besteffort-pod17dd2948_3609_4251_8da8_173b190acabf.slice. Oct 29 00:35:20.653501 kubelet[1963]: I1029 00:35:20.653406 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/17dd2948-3609-4251-8da8-173b190acabf-tigera-ca-bundle\") pod \"calico-typha-5b7985cc75-ss7xk\" (UID: \"17dd2948-3609-4251-8da8-173b190acabf\") " pod="calico-system/calico-typha-5b7985cc75-ss7xk" Oct 29 00:35:20.654004 kubelet[1963]: I1029 00:35:20.653979 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/17dd2948-3609-4251-8da8-173b190acabf-typha-certs\") pod \"calico-typha-5b7985cc75-ss7xk\" (UID: \"17dd2948-3609-4251-8da8-173b190acabf\") " pod="calico-system/calico-typha-5b7985cc75-ss7xk" Oct 29 00:35:20.654098 kubelet[1963]: I1029 00:35:20.654083 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cnjbq\" (UniqueName: \"kubernetes.io/projected/17dd2948-3609-4251-8da8-173b190acabf-kube-api-access-cnjbq\") pod \"calico-typha-5b7985cc75-ss7xk\" (UID: \"17dd2948-3609-4251-8da8-173b190acabf\") " pod="calico-system/calico-typha-5b7985cc75-ss7xk" Oct 29 00:35:20.679135 systemd[1]: Created slice kubepods-besteffort-pode1c0d2cf_db5e_4bd4_8a55_b6809cd48efe.slice. Oct 29 00:35:20.755217 kubelet[1963]: I1029 00:35:20.755167 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-var-lib-calico\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755217 kubelet[1963]: I1029 00:35:20.755208 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-xtables-lock\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755383 kubelet[1963]: I1029 00:35:20.755244 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-cni-log-dir\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755383 kubelet[1963]: I1029 00:35:20.755264 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-lib-modules\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755383 kubelet[1963]: I1029 00:35:20.755282 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-policysync\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755383 kubelet[1963]: I1029 00:35:20.755299 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l5zg7\" (UniqueName: \"kubernetes.io/projected/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-kube-api-access-l5zg7\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755383 kubelet[1963]: I1029 00:35:20.755320 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-node-certs\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755567 kubelet[1963]: I1029 00:35:20.755336 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-tigera-ca-bundle\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755567 kubelet[1963]: I1029 00:35:20.755354 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-cni-net-dir\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755567 kubelet[1963]: I1029 00:35:20.755370 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-flexvol-driver-host\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755567 kubelet[1963]: I1029 00:35:20.755384 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-var-run-calico\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.755567 kubelet[1963]: I1029 00:35:20.755420 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe-cni-bin-dir\") pod \"calico-node-sdhkw\" (UID: \"e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe\") " pod="calico-system/calico-node-sdhkw" Oct 29 00:35:20.850216 kubelet[1963]: E1029 00:35:20.850111 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:35:20.860594 kubelet[1963]: E1029 00:35:20.860560 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.860594 kubelet[1963]: W1029 00:35:20.860588 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.864650 kubelet[1963]: E1029 00:35:20.864611 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.875098 kubelet[1963]: E1029 00:35:20.875074 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.875098 kubelet[1963]: W1029 00:35:20.875094 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.875241 kubelet[1963]: E1029 00:35:20.875111 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.885224 kubelet[1963]: E1029 00:35:20.885198 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:20.886100 env[1223]: time="2025-10-29T00:35:20.886061357Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5b7985cc75-ss7xk,Uid:17dd2948-3609-4251-8da8-173b190acabf,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:20.910612 env[1223]: time="2025-10-29T00:35:20.910369894Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:20.910612 env[1223]: time="2025-10-29T00:35:20.910416297Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:20.910916 env[1223]: time="2025-10-29T00:35:20.910863530Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:20.912121 env[1223]: time="2025-10-29T00:35:20.911584183Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f302e1d81332e0a85d19e8f4b94e8c19d33ebc40291fe3c1a4e32e291b7bb0d3 pid=2465 runtime=io.containerd.runc.v2 Oct 29 00:35:20.924460 systemd[1]: Started cri-containerd-f302e1d81332e0a85d19e8f4b94e8c19d33ebc40291fe3c1a4e32e291b7bb0d3.scope. Oct 29 00:35:20.942971 kubelet[1963]: E1029 00:35:20.942941 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.942971 kubelet[1963]: W1029 00:35:20.942965 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.943203 kubelet[1963]: E1029 00:35:20.942987 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.943234 kubelet[1963]: E1029 00:35:20.943201 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.943267 kubelet[1963]: W1029 00:35:20.943211 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.943267 kubelet[1963]: E1029 00:35:20.943254 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.943564 kubelet[1963]: E1029 00:35:20.943548 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.943607 kubelet[1963]: W1029 00:35:20.943563 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.943607 kubelet[1963]: E1029 00:35:20.943575 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.943774 kubelet[1963]: E1029 00:35:20.943761 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.943815 kubelet[1963]: W1029 00:35:20.943774 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.943815 kubelet[1963]: E1029 00:35:20.943785 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.944093 kubelet[1963]: E1029 00:35:20.944080 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.944133 kubelet[1963]: W1029 00:35:20.944094 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.944133 kubelet[1963]: E1029 00:35:20.944106 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.944273 kubelet[1963]: E1029 00:35:20.944261 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.944273 kubelet[1963]: W1029 00:35:20.944273 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.944328 kubelet[1963]: E1029 00:35:20.944281 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.944418 kubelet[1963]: E1029 00:35:20.944406 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.944418 kubelet[1963]: W1029 00:35:20.944417 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.944498 kubelet[1963]: E1029 00:35:20.944426 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.944572 kubelet[1963]: E1029 00:35:20.944561 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.944572 kubelet[1963]: W1029 00:35:20.944571 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.944637 kubelet[1963]: E1029 00:35:20.944578 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.944723 kubelet[1963]: E1029 00:35:20.944710 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.944723 kubelet[1963]: W1029 00:35:20.944721 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.944790 kubelet[1963]: E1029 00:35:20.944728 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.944858 kubelet[1963]: E1029 00:35:20.944845 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.944858 kubelet[1963]: W1029 00:35:20.944856 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.944930 kubelet[1963]: E1029 00:35:20.944863 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.944991 kubelet[1963]: E1029 00:35:20.944980 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.944991 kubelet[1963]: W1029 00:35:20.944989 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.945064 kubelet[1963]: E1029 00:35:20.944997 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.944000 audit: BPF prog-id=122 op=LOAD Oct 29 00:35:20.945584 kubelet[1963]: E1029 00:35:20.945107 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.945584 kubelet[1963]: W1029 00:35:20.945114 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.945584 kubelet[1963]: E1029 00:35:20.945121 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.945584 kubelet[1963]: E1029 00:35:20.945245 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.945584 kubelet[1963]: W1029 00:35:20.945251 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.945584 kubelet[1963]: E1029 00:35:20.945263 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.945584 kubelet[1963]: E1029 00:35:20.945406 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.945584 kubelet[1963]: W1029 00:35:20.945413 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.945584 kubelet[1963]: E1029 00:35:20.945422 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2465 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:20.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303265316438313333326530613835643139653866346239346538 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2465 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:20.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303265316438313333326530613835643139653866346239346538 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit: BPF prog-id=123 op=LOAD Oct 29 00:35:20.945000 audit[2475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2465 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:20.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303265316438313333326530613835643139653866346239346538 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit: BPF prog-id=124 op=LOAD Oct 29 00:35:20.945000 audit[2475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2465 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:20.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303265316438313333326530613835643139653866346239346538 Oct 29 00:35:20.945000 audit: BPF prog-id=124 op=UNLOAD Oct 29 00:35:20.945000 audit: BPF prog-id=123 op=UNLOAD Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { perfmon } for pid=2475 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit[2475]: AVC avc: denied { bpf } for pid=2475 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:20.945000 audit: BPF prog-id=125 op=LOAD Oct 29 00:35:20.945000 audit[2475]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2465 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:20.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633303265316438313333326530613835643139653866346239346538 Oct 29 00:35:20.947606 kubelet[1963]: E1029 00:35:20.945809 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.947606 kubelet[1963]: W1029 00:35:20.945821 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.947606 kubelet[1963]: E1029 00:35:20.945834 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.947606 kubelet[1963]: E1029 00:35:20.946465 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.947606 kubelet[1963]: W1029 00:35:20.946476 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.947606 kubelet[1963]: E1029 00:35:20.946488 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.947606 kubelet[1963]: E1029 00:35:20.946777 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.947606 kubelet[1963]: W1029 00:35:20.946788 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.947606 kubelet[1963]: E1029 00:35:20.946798 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.947606 kubelet[1963]: E1029 00:35:20.946953 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.947843 kubelet[1963]: W1029 00:35:20.946961 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.947843 kubelet[1963]: E1029 00:35:20.946969 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.947843 kubelet[1963]: E1029 00:35:20.947115 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.947843 kubelet[1963]: W1029 00:35:20.947123 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.947843 kubelet[1963]: E1029 00:35:20.947131 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.947843 kubelet[1963]: E1029 00:35:20.947526 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.947843 kubelet[1963]: W1029 00:35:20.947537 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.947843 kubelet[1963]: E1029 00:35:20.947547 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.959442 kubelet[1963]: E1029 00:35:20.958744 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.959442 kubelet[1963]: W1029 00:35:20.958782 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.959442 kubelet[1963]: E1029 00:35:20.958797 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.959442 kubelet[1963]: I1029 00:35:20.958821 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/8d7ebf96-f131-40c2-9801-3bcd40c3dda3-registration-dir\") pod \"csi-node-driver-ztr7c\" (UID: \"8d7ebf96-f131-40c2-9801-3bcd40c3dda3\") " pod="calico-system/csi-node-driver-ztr7c" Oct 29 00:35:20.959442 kubelet[1963]: E1029 00:35:20.959008 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.959442 kubelet[1963]: W1029 00:35:20.959017 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.959442 kubelet[1963]: E1029 00:35:20.959028 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.959442 kubelet[1963]: I1029 00:35:20.959042 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/8d7ebf96-f131-40c2-9801-3bcd40c3dda3-kubelet-dir\") pod \"csi-node-driver-ztr7c\" (UID: \"8d7ebf96-f131-40c2-9801-3bcd40c3dda3\") " pod="calico-system/csi-node-driver-ztr7c" Oct 29 00:35:20.959442 kubelet[1963]: E1029 00:35:20.959278 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.959767 kubelet[1963]: W1029 00:35:20.959288 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.959767 kubelet[1963]: E1029 00:35:20.959337 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.959767 kubelet[1963]: I1029 00:35:20.959357 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/8d7ebf96-f131-40c2-9801-3bcd40c3dda3-varrun\") pod \"csi-node-driver-ztr7c\" (UID: \"8d7ebf96-f131-40c2-9801-3bcd40c3dda3\") " pod="calico-system/csi-node-driver-ztr7c" Oct 29 00:35:20.960083 kubelet[1963]: E1029 00:35:20.959938 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.960083 kubelet[1963]: W1029 00:35:20.959975 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.960083 kubelet[1963]: E1029 00:35:20.959996 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.963679 kubelet[1963]: E1029 00:35:20.960258 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.963679 kubelet[1963]: W1029 00:35:20.960270 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.963679 kubelet[1963]: E1029 00:35:20.960288 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.963679 kubelet[1963]: E1029 00:35:20.960844 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.963679 kubelet[1963]: W1029 00:35:20.960900 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.963679 kubelet[1963]: E1029 00:35:20.960931 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.963679 kubelet[1963]: I1029 00:35:20.960950 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/8d7ebf96-f131-40c2-9801-3bcd40c3dda3-socket-dir\") pod \"csi-node-driver-ztr7c\" (UID: \"8d7ebf96-f131-40c2-9801-3bcd40c3dda3\") " pod="calico-system/csi-node-driver-ztr7c" Oct 29 00:35:20.963679 kubelet[1963]: E1029 00:35:20.961707 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.963679 kubelet[1963]: W1029 00:35:20.961722 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.963973 kubelet[1963]: E1029 00:35:20.961801 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.963973 kubelet[1963]: I1029 00:35:20.961839 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b6ttw\" (UniqueName: \"kubernetes.io/projected/8d7ebf96-f131-40c2-9801-3bcd40c3dda3-kube-api-access-b6ttw\") pod \"csi-node-driver-ztr7c\" (UID: \"8d7ebf96-f131-40c2-9801-3bcd40c3dda3\") " pod="calico-system/csi-node-driver-ztr7c" Oct 29 00:35:20.963973 kubelet[1963]: E1029 00:35:20.962217 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.963973 kubelet[1963]: W1029 00:35:20.962229 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.963973 kubelet[1963]: E1029 00:35:20.962290 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.963973 kubelet[1963]: E1029 00:35:20.962468 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.963973 kubelet[1963]: W1029 00:35:20.962479 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.963973 kubelet[1963]: E1029 00:35:20.962532 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.963973 kubelet[1963]: E1029 00:35:20.962642 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.964166 kubelet[1963]: W1029 00:35:20.962650 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.964166 kubelet[1963]: E1029 00:35:20.962689 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.964166 kubelet[1963]: E1029 00:35:20.962785 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.964166 kubelet[1963]: W1029 00:35:20.962793 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.964166 kubelet[1963]: E1029 00:35:20.962806 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.964166 kubelet[1963]: E1029 00:35:20.962933 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.964166 kubelet[1963]: W1029 00:35:20.962940 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.964166 kubelet[1963]: E1029 00:35:20.962950 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.964166 kubelet[1963]: E1029 00:35:20.963186 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.964166 kubelet[1963]: W1029 00:35:20.963193 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.964373 kubelet[1963]: E1029 00:35:20.963201 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.964373 kubelet[1963]: E1029 00:35:20.963349 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.964373 kubelet[1963]: W1029 00:35:20.963359 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.964373 kubelet[1963]: E1029 00:35:20.963369 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.964373 kubelet[1963]: E1029 00:35:20.963590 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:20.964373 kubelet[1963]: W1029 00:35:20.963601 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:20.964373 kubelet[1963]: E1029 00:35:20.963611 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:20.971992 env[1223]: time="2025-10-29T00:35:20.971932113Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5b7985cc75-ss7xk,Uid:17dd2948-3609-4251-8da8-173b190acabf,Namespace:calico-system,Attempt:0,} returns sandbox id \"f302e1d81332e0a85d19e8f4b94e8c19d33ebc40291fe3c1a4e32e291b7bb0d3\"" Oct 29 00:35:20.973116 kubelet[1963]: E1029 00:35:20.972911 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:20.977465 env[1223]: time="2025-10-29T00:35:20.973682681Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Oct 29 00:35:20.981883 kubelet[1963]: E1029 00:35:20.981846 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:20.982320 env[1223]: time="2025-10-29T00:35:20.982278469Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-sdhkw,Uid:e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:21.004522 env[1223]: time="2025-10-29T00:35:21.004458560Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:21.004657 env[1223]: time="2025-10-29T00:35:21.004531405Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:21.004657 env[1223]: time="2025-10-29T00:35:21.004562567Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:21.005020 env[1223]: time="2025-10-29T00:35:21.004758581Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf162581365a47cc4ec80da560b45dd4f951ce8ec5f2a3272b38828b1c8283ae pid=2543 runtime=io.containerd.runc.v2 Oct 29 00:35:21.018831 systemd[1]: Started cri-containerd-bf162581365a47cc4ec80da560b45dd4f951ce8ec5f2a3272b38828b1c8283ae.scope. Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit: BPF prog-id=126 op=LOAD Oct 29 00:35:21.036000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.036000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2543 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313632353831333635613437636334656338306461353630623435 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2543 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313632353831333635613437636334656338306461353630623435 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit: BPF prog-id=127 op=LOAD Oct 29 00:35:21.037000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2543 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313632353831333635613437636334656338306461353630623435 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit: BPF prog-id=128 op=LOAD Oct 29 00:35:21.037000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2543 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313632353831333635613437636334656338306461353630623435 Oct 29 00:35:21.037000 audit: BPF prog-id=128 op=UNLOAD Oct 29 00:35:21.037000 audit: BPF prog-id=127 op=UNLOAD Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:21.037000 audit: BPF prog-id=129 op=LOAD Oct 29 00:35:21.037000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2543 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266313632353831333635613437636334656338306461353630623435 Oct 29 00:35:21.051199 env[1223]: time="2025-10-29T00:35:21.051145367Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-sdhkw,Uid:e1c0d2cf-db5e-4bd4-8a55-b6809cd48efe,Namespace:calico-system,Attempt:0,} returns sandbox id \"bf162581365a47cc4ec80da560b45dd4f951ce8ec5f2a3272b38828b1c8283ae\"" Oct 29 00:35:21.051752 kubelet[1963]: E1029 00:35:21.051727 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:21.064146 kubelet[1963]: E1029 00:35:21.064120 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.064321 kubelet[1963]: W1029 00:35:21.064306 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.064400 kubelet[1963]: E1029 00:35:21.064384 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.064774 kubelet[1963]: E1029 00:35:21.064761 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.064865 kubelet[1963]: W1029 00:35:21.064852 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.064937 kubelet[1963]: E1029 00:35:21.064925 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.065182 kubelet[1963]: E1029 00:35:21.065170 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.065265 kubelet[1963]: W1029 00:35:21.065252 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.065375 kubelet[1963]: E1029 00:35:21.065361 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.065840 kubelet[1963]: E1029 00:35:21.065823 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.065903 kubelet[1963]: W1029 00:35:21.065841 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.065931 kubelet[1963]: E1029 00:35:21.065908 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.066239 kubelet[1963]: E1029 00:35:21.066226 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.066285 kubelet[1963]: W1029 00:35:21.066241 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.066285 kubelet[1963]: E1029 00:35:21.066253 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.066632 kubelet[1963]: E1029 00:35:21.066618 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.066632 kubelet[1963]: W1029 00:35:21.066633 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.066747 kubelet[1963]: E1029 00:35:21.066651 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.066890 kubelet[1963]: E1029 00:35:21.066877 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.066890 kubelet[1963]: W1029 00:35:21.066889 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.066970 kubelet[1963]: E1029 00:35:21.066917 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.067028 kubelet[1963]: E1029 00:35:21.067016 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.067028 kubelet[1963]: W1029 00:35:21.067026 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.067097 kubelet[1963]: E1029 00:35:21.067047 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.067166 kubelet[1963]: E1029 00:35:21.067157 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.067166 kubelet[1963]: W1029 00:35:21.067165 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.067242 kubelet[1963]: E1029 00:35:21.067190 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.067311 kubelet[1963]: E1029 00:35:21.067300 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.067357 kubelet[1963]: W1029 00:35:21.067311 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.067357 kubelet[1963]: E1029 00:35:21.067332 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.067471 kubelet[1963]: E1029 00:35:21.067460 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.067471 kubelet[1963]: W1029 00:35:21.067470 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.067579 kubelet[1963]: E1029 00:35:21.067483 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.067673 kubelet[1963]: E1029 00:35:21.067663 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.067746 kubelet[1963]: W1029 00:35:21.067674 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.067746 kubelet[1963]: E1029 00:35:21.067687 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.067851 kubelet[1963]: E1029 00:35:21.067841 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.067851 kubelet[1963]: W1029 00:35:21.067851 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.067927 kubelet[1963]: E1029 00:35:21.067863 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.067999 kubelet[1963]: E1029 00:35:21.067990 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.067999 kubelet[1963]: W1029 00:35:21.067999 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.068059 kubelet[1963]: E1029 00:35:21.068010 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.068174 kubelet[1963]: E1029 00:35:21.068164 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.068210 kubelet[1963]: W1029 00:35:21.068176 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.068210 kubelet[1963]: E1029 00:35:21.068188 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.068329 kubelet[1963]: E1029 00:35:21.068319 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.068329 kubelet[1963]: W1029 00:35:21.068329 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.068401 kubelet[1963]: E1029 00:35:21.068340 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.068563 kubelet[1963]: E1029 00:35:21.068551 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.068624 kubelet[1963]: W1029 00:35:21.068563 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.068624 kubelet[1963]: E1029 00:35:21.068588 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.068728 kubelet[1963]: E1029 00:35:21.068713 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.068728 kubelet[1963]: W1029 00:35:21.068723 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.068796 kubelet[1963]: E1029 00:35:21.068745 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.068864 kubelet[1963]: E1029 00:35:21.068852 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.068864 kubelet[1963]: W1029 00:35:21.068862 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.068949 kubelet[1963]: E1029 00:35:21.068878 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.068995 kubelet[1963]: E1029 00:35:21.068979 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.068995 kubelet[1963]: W1029 00:35:21.068989 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.069047 kubelet[1963]: E1029 00:35:21.069002 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.069164 kubelet[1963]: E1029 00:35:21.069151 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.069164 kubelet[1963]: W1029 00:35:21.069161 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.069222 kubelet[1963]: E1029 00:35:21.069174 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.069503 kubelet[1963]: E1029 00:35:21.069483 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.069503 kubelet[1963]: W1029 00:35:21.069500 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.069597 kubelet[1963]: E1029 00:35:21.069516 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.069763 kubelet[1963]: E1029 00:35:21.069749 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.069763 kubelet[1963]: W1029 00:35:21.069763 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.069853 kubelet[1963]: E1029 00:35:21.069779 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.070127 kubelet[1963]: E1029 00:35:21.070092 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.070127 kubelet[1963]: W1029 00:35:21.070107 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.070127 kubelet[1963]: E1029 00:35:21.070124 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.070473 kubelet[1963]: E1029 00:35:21.070457 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.070473 kubelet[1963]: W1029 00:35:21.070471 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.070553 kubelet[1963]: E1029 00:35:21.070482 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.079872 kubelet[1963]: E1029 00:35:21.079849 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:21.079872 kubelet[1963]: W1029 00:35:21.079869 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:21.079977 kubelet[1963]: E1029 00:35:21.079888 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:21.572000 audit[2603]: NETFILTER_CFG table=filter:101 family=2 entries=22 op=nft_register_rule pid=2603 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:21.572000 audit[2603]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffdd97c670 a2=0 a3=1 items=0 ppid=2118 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.572000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:21.579000 audit[2603]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=2603 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:21.579000 audit[2603]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdd97c670 a2=0 a3=1 items=0 ppid=2118 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:21.579000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:21.993323 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount35573692.mount: Deactivated successfully. Oct 29 00:35:22.578855 kubelet[1963]: E1029 00:35:22.578793 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:35:22.628294 env[1223]: time="2025-10-29T00:35:22.628184655Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:22.631054 env[1223]: time="2025-10-29T00:35:22.631012807Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:22.632516 env[1223]: time="2025-10-29T00:35:22.632425823Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:22.634469 env[1223]: time="2025-10-29T00:35:22.634437800Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:22.635015 env[1223]: time="2025-10-29T00:35:22.634980236Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b\"" Oct 29 00:35:22.640646 env[1223]: time="2025-10-29T00:35:22.640572576Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Oct 29 00:35:22.657207 env[1223]: time="2025-10-29T00:35:22.657166983Z" level=info msg="CreateContainer within sandbox \"f302e1d81332e0a85d19e8f4b94e8c19d33ebc40291fe3c1a4e32e291b7bb0d3\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 29 00:35:22.665909 env[1223]: time="2025-10-29T00:35:22.665862494Z" level=info msg="CreateContainer within sandbox \"f302e1d81332e0a85d19e8f4b94e8c19d33ebc40291fe3c1a4e32e291b7bb0d3\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"34b9e16317d3a340d7f7c0b8641d17d0237d23b9928315caa08efa41a54af527\"" Oct 29 00:35:22.667685 env[1223]: time="2025-10-29T00:35:22.666519979Z" level=info msg="StartContainer for \"34b9e16317d3a340d7f7c0b8641d17d0237d23b9928315caa08efa41a54af527\"" Oct 29 00:35:22.680898 systemd[1]: Started cri-containerd-34b9e16317d3a340d7f7c0b8641d17d0237d23b9928315caa08efa41a54af527.scope. Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit: BPF prog-id=130 op=LOAD Oct 29 00:35:22.701000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[2614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2465 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623965313633313764336133343064376637633062383634316431 Oct 29 00:35:22.701000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.701000 audit[2614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2465 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623965313633313764336133343064376637633062383634316431 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit: BPF prog-id=131 op=LOAD Oct 29 00:35:22.702000 audit[2614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2465 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623965313633313764336133343064376637633062383634316431 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit: BPF prog-id=132 op=LOAD Oct 29 00:35:22.702000 audit[2614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2465 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623965313633313764336133343064376637633062383634316431 Oct 29 00:35:22.702000 audit: BPF prog-id=132 op=UNLOAD Oct 29 00:35:22.702000 audit: BPF prog-id=131 op=UNLOAD Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { perfmon } for pid=2614 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit[2614]: AVC avc: denied { bpf } for pid=2614 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:22.702000 audit: BPF prog-id=133 op=LOAD Oct 29 00:35:22.702000 audit[2614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2465 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:22.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623965313633313764336133343064376637633062383634316431 Oct 29 00:35:22.724044 env[1223]: time="2025-10-29T00:35:22.723996203Z" level=info msg="StartContainer for \"34b9e16317d3a340d7f7c0b8641d17d0237d23b9928315caa08efa41a54af527\" returns successfully" Oct 29 00:35:23.661423 kubelet[1963]: E1029 00:35:23.661392 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:23.662070 kubelet[1963]: E1029 00:35:23.661959 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.662070 kubelet[1963]: W1029 00:35:23.661983 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.662070 kubelet[1963]: E1029 00:35:23.662000 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.663537 kubelet[1963]: E1029 00:35:23.663509 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.663706 kubelet[1963]: W1029 00:35:23.663659 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.663793 kubelet[1963]: E1029 00:35:23.663779 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.665523 kubelet[1963]: E1029 00:35:23.665504 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.665683 kubelet[1963]: W1029 00:35:23.665619 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.665793 kubelet[1963]: E1029 00:35:23.665752 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.670163 kubelet[1963]: E1029 00:35:23.670142 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.670731 kubelet[1963]: W1029 00:35:23.670708 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.670887 kubelet[1963]: E1029 00:35:23.670857 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.671252 kubelet[1963]: E1029 00:35:23.671238 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.671383 kubelet[1963]: W1029 00:35:23.671369 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.671625 kubelet[1963]: E1029 00:35:23.671598 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.672613 kubelet[1963]: E1029 00:35:23.672590 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.672709 kubelet[1963]: W1029 00:35:23.672693 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.672797 kubelet[1963]: E1029 00:35:23.672784 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.673254 kubelet[1963]: E1029 00:35:23.673238 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.673353 kubelet[1963]: W1029 00:35:23.673339 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.673452 kubelet[1963]: E1029 00:35:23.673420 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.673739 kubelet[1963]: E1029 00:35:23.673726 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.673837 kubelet[1963]: W1029 00:35:23.673823 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.673920 kubelet[1963]: E1029 00:35:23.673907 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.674193 kubelet[1963]: E1029 00:35:23.674179 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.674295 kubelet[1963]: W1029 00:35:23.674280 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.674369 kubelet[1963]: E1029 00:35:23.674357 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.674671 kubelet[1963]: E1029 00:35:23.674657 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.674758 kubelet[1963]: W1029 00:35:23.674745 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.674846 kubelet[1963]: E1029 00:35:23.674832 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.675104 kubelet[1963]: E1029 00:35:23.675090 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.675204 kubelet[1963]: W1029 00:35:23.675190 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.675283 kubelet[1963]: E1029 00:35:23.675270 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.676179 kubelet[1963]: E1029 00:35:23.676161 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.676267 kubelet[1963]: W1029 00:35:23.676254 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.676341 kubelet[1963]: E1029 00:35:23.676328 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.676625 kubelet[1963]: E1029 00:35:23.676611 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.676716 kubelet[1963]: W1029 00:35:23.676702 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.676780 kubelet[1963]: E1029 00:35:23.676767 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.677053 kubelet[1963]: E1029 00:35:23.677039 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.677126 kubelet[1963]: W1029 00:35:23.677114 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.677193 kubelet[1963]: E1029 00:35:23.677181 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.677507 kubelet[1963]: E1029 00:35:23.677494 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.677610 kubelet[1963]: W1029 00:35:23.677596 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.677676 kubelet[1963]: E1029 00:35:23.677664 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.688218 kubelet[1963]: E1029 00:35:23.688191 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.688218 kubelet[1963]: W1029 00:35:23.688214 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.688372 kubelet[1963]: E1029 00:35:23.688237 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.688818 kubelet[1963]: E1029 00:35:23.688800 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.688946 kubelet[1963]: W1029 00:35:23.688930 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.689112 kubelet[1963]: E1029 00:35:23.689093 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.691913 kubelet[1963]: E1029 00:35:23.691700 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.691913 kubelet[1963]: W1029 00:35:23.691717 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.691913 kubelet[1963]: E1029 00:35:23.691738 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.691913 kubelet[1963]: E1029 00:35:23.691903 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.692104 kubelet[1963]: W1029 00:35:23.691912 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.692104 kubelet[1963]: E1029 00:35:23.691963 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.692525 kubelet[1963]: E1029 00:35:23.692211 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.692525 kubelet[1963]: W1029 00:35:23.692225 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.692525 kubelet[1963]: E1029 00:35:23.692240 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.692525 kubelet[1963]: E1029 00:35:23.692472 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.692525 kubelet[1963]: W1029 00:35:23.692480 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.692525 kubelet[1963]: E1029 00:35:23.692495 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.694126 kubelet[1963]: E1029 00:35:23.692712 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.694126 kubelet[1963]: W1029 00:35:23.692735 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.694126 kubelet[1963]: E1029 00:35:23.692748 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.694126 kubelet[1963]: E1029 00:35:23.692926 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.694126 kubelet[1963]: W1029 00:35:23.692934 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.694126 kubelet[1963]: E1029 00:35:23.692945 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.694126 kubelet[1963]: E1029 00:35:23.693171 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.694126 kubelet[1963]: W1029 00:35:23.693182 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.694126 kubelet[1963]: E1029 00:35:23.693204 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.694126 kubelet[1963]: E1029 00:35:23.693378 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.694426 kubelet[1963]: W1029 00:35:23.693463 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.694426 kubelet[1963]: E1029 00:35:23.693534 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.694722 kubelet[1963]: E1029 00:35:23.694629 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.694780 kubelet[1963]: W1029 00:35:23.694743 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.694832 kubelet[1963]: E1029 00:35:23.694796 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.695243 kubelet[1963]: E1029 00:35:23.695213 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.695243 kubelet[1963]: W1029 00:35:23.695229 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.695362 kubelet[1963]: E1029 00:35:23.695256 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.695555 kubelet[1963]: E1029 00:35:23.695539 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.695593 kubelet[1963]: W1029 00:35:23.695554 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.695672 kubelet[1963]: E1029 00:35:23.695652 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.695798 kubelet[1963]: E1029 00:35:23.695785 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.695798 kubelet[1963]: W1029 00:35:23.695795 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.695875 kubelet[1963]: E1029 00:35:23.695808 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.696113 kubelet[1963]: E1029 00:35:23.696095 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.696113 kubelet[1963]: W1029 00:35:23.696109 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.696181 kubelet[1963]: E1029 00:35:23.696122 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.696424 kubelet[1963]: E1029 00:35:23.696410 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.696424 kubelet[1963]: W1029 00:35:23.696422 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.696507 kubelet[1963]: E1029 00:35:23.696441 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.696970 kubelet[1963]: E1029 00:35:23.696950 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.697075 kubelet[1963]: W1029 00:35:23.696970 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.697202 kubelet[1963]: E1029 00:35:23.697186 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.697502 kubelet[1963]: E1029 00:35:23.697483 1963 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 29 00:35:23.697533 kubelet[1963]: W1029 00:35:23.697502 1963 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 29 00:35:23.697533 kubelet[1963]: E1029 00:35:23.697516 1963 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 29 00:35:23.930305 env[1223]: time="2025-10-29T00:35:23.930185952Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:23.933233 env[1223]: time="2025-10-29T00:35:23.933203750Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:23.935172 env[1223]: time="2025-10-29T00:35:23.935145597Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:23.936637 env[1223]: time="2025-10-29T00:35:23.936608413Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:23.937166 env[1223]: time="2025-10-29T00:35:23.937139648Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640\"" Oct 29 00:35:23.939394 env[1223]: time="2025-10-29T00:35:23.939340992Z" level=info msg="CreateContainer within sandbox \"bf162581365a47cc4ec80da560b45dd4f951ce8ec5f2a3272b38828b1c8283ae\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 29 00:35:23.953891 env[1223]: time="2025-10-29T00:35:23.953841623Z" level=info msg="CreateContainer within sandbox \"bf162581365a47cc4ec80da560b45dd4f951ce8ec5f2a3272b38828b1c8283ae\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"98c13fe91bc6939427409ab0f97cb0c9a32549e6447570727c58cc8b3ded2303\"" Oct 29 00:35:23.955658 env[1223]: time="2025-10-29T00:35:23.955617820Z" level=info msg="StartContainer for \"98c13fe91bc6939427409ab0f97cb0c9a32549e6447570727c58cc8b3ded2303\"" Oct 29 00:35:23.976614 systemd[1]: Started cri-containerd-98c13fe91bc6939427409ab0f97cb0c9a32549e6447570727c58cc8b3ded2303.scope. Oct 29 00:35:23.996000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:23.997678 kernel: kauditd_printk_skb: 179 callbacks suppressed Oct 29 00:35:23.997744 kernel: audit: type=1400 audit(1761698123.996:1017): avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:23.996000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2543 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:24.004329 kernel: audit: type=1300 audit(1761698123.996:1017): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2543 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:24.004396 kernel: audit: type=1327 audit(1761698123.996:1017): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938633133666539316263363933393432373430396162306639376362 Oct 29 00:35:23.996000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938633133666539316263363933393432373430396162306639376362 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.010485 kernel: audit: type=1400 audit(1761698124.002:1018): avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.013095 kernel: audit: type=1400 audit(1761698124.002:1018): avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.016416 kernel: audit: type=1400 audit(1761698124.002:1018): avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.019706 kernel: audit: type=1400 audit(1761698124.002:1018): avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.022379 kernel: audit: type=1400 audit(1761698124.002:1018): avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.025639 kernel: audit: type=1400 audit(1761698124.002:1018): avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.025712 kernel: audit: type=1400 audit(1761698124.002:1018): avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.002000 audit: BPF prog-id=134 op=LOAD Oct 29 00:35:24.002000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2543 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:24.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938633133666539316263363933393432373430396162306639376362 Oct 29 00:35:24.004000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.004000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.004000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.004000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.004000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.004000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.004000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.004000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.004000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.004000 audit: BPF prog-id=135 op=LOAD Oct 29 00:35:24.004000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2543 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:24.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938633133666539316263363933393432373430396162306639376362 Oct 29 00:35:24.007000 audit: BPF prog-id=135 op=UNLOAD Oct 29 00:35:24.007000 audit: BPF prog-id=134 op=UNLOAD Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:24.007000 audit: BPF prog-id=136 op=LOAD Oct 29 00:35:24.007000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2543 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:24.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938633133666539316263363933393432373430396162306639376362 Oct 29 00:35:24.035561 env[1223]: time="2025-10-29T00:35:24.035511942Z" level=info msg="StartContainer for \"98c13fe91bc6939427409ab0f97cb0c9a32549e6447570727c58cc8b3ded2303\" returns successfully" Oct 29 00:35:24.045163 systemd[1]: cri-containerd-98c13fe91bc6939427409ab0f97cb0c9a32549e6447570727c58cc8b3ded2303.scope: Deactivated successfully. Oct 29 00:35:24.054000 audit: BPF prog-id=136 op=UNLOAD Oct 29 00:35:24.061973 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-98c13fe91bc6939427409ab0f97cb0c9a32549e6447570727c58cc8b3ded2303-rootfs.mount: Deactivated successfully. Oct 29 00:35:24.143102 env[1223]: time="2025-10-29T00:35:24.143055199Z" level=info msg="shim disconnected" id=98c13fe91bc6939427409ab0f97cb0c9a32549e6447570727c58cc8b3ded2303 Oct 29 00:35:24.143102 env[1223]: time="2025-10-29T00:35:24.143100082Z" level=warning msg="cleaning up after shim disconnected" id=98c13fe91bc6939427409ab0f97cb0c9a32549e6447570727c58cc8b3ded2303 namespace=k8s.io Oct 29 00:35:24.143102 env[1223]: time="2025-10-29T00:35:24.143109602Z" level=info msg="cleaning up dead shim" Oct 29 00:35:24.149397 env[1223]: time="2025-10-29T00:35:24.149334957Z" level=warning msg="cleanup warnings time=\"2025-10-29T00:35:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2727 runtime=io.containerd.runc.v2\n" Oct 29 00:35:24.578121 kubelet[1963]: E1029 00:35:24.578080 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:35:24.663971 kubelet[1963]: I1029 00:35:24.663941 1963 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Oct 29 00:35:24.664417 kubelet[1963]: E1029 00:35:24.664217 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:24.664767 kubelet[1963]: E1029 00:35:24.664748 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:24.665926 env[1223]: time="2025-10-29T00:35:24.665366865Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Oct 29 00:35:24.693233 kubelet[1963]: I1029 00:35:24.693183 1963 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-5b7985cc75-ss7xk" podStartSLOduration=3.027242796 podStartE2EDuration="4.693163027s" podCreationTimestamp="2025-10-29 00:35:20 +0000 UTC" firstStartedPulling="2025-10-29 00:35:20.973378819 +0000 UTC m=+27.502011875" lastFinishedPulling="2025-10-29 00:35:22.63929901 +0000 UTC m=+29.167932106" observedRunningTime="2025-10-29 00:35:23.684751616 +0000 UTC m=+30.213384672" watchObservedRunningTime="2025-10-29 00:35:24.693163027 +0000 UTC m=+31.221796083" Oct 29 00:35:26.578116 kubelet[1963]: E1029 00:35:26.578061 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:35:27.233568 env[1223]: time="2025-10-29T00:35:27.233503688Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:27.236623 env[1223]: time="2025-10-29T00:35:27.236567784Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:27.238688 env[1223]: time="2025-10-29T00:35:27.238165036Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:27.241607 env[1223]: time="2025-10-29T00:35:27.241578193Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:27.242123 env[1223]: time="2025-10-29T00:35:27.242094222Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2\"" Oct 29 00:35:27.246020 env[1223]: time="2025-10-29T00:35:27.245974726Z" level=info msg="CreateContainer within sandbox \"bf162581365a47cc4ec80da560b45dd4f951ce8ec5f2a3272b38828b1c8283ae\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 29 00:35:27.273750 env[1223]: time="2025-10-29T00:35:27.273699522Z" level=info msg="CreateContainer within sandbox \"bf162581365a47cc4ec80da560b45dd4f951ce8ec5f2a3272b38828b1c8283ae\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"97f4f03e89ada6f2137a04fdd4ffd88ea9c4993dbc52c9abe9ba4f6cee33d344\"" Oct 29 00:35:27.276344 env[1223]: time="2025-10-29T00:35:27.274843668Z" level=info msg="StartContainer for \"97f4f03e89ada6f2137a04fdd4ffd88ea9c4993dbc52c9abe9ba4f6cee33d344\"" Oct 29 00:35:27.305871 systemd[1]: Started cri-containerd-97f4f03e89ada6f2137a04fdd4ffd88ea9c4993dbc52c9abe9ba4f6cee33d344.scope. Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2543 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:27.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937663466303365383961646136663231333761303466646434666664 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.332000 audit: BPF prog-id=137 op=LOAD Oct 29 00:35:27.332000 audit[2751]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2543 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:27.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937663466303365383961646136663231333761303466646434666664 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit: BPF prog-id=138 op=LOAD Oct 29 00:35:27.335000 audit[2751]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2543 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:27.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937663466303365383961646136663231333761303466646434666664 Oct 29 00:35:27.335000 audit: BPF prog-id=138 op=UNLOAD Oct 29 00:35:27.335000 audit: BPF prog-id=137 op=UNLOAD Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { perfmon } for pid=2751 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit[2751]: AVC avc: denied { bpf } for pid=2751 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:27.335000 audit: BPF prog-id=139 op=LOAD Oct 29 00:35:27.335000 audit[2751]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2543 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:27.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937663466303365383961646136663231333761303466646434666664 Oct 29 00:35:27.386073 env[1223]: time="2025-10-29T00:35:27.385998069Z" level=info msg="StartContainer for \"97f4f03e89ada6f2137a04fdd4ffd88ea9c4993dbc52c9abe9ba4f6cee33d344\" returns successfully" Oct 29 00:35:27.682315 kubelet[1963]: E1029 00:35:27.682212 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:27.719380 kubelet[1963]: I1029 00:35:27.719341 1963 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Oct 29 00:35:27.719740 kubelet[1963]: E1029 00:35:27.719718 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:27.747000 audit[2782]: NETFILTER_CFG table=filter:103 family=2 entries=21 op=nft_register_rule pid=2782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:27.747000 audit[2782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdf41ac80 a2=0 a3=1 items=0 ppid=2118 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:27.747000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:27.760000 audit[2782]: NETFILTER_CFG table=nat:104 family=2 entries=19 op=nft_register_chain pid=2782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:27.760000 audit[2782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdf41ac80 a2=0 a3=1 items=0 ppid=2118 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:27.760000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:28.079013 systemd[1]: cri-containerd-97f4f03e89ada6f2137a04fdd4ffd88ea9c4993dbc52c9abe9ba4f6cee33d344.scope: Deactivated successfully. Oct 29 00:35:28.084000 audit: BPF prog-id=139 op=UNLOAD Oct 29 00:35:28.098303 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-97f4f03e89ada6f2137a04fdd4ffd88ea9c4993dbc52c9abe9ba4f6cee33d344-rootfs.mount: Deactivated successfully. Oct 29 00:35:28.158401 env[1223]: time="2025-10-29T00:35:28.158351440Z" level=info msg="shim disconnected" id=97f4f03e89ada6f2137a04fdd4ffd88ea9c4993dbc52c9abe9ba4f6cee33d344 Oct 29 00:35:28.158668 env[1223]: time="2025-10-29T00:35:28.158648657Z" level=warning msg="cleaning up after shim disconnected" id=97f4f03e89ada6f2137a04fdd4ffd88ea9c4993dbc52c9abe9ba4f6cee33d344 namespace=k8s.io Oct 29 00:35:28.158733 env[1223]: time="2025-10-29T00:35:28.158719981Z" level=info msg="cleaning up dead shim" Oct 29 00:35:28.165737 env[1223]: time="2025-10-29T00:35:28.165693131Z" level=warning msg="cleanup warnings time=\"2025-10-29T00:35:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2795 runtime=io.containerd.runc.v2\n" Oct 29 00:35:28.173941 kubelet[1963]: I1029 00:35:28.173857 1963 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Oct 29 00:35:28.211529 systemd[1]: Created slice kubepods-burstable-pod7ab60c1c_bd63_4fff_bd3c_c7ccb67adc7c.slice. Oct 29 00:35:28.220591 systemd[1]: Created slice kubepods-besteffort-podb646c413_82a9_46f9_92dc_f66ac1da428b.slice. Oct 29 00:35:28.223273 kubelet[1963]: I1029 00:35:28.223240 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5594n\" (UniqueName: \"kubernetes.io/projected/7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c-kube-api-access-5594n\") pod \"coredns-668d6bf9bc-clmmt\" (UID: \"7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c\") " pod="kube-system/coredns-668d6bf9bc-clmmt" Oct 29 00:35:28.223273 kubelet[1963]: I1029 00:35:28.223279 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ed11f017-3fc8-47ea-980c-c9d4b03a0875-goldmane-ca-bundle\") pod \"goldmane-666569f655-5gpmj\" (UID: \"ed11f017-3fc8-47ea-980c-c9d4b03a0875\") " pod="calico-system/goldmane-666569f655-5gpmj" Oct 29 00:35:28.223450 kubelet[1963]: I1029 00:35:28.223296 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c-config-volume\") pod \"coredns-668d6bf9bc-clmmt\" (UID: \"7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c\") " pod="kube-system/coredns-668d6bf9bc-clmmt" Oct 29 00:35:28.223450 kubelet[1963]: I1029 00:35:28.223321 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b646c413-82a9-46f9-92dc-f66ac1da428b-whisker-ca-bundle\") pod \"whisker-84f56688c6-dv9k2\" (UID: \"b646c413-82a9-46f9-92dc-f66ac1da428b\") " pod="calico-system/whisker-84f56688c6-dv9k2" Oct 29 00:35:28.223450 kubelet[1963]: I1029 00:35:28.223338 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/ed11f017-3fc8-47ea-980c-c9d4b03a0875-goldmane-key-pair\") pod \"goldmane-666569f655-5gpmj\" (UID: \"ed11f017-3fc8-47ea-980c-c9d4b03a0875\") " pod="calico-system/goldmane-666569f655-5gpmj" Oct 29 00:35:28.223450 kubelet[1963]: I1029 00:35:28.223358 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/7f990c68-0bdc-4bb4-be36-8cb47e35962e-calico-apiserver-certs\") pod \"calico-apiserver-5984bf88b-b49cr\" (UID: \"7f990c68-0bdc-4bb4-be36-8cb47e35962e\") " pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" Oct 29 00:35:28.223450 kubelet[1963]: I1029 00:35:28.223374 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/ed11f017-3fc8-47ea-980c-c9d4b03a0875-config\") pod \"goldmane-666569f655-5gpmj\" (UID: \"ed11f017-3fc8-47ea-980c-c9d4b03a0875\") " pod="calico-system/goldmane-666569f655-5gpmj" Oct 29 00:35:28.223595 kubelet[1963]: I1029 00:35:28.223390 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5q959\" (UniqueName: \"kubernetes.io/projected/ed11f017-3fc8-47ea-980c-c9d4b03a0875-kube-api-access-5q959\") pod \"goldmane-666569f655-5gpmj\" (UID: \"ed11f017-3fc8-47ea-980c-c9d4b03a0875\") " pod="calico-system/goldmane-666569f655-5gpmj" Oct 29 00:35:28.223595 kubelet[1963]: I1029 00:35:28.223500 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b646c413-82a9-46f9-92dc-f66ac1da428b-whisker-backend-key-pair\") pod \"whisker-84f56688c6-dv9k2\" (UID: \"b646c413-82a9-46f9-92dc-f66ac1da428b\") " pod="calico-system/whisker-84f56688c6-dv9k2" Oct 29 00:35:28.223595 kubelet[1963]: I1029 00:35:28.223579 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8dtc6\" (UniqueName: \"kubernetes.io/projected/b646c413-82a9-46f9-92dc-f66ac1da428b-kube-api-access-8dtc6\") pod \"whisker-84f56688c6-dv9k2\" (UID: \"b646c413-82a9-46f9-92dc-f66ac1da428b\") " pod="calico-system/whisker-84f56688c6-dv9k2" Oct 29 00:35:28.223727 kubelet[1963]: I1029 00:35:28.223621 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hr8ts\" (UniqueName: \"kubernetes.io/projected/7f990c68-0bdc-4bb4-be36-8cb47e35962e-kube-api-access-hr8ts\") pod \"calico-apiserver-5984bf88b-b49cr\" (UID: \"7f990c68-0bdc-4bb4-be36-8cb47e35962e\") " pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" Oct 29 00:35:28.228015 systemd[1]: Created slice kubepods-besteffort-pod7f990c68_0bdc_4bb4_be36_8cb47e35962e.slice. Oct 29 00:35:28.233876 systemd[1]: Created slice kubepods-besteffort-poded11f017_3fc8_47ea_980c_c9d4b03a0875.slice. Oct 29 00:35:28.240651 systemd[1]: Created slice kubepods-besteffort-pod7ac47b9b_412b_4e0c_bee0_91b227127625.slice. Oct 29 00:35:28.244759 systemd[1]: Created slice kubepods-besteffort-pod7113e3f3_c736_4216_8f92_dee9d64f1690.slice. Oct 29 00:35:28.251105 systemd[1]: Created slice kubepods-besteffort-pod87f3eb2e_83c4_4548_a495_c83ad5b81b76.slice. Oct 29 00:35:28.255838 systemd[1]: Created slice kubepods-burstable-pod6cb9f80b_c57b_4005_9779_057c027d0c90.slice. Oct 29 00:35:28.324567 kubelet[1963]: I1029 00:35:28.324525 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-glzvq\" (UniqueName: \"kubernetes.io/projected/7ac47b9b-412b-4e0c-bee0-91b227127625-kube-api-access-glzvq\") pod \"calico-apiserver-68bf75d69f-vwvqn\" (UID: \"7ac47b9b-412b-4e0c-bee0-91b227127625\") " pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" Oct 29 00:35:28.324713 kubelet[1963]: I1029 00:35:28.324591 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7113e3f3-c736-4216-8f92-dee9d64f1690-tigera-ca-bundle\") pod \"calico-kube-controllers-64b9647db-jnrkc\" (UID: \"7113e3f3-c736-4216-8f92-dee9d64f1690\") " pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" Oct 29 00:35:28.324713 kubelet[1963]: I1029 00:35:28.324656 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/6cb9f80b-c57b-4005-9779-057c027d0c90-config-volume\") pod \"coredns-668d6bf9bc-mmtvr\" (UID: \"6cb9f80b-c57b-4005-9779-057c027d0c90\") " pod="kube-system/coredns-668d6bf9bc-mmtvr" Oct 29 00:35:28.324713 kubelet[1963]: I1029 00:35:28.324680 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-r6gd7\" (UniqueName: \"kubernetes.io/projected/7113e3f3-c736-4216-8f92-dee9d64f1690-kube-api-access-r6gd7\") pod \"calico-kube-controllers-64b9647db-jnrkc\" (UID: \"7113e3f3-c736-4216-8f92-dee9d64f1690\") " pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" Oct 29 00:35:28.324713 kubelet[1963]: I1029 00:35:28.324712 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/7ac47b9b-412b-4e0c-bee0-91b227127625-calico-apiserver-certs\") pod \"calico-apiserver-68bf75d69f-vwvqn\" (UID: \"7ac47b9b-412b-4e0c-bee0-91b227127625\") " pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" Oct 29 00:35:28.324844 kubelet[1963]: I1029 00:35:28.324728 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jjmcf\" (UniqueName: \"kubernetes.io/projected/6cb9f80b-c57b-4005-9779-057c027d0c90-kube-api-access-jjmcf\") pod \"coredns-668d6bf9bc-mmtvr\" (UID: \"6cb9f80b-c57b-4005-9779-057c027d0c90\") " pod="kube-system/coredns-668d6bf9bc-mmtvr" Oct 29 00:35:28.324844 kubelet[1963]: I1029 00:35:28.324768 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/87f3eb2e-83c4-4548-a495-c83ad5b81b76-calico-apiserver-certs\") pod \"calico-apiserver-68bf75d69f-hk7dm\" (UID: \"87f3eb2e-83c4-4548-a495-c83ad5b81b76\") " pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" Oct 29 00:35:28.324844 kubelet[1963]: I1029 00:35:28.324784 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xkgbm\" (UniqueName: \"kubernetes.io/projected/87f3eb2e-83c4-4548-a495-c83ad5b81b76-kube-api-access-xkgbm\") pod \"calico-apiserver-68bf75d69f-hk7dm\" (UID: \"87f3eb2e-83c4-4548-a495-c83ad5b81b76\") " pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" Oct 29 00:35:28.519365 kubelet[1963]: E1029 00:35:28.519329 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:28.520968 env[1223]: time="2025-10-29T00:35:28.520562724Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-clmmt,Uid:7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c,Namespace:kube-system,Attempt:0,}" Oct 29 00:35:28.524310 env[1223]: time="2025-10-29T00:35:28.524231530Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-84f56688c6-dv9k2,Uid:b646c413-82a9-46f9-92dc-f66ac1da428b,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:28.531577 env[1223]: time="2025-10-29T00:35:28.531542138Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5984bf88b-b49cr,Uid:7f990c68-0bdc-4bb4-be36-8cb47e35962e,Namespace:calico-apiserver,Attempt:0,}" Oct 29 00:35:28.538669 env[1223]: time="2025-10-29T00:35:28.538627974Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-5gpmj,Uid:ed11f017-3fc8-47ea-980c-c9d4b03a0875,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:28.542983 env[1223]: time="2025-10-29T00:35:28.542941975Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-68bf75d69f-vwvqn,Uid:7ac47b9b-412b-4e0c-bee0-91b227127625,Namespace:calico-apiserver,Attempt:0,}" Oct 29 00:35:28.548156 env[1223]: time="2025-10-29T00:35:28.548112184Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-64b9647db-jnrkc,Uid:7113e3f3-c736-4216-8f92-dee9d64f1690,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:28.555944 env[1223]: time="2025-10-29T00:35:28.555912340Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-68bf75d69f-hk7dm,Uid:87f3eb2e-83c4-4548-a495-c83ad5b81b76,Namespace:calico-apiserver,Attempt:0,}" Oct 29 00:35:28.558816 kubelet[1963]: E1029 00:35:28.558789 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:28.559453 env[1223]: time="2025-10-29T00:35:28.559405415Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-mmtvr,Uid:6cb9f80b-c57b-4005-9779-057c027d0c90,Namespace:kube-system,Attempt:0,}" Oct 29 00:35:28.585839 systemd[1]: Created slice kubepods-besteffort-pod8d7ebf96_f131_40c2_9801_3bcd40c3dda3.slice. Oct 29 00:35:28.588409 env[1223]: time="2025-10-29T00:35:28.588355313Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-ztr7c,Uid:8d7ebf96-f131-40c2-9801-3bcd40c3dda3,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:28.685851 kubelet[1963]: E1029 00:35:28.685812 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:28.686529 kubelet[1963]: E1029 00:35:28.686503 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:28.687748 env[1223]: time="2025-10-29T00:35:28.687707626Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Oct 29 00:35:28.695638 env[1223]: time="2025-10-29T00:35:28.695575106Z" level=error msg="Failed to destroy network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.696096 env[1223]: time="2025-10-29T00:35:28.696063613Z" level=error msg="encountered an error cleaning up failed sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.696317 env[1223]: time="2025-10-29T00:35:28.696219622Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-84f56688c6-dv9k2,Uid:b646c413-82a9-46f9-92dc-f66ac1da428b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.697205 kubelet[1963]: E1029 00:35:28.697155 1963 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.697764 kubelet[1963]: E1029 00:35:28.697722 1963 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-84f56688c6-dv9k2" Oct 29 00:35:28.697843 kubelet[1963]: E1029 00:35:28.697765 1963 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-84f56688c6-dv9k2" Oct 29 00:35:28.697843 kubelet[1963]: E1029 00:35:28.697814 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-84f56688c6-dv9k2_calico-system(b646c413-82a9-46f9-92dc-f66ac1da428b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-84f56688c6-dv9k2_calico-system(b646c413-82a9-46f9-92dc-f66ac1da428b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-84f56688c6-dv9k2" podUID="b646c413-82a9-46f9-92dc-f66ac1da428b" Oct 29 00:35:28.743290 env[1223]: time="2025-10-29T00:35:28.743201368Z" level=error msg="Failed to destroy network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.743884 env[1223]: time="2025-10-29T00:35:28.743839483Z" level=error msg="encountered an error cleaning up failed sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.743960 env[1223]: time="2025-10-29T00:35:28.743907927Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-5gpmj,Uid:ed11f017-3fc8-47ea-980c-c9d4b03a0875,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.744600 kubelet[1963]: E1029 00:35:28.744556 1963 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.744829 kubelet[1963]: E1029 00:35:28.744622 1963 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-5gpmj" Oct 29 00:35:28.744829 kubelet[1963]: E1029 00:35:28.744643 1963 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-5gpmj" Oct 29 00:35:28.744829 kubelet[1963]: E1029 00:35:28.744682 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-5gpmj_calico-system(ed11f017-3fc8-47ea-980c-c9d4b03a0875)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-5gpmj_calico-system(ed11f017-3fc8-47ea-980c-c9d4b03a0875)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-5gpmj" podUID="ed11f017-3fc8-47ea-980c-c9d4b03a0875" Oct 29 00:35:28.746806 env[1223]: time="2025-10-29T00:35:28.746765887Z" level=error msg="Failed to destroy network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.747374 env[1223]: time="2025-10-29T00:35:28.747324518Z" level=error msg="encountered an error cleaning up failed sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.747519 env[1223]: time="2025-10-29T00:35:28.747491608Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-68bf75d69f-vwvqn,Uid:7ac47b9b-412b-4e0c-bee0-91b227127625,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.748210 kubelet[1963]: E1029 00:35:28.748180 1963 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.748301 kubelet[1963]: E1029 00:35:28.748224 1963 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" Oct 29 00:35:28.748301 kubelet[1963]: E1029 00:35:28.748244 1963 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" Oct 29 00:35:28.748301 kubelet[1963]: E1029 00:35:28.748277 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-68bf75d69f-vwvqn_calico-apiserver(7ac47b9b-412b-4e0c-bee0-91b227127625)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-68bf75d69f-vwvqn_calico-apiserver(7ac47b9b-412b-4e0c-bee0-91b227127625)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" podUID="7ac47b9b-412b-4e0c-bee0-91b227127625" Oct 29 00:35:28.750542 env[1223]: time="2025-10-29T00:35:28.750412531Z" level=error msg="Failed to destroy network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.751929 env[1223]: time="2025-10-29T00:35:28.751877973Z" level=error msg="encountered an error cleaning up failed sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.752148 env[1223]: time="2025-10-29T00:35:28.752095345Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5984bf88b-b49cr,Uid:7f990c68-0bdc-4bb4-be36-8cb47e35962e,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.752326 kubelet[1963]: E1029 00:35:28.752281 1963 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.752385 kubelet[1963]: E1029 00:35:28.752331 1963 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" Oct 29 00:35:28.752385 kubelet[1963]: E1029 00:35:28.752349 1963 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" Oct 29 00:35:28.752445 kubelet[1963]: E1029 00:35:28.752378 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5984bf88b-b49cr_calico-apiserver(7f990c68-0bdc-4bb4-be36-8cb47e35962e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5984bf88b-b49cr_calico-apiserver(7f990c68-0bdc-4bb4-be36-8cb47e35962e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" podUID="7f990c68-0bdc-4bb4-be36-8cb47e35962e" Oct 29 00:35:28.766616 env[1223]: time="2025-10-29T00:35:28.766557793Z" level=error msg="Failed to destroy network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.766948 env[1223]: time="2025-10-29T00:35:28.766909693Z" level=error msg="encountered an error cleaning up failed sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.767000 env[1223]: time="2025-10-29T00:35:28.766962096Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-clmmt,Uid:7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.767188 kubelet[1963]: E1029 00:35:28.767148 1963 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.767261 kubelet[1963]: E1029 00:35:28.767210 1963 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-clmmt" Oct 29 00:35:28.767261 kubelet[1963]: E1029 00:35:28.767230 1963 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-clmmt" Oct 29 00:35:28.767322 kubelet[1963]: E1029 00:35:28.767267 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-clmmt_kube-system(7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-clmmt_kube-system(7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-clmmt" podUID="7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c" Oct 29 00:35:28.768832 env[1223]: time="2025-10-29T00:35:28.767879947Z" level=error msg="Failed to destroy network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.768832 env[1223]: time="2025-10-29T00:35:28.768266889Z" level=error msg="encountered an error cleaning up failed sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.768832 env[1223]: time="2025-10-29T00:35:28.768313811Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-64b9647db-jnrkc,Uid:7113e3f3-c736-4216-8f92-dee9d64f1690,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.769074 kubelet[1963]: E1029 00:35:28.768487 1963 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.769074 kubelet[1963]: E1029 00:35:28.768525 1963 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" Oct 29 00:35:28.769074 kubelet[1963]: E1029 00:35:28.768587 1963 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" Oct 29 00:35:28.769251 kubelet[1963]: E1029 00:35:28.768625 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-64b9647db-jnrkc_calico-system(7113e3f3-c736-4216-8f92-dee9d64f1690)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-64b9647db-jnrkc_calico-system(7113e3f3-c736-4216-8f92-dee9d64f1690)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" podUID="7113e3f3-c736-4216-8f92-dee9d64f1690" Oct 29 00:35:28.778342 env[1223]: time="2025-10-29T00:35:28.778216485Z" level=error msg="Failed to destroy network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.778962 env[1223]: time="2025-10-29T00:35:28.778776156Z" level=error msg="encountered an error cleaning up failed sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.779267 env[1223]: time="2025-10-29T00:35:28.779226741Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-68bf75d69f-hk7dm,Uid:87f3eb2e-83c4-4548-a495-c83ad5b81b76,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.779873 kubelet[1963]: E1029 00:35:28.779794 1963 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.779873 kubelet[1963]: E1029 00:35:28.779860 1963 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" Oct 29 00:35:28.780058 kubelet[1963]: E1029 00:35:28.779880 1963 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" Oct 29 00:35:28.780058 kubelet[1963]: E1029 00:35:28.779939 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-68bf75d69f-hk7dm_calico-apiserver(87f3eb2e-83c4-4548-a495-c83ad5b81b76)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-68bf75d69f-hk7dm_calico-apiserver(87f3eb2e-83c4-4548-a495-c83ad5b81b76)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" podUID="87f3eb2e-83c4-4548-a495-c83ad5b81b76" Oct 29 00:35:28.785605 env[1223]: time="2025-10-29T00:35:28.785553975Z" level=error msg="Failed to destroy network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.786662 env[1223]: time="2025-10-29T00:35:28.786623875Z" level=error msg="encountered an error cleaning up failed sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.786797 env[1223]: time="2025-10-29T00:35:28.786770443Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-mmtvr,Uid:6cb9f80b-c57b-4005-9779-057c027d0c90,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.787083 kubelet[1963]: E1029 00:35:28.787040 1963 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.787167 kubelet[1963]: E1029 00:35:28.787098 1963 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-mmtvr" Oct 29 00:35:28.787167 kubelet[1963]: E1029 00:35:28.787117 1963 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-mmtvr" Oct 29 00:35:28.787234 kubelet[1963]: E1029 00:35:28.787173 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-mmtvr_kube-system(6cb9f80b-c57b-4005-9779-057c027d0c90)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-mmtvr_kube-system(6cb9f80b-c57b-4005-9779-057c027d0c90)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-mmtvr" podUID="6cb9f80b-c57b-4005-9779-057c027d0c90" Oct 29 00:35:28.793315 env[1223]: time="2025-10-29T00:35:28.793258645Z" level=error msg="Failed to destroy network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.793811 env[1223]: time="2025-10-29T00:35:28.793775794Z" level=error msg="encountered an error cleaning up failed sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.793938 env[1223]: time="2025-10-29T00:35:28.793910082Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-ztr7c,Uid:8d7ebf96-f131-40c2-9801-3bcd40c3dda3,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.794220 kubelet[1963]: E1029 00:35:28.794174 1963 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:28.794302 kubelet[1963]: E1029 00:35:28.794246 1963 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-ztr7c" Oct 29 00:35:28.794302 kubelet[1963]: E1029 00:35:28.794266 1963 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-ztr7c" Oct 29 00:35:28.794356 kubelet[1963]: E1029 00:35:28.794314 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-ztr7c_calico-system(8d7ebf96-f131-40c2-9801-3bcd40c3dda3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-ztr7c_calico-system(8d7ebf96-f131-40c2-9801-3bcd40c3dda3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:35:29.706560 env[1223]: time="2025-10-29T00:35:29.706512726Z" level=info msg="StopPodSandbox for \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\"" Oct 29 00:35:29.709848 kubelet[1963]: I1029 00:35:29.709608 1963 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:29.709848 kubelet[1963]: I1029 00:35:29.709682 1963 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:29.710274 kubelet[1963]: I1029 00:35:29.710250 1963 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:29.710311 env[1223]: time="2025-10-29T00:35:29.710268850Z" level=info msg="StopPodSandbox for \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\"" Oct 29 00:35:29.712460 env[1223]: time="2025-10-29T00:35:29.710882763Z" level=info msg="StopPodSandbox for \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\"" Oct 29 00:35:29.714725 kubelet[1963]: I1029 00:35:29.714679 1963 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:29.715350 env[1223]: time="2025-10-29T00:35:29.715316964Z" level=info msg="StopPodSandbox for \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\"" Oct 29 00:35:29.719473 kubelet[1963]: I1029 00:35:29.718636 1963 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:29.729705 env[1223]: time="2025-10-29T00:35:29.729664903Z" level=info msg="StopPodSandbox for \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\"" Oct 29 00:35:29.735280 kubelet[1963]: I1029 00:35:29.733953 1963 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:29.735544 env[1223]: time="2025-10-29T00:35:29.734504726Z" level=info msg="StopPodSandbox for \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\"" Oct 29 00:35:29.736540 kubelet[1963]: I1029 00:35:29.735740 1963 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:29.736632 env[1223]: time="2025-10-29T00:35:29.736219739Z" level=info msg="StopPodSandbox for \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\"" Oct 29 00:35:29.739501 kubelet[1963]: I1029 00:35:29.739410 1963 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:29.740300 env[1223]: time="2025-10-29T00:35:29.740259758Z" level=info msg="StopPodSandbox for \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\"" Oct 29 00:35:29.740903 kubelet[1963]: I1029 00:35:29.740869 1963 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:29.741921 env[1223]: time="2025-10-29T00:35:29.741373019Z" level=info msg="StopPodSandbox for \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\"" Oct 29 00:35:29.768558 env[1223]: time="2025-10-29T00:35:29.768494812Z" level=error msg="StopPodSandbox for \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\" failed" error="failed to destroy network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:29.769029 kubelet[1963]: E1029 00:35:29.768848 1963 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:29.769029 kubelet[1963]: E1029 00:35:29.768912 1963 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e"} Oct 29 00:35:29.769029 kubelet[1963]: E1029 00:35:29.768966 1963 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8d7ebf96-f131-40c2-9801-3bcd40c3dda3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:29.769029 kubelet[1963]: E1029 00:35:29.768989 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8d7ebf96-f131-40c2-9801-3bcd40c3dda3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:35:29.774408 env[1223]: time="2025-10-29T00:35:29.774348009Z" level=error msg="StopPodSandbox for \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\" failed" error="failed to destroy network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:29.774883 kubelet[1963]: E1029 00:35:29.774702 1963 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:29.774883 kubelet[1963]: E1029 00:35:29.774755 1963 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026"} Oct 29 00:35:29.774883 kubelet[1963]: E1029 00:35:29.774792 1963 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7113e3f3-c736-4216-8f92-dee9d64f1690\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:29.774883 kubelet[1963]: E1029 00:35:29.774823 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7113e3f3-c736-4216-8f92-dee9d64f1690\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" podUID="7113e3f3-c736-4216-8f92-dee9d64f1690" Oct 29 00:35:29.804780 env[1223]: time="2025-10-29T00:35:29.804709938Z" level=error msg="StopPodSandbox for \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\" failed" error="failed to destroy network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:29.805236 kubelet[1963]: E1029 00:35:29.805072 1963 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:29.805236 kubelet[1963]: E1029 00:35:29.805123 1963 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a"} Oct 29 00:35:29.805236 kubelet[1963]: E1029 00:35:29.805155 1963 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ed11f017-3fc8-47ea-980c-c9d4b03a0875\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:29.805236 kubelet[1963]: E1029 00:35:29.805192 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ed11f017-3fc8-47ea-980c-c9d4b03a0875\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-5gpmj" podUID="ed11f017-3fc8-47ea-980c-c9d4b03a0875" Oct 29 00:35:29.818898 env[1223]: time="2025-10-29T00:35:29.818839825Z" level=error msg="StopPodSandbox for \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\" failed" error="failed to destroy network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:29.819405 kubelet[1963]: E1029 00:35:29.819210 1963 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:29.819405 kubelet[1963]: E1029 00:35:29.819275 1963 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba"} Oct 29 00:35:29.819405 kubelet[1963]: E1029 00:35:29.819311 1963 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7ac47b9b-412b-4e0c-bee0-91b227127625\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:29.819405 kubelet[1963]: E1029 00:35:29.819341 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7ac47b9b-412b-4e0c-bee0-91b227127625\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" podUID="7ac47b9b-412b-4e0c-bee0-91b227127625" Oct 29 00:35:29.834333 env[1223]: time="2025-10-29T00:35:29.834275824Z" level=error msg="StopPodSandbox for \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\" failed" error="failed to destroy network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:29.834887 kubelet[1963]: E1029 00:35:29.834729 1963 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:29.834887 kubelet[1963]: E1029 00:35:29.834783 1963 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98"} Oct 29 00:35:29.834887 kubelet[1963]: E1029 00:35:29.834816 1963 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"87f3eb2e-83c4-4548-a495-c83ad5b81b76\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:29.834887 kubelet[1963]: E1029 00:35:29.834837 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"87f3eb2e-83c4-4548-a495-c83ad5b81b76\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" podUID="87f3eb2e-83c4-4548-a495-c83ad5b81b76" Oct 29 00:35:29.842739 env[1223]: time="2025-10-29T00:35:29.842680040Z" level=error msg="StopPodSandbox for \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\" failed" error="failed to destroy network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:29.843138 kubelet[1963]: E1029 00:35:29.842988 1963 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:29.843138 kubelet[1963]: E1029 00:35:29.843055 1963 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745"} Oct 29 00:35:29.843138 kubelet[1963]: E1029 00:35:29.843090 1963 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:29.843138 kubelet[1963]: E1029 00:35:29.843109 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-clmmt" podUID="7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c" Oct 29 00:35:29.849650 env[1223]: time="2025-10-29T00:35:29.849558453Z" level=error msg="StopPodSandbox for \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\" failed" error="failed to destroy network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:29.850048 kubelet[1963]: E1029 00:35:29.849894 1963 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:29.850048 kubelet[1963]: E1029 00:35:29.849943 1963 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7"} Oct 29 00:35:29.850048 kubelet[1963]: E1029 00:35:29.849977 1963 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7f990c68-0bdc-4bb4-be36-8cb47e35962e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:29.850048 kubelet[1963]: E1029 00:35:29.849997 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7f990c68-0bdc-4bb4-be36-8cb47e35962e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" podUID="7f990c68-0bdc-4bb4-be36-8cb47e35962e" Oct 29 00:35:29.851369 env[1223]: time="2025-10-29T00:35:29.851301988Z" level=error msg="StopPodSandbox for \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\" failed" error="failed to destroy network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:29.851740 kubelet[1963]: E1029 00:35:29.851578 1963 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:29.851740 kubelet[1963]: E1029 00:35:29.851652 1963 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0"} Oct 29 00:35:29.851740 kubelet[1963]: E1029 00:35:29.851680 1963 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6cb9f80b-c57b-4005-9779-057c027d0c90\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:29.851740 kubelet[1963]: E1029 00:35:29.851699 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6cb9f80b-c57b-4005-9779-057c027d0c90\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-mmtvr" podUID="6cb9f80b-c57b-4005-9779-057c027d0c90" Oct 29 00:35:29.854314 env[1223]: time="2025-10-29T00:35:29.854268989Z" level=error msg="StopPodSandbox for \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\" failed" error="failed to destroy network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 29 00:35:29.854686 kubelet[1963]: E1029 00:35:29.854562 1963 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:29.854686 kubelet[1963]: E1029 00:35:29.854599 1963 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd"} Oct 29 00:35:29.854686 kubelet[1963]: E1029 00:35:29.854624 1963 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b646c413-82a9-46f9-92dc-f66ac1da428b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 29 00:35:29.854686 kubelet[1963]: E1029 00:35:29.854646 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b646c413-82a9-46f9-92dc-f66ac1da428b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-84f56688c6-dv9k2" podUID="b646c413-82a9-46f9-92dc-f66ac1da428b" Oct 29 00:35:33.131569 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2396639081.mount: Deactivated successfully. Oct 29 00:35:33.443415 env[1223]: time="2025-10-29T00:35:33.442963800Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:33.448630 env[1223]: time="2025-10-29T00:35:33.448592115Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:33.456485 env[1223]: time="2025-10-29T00:35:33.456449939Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:33.461609 env[1223]: time="2025-10-29T00:35:33.461541068Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 29 00:35:33.462000 env[1223]: time="2025-10-29T00:35:33.461959849Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b\"" Oct 29 00:35:33.483471 env[1223]: time="2025-10-29T00:35:33.481316915Z" level=info msg="CreateContainer within sandbox \"bf162581365a47cc4ec80da560b45dd4f951ce8ec5f2a3272b38828b1c8283ae\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 29 00:35:33.496341 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3652153693.mount: Deactivated successfully. Oct 29 00:35:33.506197 env[1223]: time="2025-10-29T00:35:33.506126767Z" level=info msg="CreateContainer within sandbox \"bf162581365a47cc4ec80da560b45dd4f951ce8ec5f2a3272b38828b1c8283ae\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"9cd5240c232444013782d6c88280963034add517fa7e77e777570a2b1beb1195\"" Oct 29 00:35:33.508417 env[1223]: time="2025-10-29T00:35:33.506850203Z" level=info msg="StartContainer for \"9cd5240c232444013782d6c88280963034add517fa7e77e777570a2b1beb1195\"" Oct 29 00:35:33.533653 systemd[1]: Started cri-containerd-9cd5240c232444013782d6c88280963034add517fa7e77e777570a2b1beb1195.scope. Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553869 kernel: kauditd_printk_skb: 84 callbacks suppressed Oct 29 00:35:33.553933 kernel: audit: type=1400 audit(1761698133.551:1033): avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2543 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:33.561964 kernel: audit: type=1300 audit(1761698133.551:1033): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2543 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:33.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963643532343063323332343434303133373832643663383832383039 Oct 29 00:35:33.566136 kernel: audit: type=1327 audit(1761698133.551:1033): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963643532343063323332343434303133373832643663383832383039 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.569419 kernel: audit: type=1400 audit(1761698133.551:1034): avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.569655 kernel: audit: type=1400 audit(1761698133.551:1034): avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.572586 kernel: audit: type=1400 audit(1761698133.551:1034): avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.577777 kernel: audit: type=1400 audit(1761698133.551:1034): avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.577880 kernel: audit: type=1400 audit(1761698133.551:1034): avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.580470 kernel: audit: type=1400 audit(1761698133.551:1034): avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.585905 kernel: audit: type=1400 audit(1761698133.551:1034): avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.551000 audit: BPF prog-id=140 op=LOAD Oct 29 00:35:33.551000 audit[3298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2543 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:33.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963643532343063323332343434303133373832643663383832383039 Oct 29 00:35:33.553000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.553000 audit: BPF prog-id=141 op=LOAD Oct 29 00:35:33.553000 audit[3298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2543 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:33.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963643532343063323332343434303133373832643663383832383039 Oct 29 00:35:33.555000 audit: BPF prog-id=141 op=UNLOAD Oct 29 00:35:33.555000 audit: BPF prog-id=140 op=UNLOAD Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:33.555000 audit: BPF prog-id=142 op=LOAD Oct 29 00:35:33.555000 audit[3298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2543 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:33.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963643532343063323332343434303133373832643663383832383039 Oct 29 00:35:33.590376 env[1223]: time="2025-10-29T00:35:33.590218517Z" level=info msg="StartContainer for \"9cd5240c232444013782d6c88280963034add517fa7e77e777570a2b1beb1195\" returns successfully" Oct 29 00:35:33.722195 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 29 00:35:33.722350 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 29 00:35:33.748853 kubelet[1963]: E1029 00:35:33.748818 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:33.847901 kubelet[1963]: I1029 00:35:33.847838 1963 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-sdhkw" podStartSLOduration=1.436953774 podStartE2EDuration="13.847813506s" podCreationTimestamp="2025-10-29 00:35:20 +0000 UTC" firstStartedPulling="2025-10-29 00:35:21.052619591 +0000 UTC m=+27.581252647" lastFinishedPulling="2025-10-29 00:35:33.463479363 +0000 UTC m=+39.992112379" observedRunningTime="2025-10-29 00:35:33.775578136 +0000 UTC m=+40.304211192" watchObservedRunningTime="2025-10-29 00:35:33.847813506 +0000 UTC m=+40.376446562" Oct 29 00:35:33.848630 env[1223]: time="2025-10-29T00:35:33.848595985Z" level=info msg="StopPodSandbox for \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\"" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:33.944 [INFO][3381] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:33.945 [INFO][3381] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" iface="eth0" netns="/var/run/netns/cni-ecaa1e40-361c-3583-7840-4a49007d820a" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:33.946 [INFO][3381] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" iface="eth0" netns="/var/run/netns/cni-ecaa1e40-361c-3583-7840-4a49007d820a" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:33.946 [INFO][3381] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" iface="eth0" netns="/var/run/netns/cni-ecaa1e40-361c-3583-7840-4a49007d820a" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:33.946 [INFO][3381] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:33.946 [INFO][3381] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:34.038 [INFO][3390] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" HandleID="k8s-pod-network.cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Workload="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:34.038 [INFO][3390] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:34.038 [INFO][3390] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:34.049 [WARNING][3390] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" HandleID="k8s-pod-network.cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Workload="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:34.049 [INFO][3390] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" HandleID="k8s-pod-network.cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Workload="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:34.051 [INFO][3390] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:34.055670 env[1223]: 2025-10-29 00:35:34.053 [INFO][3381] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:34.056406 env[1223]: time="2025-10-29T00:35:34.056240069Z" level=info msg="TearDown network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\" successfully" Oct 29 00:35:34.056406 env[1223]: time="2025-10-29T00:35:34.056283831Z" level=info msg="StopPodSandbox for \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\" returns successfully" Oct 29 00:35:34.132057 systemd[1]: run-netns-cni\x2decaa1e40\x2d361c\x2d3583\x2d7840\x2d4a49007d820a.mount: Deactivated successfully. Oct 29 00:35:34.169791 kubelet[1963]: I1029 00:35:34.169424 1963 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b646c413-82a9-46f9-92dc-f66ac1da428b-whisker-ca-bundle\") pod \"b646c413-82a9-46f9-92dc-f66ac1da428b\" (UID: \"b646c413-82a9-46f9-92dc-f66ac1da428b\") " Oct 29 00:35:34.169791 kubelet[1963]: I1029 00:35:34.169492 1963 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8dtc6\" (UniqueName: \"kubernetes.io/projected/b646c413-82a9-46f9-92dc-f66ac1da428b-kube-api-access-8dtc6\") pod \"b646c413-82a9-46f9-92dc-f66ac1da428b\" (UID: \"b646c413-82a9-46f9-92dc-f66ac1da428b\") " Oct 29 00:35:34.169791 kubelet[1963]: I1029 00:35:34.169538 1963 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b646c413-82a9-46f9-92dc-f66ac1da428b-whisker-backend-key-pair\") pod \"b646c413-82a9-46f9-92dc-f66ac1da428b\" (UID: \"b646c413-82a9-46f9-92dc-f66ac1da428b\") " Oct 29 00:35:34.173346 kubelet[1963]: I1029 00:35:34.173303 1963 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b646c413-82a9-46f9-92dc-f66ac1da428b-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "b646c413-82a9-46f9-92dc-f66ac1da428b" (UID: "b646c413-82a9-46f9-92dc-f66ac1da428b"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Oct 29 00:35:34.177269 kubelet[1963]: I1029 00:35:34.177106 1963 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b646c413-82a9-46f9-92dc-f66ac1da428b-kube-api-access-8dtc6" (OuterVolumeSpecName: "kube-api-access-8dtc6") pod "b646c413-82a9-46f9-92dc-f66ac1da428b" (UID: "b646c413-82a9-46f9-92dc-f66ac1da428b"). InnerVolumeSpecName "kube-api-access-8dtc6". PluginName "kubernetes.io/projected", VolumeGIDValue "" Oct 29 00:35:34.179079 systemd[1]: var-lib-kubelet-pods-b646c413\x2d82a9\x2d46f9\x2d92dc\x2df66ac1da428b-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Oct 29 00:35:34.181486 systemd[1]: var-lib-kubelet-pods-b646c413\x2d82a9\x2d46f9\x2d92dc\x2df66ac1da428b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8dtc6.mount: Deactivated successfully. Oct 29 00:35:34.182239 kubelet[1963]: I1029 00:35:34.181950 1963 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b646c413-82a9-46f9-92dc-f66ac1da428b-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "b646c413-82a9-46f9-92dc-f66ac1da428b" (UID: "b646c413-82a9-46f9-92dc-f66ac1da428b"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Oct 29 00:35:34.270157 kubelet[1963]: I1029 00:35:34.270100 1963 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b646c413-82a9-46f9-92dc-f66ac1da428b-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Oct 29 00:35:34.270157 kubelet[1963]: I1029 00:35:34.270145 1963 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b646c413-82a9-46f9-92dc-f66ac1da428b-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Oct 29 00:35:34.270157 kubelet[1963]: I1029 00:35:34.270155 1963 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-8dtc6\" (UniqueName: \"kubernetes.io/projected/b646c413-82a9-46f9-92dc-f66ac1da428b-kube-api-access-8dtc6\") on node \"localhost\" DevicePath \"\"" Oct 29 00:35:34.753261 kubelet[1963]: E1029 00:35:34.753224 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:34.765026 systemd[1]: Removed slice kubepods-besteffort-podb646c413_82a9_46f9_92dc_f66ac1da428b.slice. Oct 29 00:35:34.836323 systemd[1]: Created slice kubepods-besteffort-pod2e5c48c1_469b_4872_9822_ab3e1e33fe5e.slice. Oct 29 00:35:34.874163 kubelet[1963]: I1029 00:35:34.874110 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2e5c48c1-469b-4872-9822-ab3e1e33fe5e-whisker-ca-bundle\") pod \"whisker-7fc8f5ddc4-zc89z\" (UID: \"2e5c48c1-469b-4872-9822-ab3e1e33fe5e\") " pod="calico-system/whisker-7fc8f5ddc4-zc89z" Oct 29 00:35:34.874163 kubelet[1963]: I1029 00:35:34.874162 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6s8cv\" (UniqueName: \"kubernetes.io/projected/2e5c48c1-469b-4872-9822-ab3e1e33fe5e-kube-api-access-6s8cv\") pod \"whisker-7fc8f5ddc4-zc89z\" (UID: \"2e5c48c1-469b-4872-9822-ab3e1e33fe5e\") " pod="calico-system/whisker-7fc8f5ddc4-zc89z" Oct 29 00:35:34.874346 kubelet[1963]: I1029 00:35:34.874188 1963 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2e5c48c1-469b-4872-9822-ab3e1e33fe5e-whisker-backend-key-pair\") pod \"whisker-7fc8f5ddc4-zc89z\" (UID: \"2e5c48c1-469b-4872-9822-ab3e1e33fe5e\") " pod="calico-system/whisker-7fc8f5ddc4-zc89z" Oct 29 00:35:35.133046 systemd[1]: run-containerd-runc-k8s.io-9cd5240c232444013782d6c88280963034add517fa7e77e777570a2b1beb1195-runc.5HZAq1.mount: Deactivated successfully. Oct 29 00:35:35.142001 env[1223]: time="2025-10-29T00:35:35.141949128Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7fc8f5ddc4-zc89z,Uid:2e5c48c1-469b-4872-9822-ab3e1e33fe5e,Namespace:calico-system,Attempt:0,}" Oct 29 00:35:35.155000 audit[3493]: AVC avc: denied { write } for pid=3493 comm="tee" name="fd" dev="proc" ino=18405 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:35.155000 audit[3493]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdb7f37f1 a2=241 a3=1b6 items=1 ppid=3444 pid=3493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.155000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 29 00:35:35.155000 audit: PATH item=0 name="/dev/fd/63" inode=19783 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:35.155000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:35.162000 audit[3487]: AVC avc: denied { write } for pid=3487 comm="tee" name="fd" dev="proc" ino=19792 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:35.162000 audit[3487]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe5ffb7e2 a2=241 a3=1b6 items=1 ppid=3448 pid=3487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.162000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 29 00:35:35.162000 audit: PATH item=0 name="/dev/fd/63" inode=19782 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:35.162000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:35.185000 audit[3502]: AVC avc: denied { write } for pid=3502 comm="tee" name="fd" dev="proc" ino=20564 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:35.185000 audit[3502]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe64867f3 a2=241 a3=1b6 items=1 ppid=3452 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.185000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 29 00:35:35.185000 audit: PATH item=0 name="/dev/fd/63" inode=19794 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:35.185000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:35.197000 audit[3510]: AVC avc: denied { write } for pid=3510 comm="tee" name="fd" dev="proc" ino=19807 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:35.197000 audit[3510]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffefb57f2 a2=241 a3=1b6 items=1 ppid=3442 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.197000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 29 00:35:35.197000 audit: PATH item=0 name="/dev/fd/63" inode=20559 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:35.197000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:35.198000 audit[3524]: AVC avc: denied { write } for pid=3524 comm="tee" name="fd" dev="proc" ino=18419 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:35.198000 audit[3524]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe42c47f1 a2=241 a3=1b6 items=1 ppid=3453 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.198000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 29 00:35:35.198000 audit: PATH item=0 name="/dev/fd/63" inode=20568 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:35.199000 audit[3531]: AVC avc: denied { write } for pid=3531 comm="tee" name="fd" dev="proc" ino=18423 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:35.199000 audit[3531]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd6be37e1 a2=241 a3=1b6 items=1 ppid=3451 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.199000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 29 00:35:35.199000 audit: PATH item=0 name="/dev/fd/63" inode=21544 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:35.199000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:35.209000 audit[3506]: AVC avc: denied { write } for pid=3506 comm="tee" name="fd" dev="proc" ino=18427 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 29 00:35:35.209000 audit[3506]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd65d07f1 a2=241 a3=1b6 items=1 ppid=3461 pid=3506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.209000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 29 00:35:35.209000 audit: PATH item=0 name="/dev/fd/63" inode=20558 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 29 00:35:35.209000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:35.198000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 29 00:35:35.405000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.405000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.405000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.405000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.405000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.405000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.405000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.405000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.405000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.405000 audit: BPF prog-id=143 op=LOAD Oct 29 00:35:35.405000 audit[3583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff1e6af38 a2=98 a3=fffff1e6af28 items=0 ppid=3455 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.405000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 29 00:35:35.406000 audit: BPF prog-id=143 op=UNLOAD Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit: BPF prog-id=144 op=LOAD Oct 29 00:35:35.406000 audit[3583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff1e6ade8 a2=74 a3=95 items=0 ppid=3455 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.406000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 29 00:35:35.406000 audit: BPF prog-id=144 op=UNLOAD Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit: BPF prog-id=145 op=LOAD Oct 29 00:35:35.406000 audit[3583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff1e6ae18 a2=40 a3=fffff1e6ae48 items=0 ppid=3455 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.406000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 29 00:35:35.406000 audit: BPF prog-id=145 op=UNLOAD Oct 29 00:35:35.406000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.406000 audit[3583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffff1e6af30 a2=50 a3=0 items=0 ppid=3455 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.406000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 29 00:35:35.407000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.407000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.407000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.407000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.407000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.407000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.407000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.407000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.407000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.407000 audit: BPF prog-id=146 op=LOAD Oct 29 00:35:35.407000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcb4ff4f8 a2=98 a3=ffffcb4ff4e8 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.407000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.407000 audit: BPF prog-id=146 op=UNLOAD Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit: BPF prog-id=147 op=LOAD Oct 29 00:35:35.408000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcb4ff188 a2=74 a3=95 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.408000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.408000 audit: BPF prog-id=147 op=UNLOAD Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.408000 audit: BPF prog-id=148 op=LOAD Oct 29 00:35:35.408000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcb4ff1e8 a2=94 a3=2 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.408000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.408000 audit: BPF prog-id=148 op=UNLOAD Oct 29 00:35:35.414148 systemd-networkd[1059]: calie12d21157ac: Link UP Oct 29 00:35:35.415519 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 29 00:35:35.415593 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie12d21157ac: link becomes ready Oct 29 00:35:35.416539 systemd-networkd[1059]: calie12d21157ac: Gained carrier Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.223 [INFO][3518] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.255 [INFO][3518] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0 whisker-7fc8f5ddc4- calico-system 2e5c48c1-469b-4872-9822-ab3e1e33fe5e 941 0 2025-10-29 00:35:34 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7fc8f5ddc4 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-7fc8f5ddc4-zc89z eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calie12d21157ac [] [] }} ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Namespace="calico-system" Pod="whisker-7fc8f5ddc4-zc89z" WorkloadEndpoint="localhost-k8s-whisker--7fc8f5ddc4--zc89z-" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.256 [INFO][3518] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Namespace="calico-system" Pod="whisker-7fc8f5ddc4-zc89z" WorkloadEndpoint="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.327 [INFO][3542] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" HandleID="k8s-pod-network.32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Workload="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.327 [INFO][3542] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" HandleID="k8s-pod-network.32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Workload="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000327680), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-7fc8f5ddc4-zc89z", "timestamp":"2025-10-29 00:35:35.327732993 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.327 [INFO][3542] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.327 [INFO][3542] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.328 [INFO][3542] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.354 [INFO][3542] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" host="localhost" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.367 [INFO][3542] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.379 [INFO][3542] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.383 [INFO][3542] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.386 [INFO][3542] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.386 [INFO][3542] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" host="localhost" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.387 [INFO][3542] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2 Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.392 [INFO][3542] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" host="localhost" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.398 [INFO][3542] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" host="localhost" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.398 [INFO][3542] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" host="localhost" Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.398 [INFO][3542] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:35.432279 env[1223]: 2025-10-29 00:35:35.398 [INFO][3542] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" HandleID="k8s-pod-network.32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Workload="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" Oct 29 00:35:35.432929 env[1223]: 2025-10-29 00:35:35.400 [INFO][3518] cni-plugin/k8s.go 418: Populated endpoint ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Namespace="calico-system" Pod="whisker-7fc8f5ddc4-zc89z" WorkloadEndpoint="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0", GenerateName:"whisker-7fc8f5ddc4-", Namespace:"calico-system", SelfLink:"", UID:"2e5c48c1-469b-4872-9822-ab3e1e33fe5e", ResourceVersion:"941", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7fc8f5ddc4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-7fc8f5ddc4-zc89z", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie12d21157ac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:35.432929 env[1223]: 2025-10-29 00:35:35.400 [INFO][3518] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Namespace="calico-system" Pod="whisker-7fc8f5ddc4-zc89z" WorkloadEndpoint="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" Oct 29 00:35:35.432929 env[1223]: 2025-10-29 00:35:35.400 [INFO][3518] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie12d21157ac ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Namespace="calico-system" Pod="whisker-7fc8f5ddc4-zc89z" WorkloadEndpoint="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" Oct 29 00:35:35.432929 env[1223]: 2025-10-29 00:35:35.417 [INFO][3518] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Namespace="calico-system" Pod="whisker-7fc8f5ddc4-zc89z" WorkloadEndpoint="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" Oct 29 00:35:35.432929 env[1223]: 2025-10-29 00:35:35.417 [INFO][3518] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Namespace="calico-system" Pod="whisker-7fc8f5ddc4-zc89z" WorkloadEndpoint="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0", GenerateName:"whisker-7fc8f5ddc4-", Namespace:"calico-system", SelfLink:"", UID:"2e5c48c1-469b-4872-9822-ab3e1e33fe5e", ResourceVersion:"941", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7fc8f5ddc4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2", Pod:"whisker-7fc8f5ddc4-zc89z", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie12d21157ac", MAC:"96:70:a8:15:dc:37", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:35.432929 env[1223]: 2025-10-29 00:35:35.430 [INFO][3518] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2" Namespace="calico-system" Pod="whisker-7fc8f5ddc4-zc89z" WorkloadEndpoint="localhost-k8s-whisker--7fc8f5ddc4--zc89z-eth0" Oct 29 00:35:35.442891 env[1223]: time="2025-10-29T00:35:35.442785480Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:35.443008 env[1223]: time="2025-10-29T00:35:35.442887844Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:35.443008 env[1223]: time="2025-10-29T00:35:35.442931286Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:35.443278 env[1223]: time="2025-10-29T00:35:35.443229060Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2 pid=3600 runtime=io.containerd.runc.v2 Oct 29 00:35:35.459692 systemd[1]: Started cri-containerd-32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2.scope. Oct 29 00:35:35.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit: BPF prog-id=149 op=LOAD Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=3600 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332633961323437373062613631343936663863643338363563666161 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3600 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332633961323437373062613631343936663863643338363563666161 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit: BPF prog-id=150 op=LOAD Oct 29 00:35:35.479000 audit[3610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3600 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332633961323437373062613631343936663863643338363563666161 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit: BPF prog-id=151 op=LOAD Oct 29 00:35:35.479000 audit[3610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3600 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332633961323437373062613631343936663863643338363563666161 Oct 29 00:35:35.479000 audit: BPF prog-id=151 op=UNLOAD Oct 29 00:35:35.479000 audit: BPF prog-id=150 op=UNLOAD Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { perfmon } for pid=3610 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit[3610]: AVC avc: denied { bpf } for pid=3610 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.479000 audit: BPF prog-id=152 op=LOAD Oct 29 00:35:35.479000 audit[3610]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3600 pid=3610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332633961323437373062613631343936663863643338363563666161 Oct 29 00:35:35.481668 systemd-resolved[1162]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:35.499622 env[1223]: time="2025-10-29T00:35:35.499534646Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7fc8f5ddc4-zc89z,Uid:2e5c48c1-469b-4872-9822-ab3e1e33fe5e,Namespace:calico-system,Attempt:0,} returns sandbox id \"32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2\"" Oct 29 00:35:35.502140 env[1223]: time="2025-10-29T00:35:35.502107806Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 29 00:35:35.516000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.516000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.516000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.516000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.516000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.516000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.516000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.516000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.516000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.516000 audit: BPF prog-id=153 op=LOAD Oct 29 00:35:35.516000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcb4ff1a8 a2=40 a3=ffffcb4ff1d8 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.516000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.517000 audit: BPF prog-id=153 op=UNLOAD Oct 29 00:35:35.517000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.517000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffcb4ff2c0 a2=50 a3=0 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.517000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.525000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.525000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcb4ff218 a2=28 a3=ffffcb4ff348 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.525000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.526000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.526000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb4ff248 a2=28 a3=ffffcb4ff378 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.526000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.526000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.526000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb4ff0f8 a2=28 a3=ffffcb4ff228 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.526000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.526000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.526000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcb4ff268 a2=28 a3=ffffcb4ff398 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.526000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.526000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.526000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcb4ff248 a2=28 a3=ffffcb4ff378 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.526000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.526000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.526000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcb4ff238 a2=28 a3=ffffcb4ff368 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.526000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.526000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.526000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcb4ff268 a2=28 a3=ffffcb4ff398 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.526000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb4ff248 a2=28 a3=ffffcb4ff378 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.527000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb4ff268 a2=28 a3=ffffcb4ff398 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.527000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb4ff238 a2=28 a3=ffffcb4ff368 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.527000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcb4ff2b8 a2=28 a3=ffffcb4ff3f8 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.527000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcb4feff0 a2=50 a3=0 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.527000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.527000 audit: BPF prog-id=154 op=LOAD Oct 29 00:35:35.527000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcb4feff8 a2=94 a3=5 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.527000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.528000 audit: BPF prog-id=154 op=UNLOAD Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcb4ff100 a2=50 a3=0 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.528000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffcb4ff248 a2=4 a3=3 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.528000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.528000 audit[3585]: AVC avc: denied { confidentiality } for pid=3585 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:35.528000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcb4ff228 a2=94 a3=6 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.528000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.529000 audit[3585]: AVC avc: denied { confidentiality } for pid=3585 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:35.529000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcb4fe9f8 a2=94 a3=83 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.530000 audit[3585]: AVC avc: denied { confidentiality } for pid=3585 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:35.530000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcb4fe9f8 a2=94 a3=83 items=0 ppid=3455 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.530000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit: BPF prog-id=155 op=LOAD Oct 29 00:35:35.539000 audit[3634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffec4e9668 a2=98 a3=ffffec4e9658 items=0 ppid=3455 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.539000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 29 00:35:35.539000 audit: BPF prog-id=155 op=UNLOAD Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.539000 audit: BPF prog-id=156 op=LOAD Oct 29 00:35:35.539000 audit[3634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffec4e9518 a2=74 a3=95 items=0 ppid=3455 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.539000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 29 00:35:35.540000 audit: BPF prog-id=156 op=UNLOAD Oct 29 00:35:35.540000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.540000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.540000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.540000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.540000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.540000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.540000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.540000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.540000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.540000 audit: BPF prog-id=157 op=LOAD Oct 29 00:35:35.540000 audit[3634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffec4e9548 a2=40 a3=ffffec4e9578 items=0 ppid=3455 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.540000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 29 00:35:35.540000 audit: BPF prog-id=157 op=UNLOAD Oct 29 00:35:35.580633 kubelet[1963]: I1029 00:35:35.580581 1963 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="b646c413-82a9-46f9-92dc-f66ac1da428b" path="/var/lib/kubelet/pods/b646c413-82a9-46f9-92dc-f66ac1da428b/volumes" Oct 29 00:35:35.608108 systemd-networkd[1059]: vxlan.calico: Link UP Oct 29 00:35:35.608118 systemd-networkd[1059]: vxlan.calico: Gained carrier Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit: BPF prog-id=158 op=LOAD Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1beb558 a2=98 a3=ffffd1beb548 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit: BPF prog-id=158 op=UNLOAD Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit: BPF prog-id=159 op=LOAD Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1beb238 a2=74 a3=95 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit: BPF prog-id=159 op=UNLOAD Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit: BPF prog-id=160 op=LOAD Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1beb298 a2=94 a3=2 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit: BPF prog-id=160 op=UNLOAD Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd1beb2c8 a2=28 a3=ffffd1beb3f8 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1beb2f8 a2=28 a3=ffffd1beb428 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1beb1a8 a2=28 a3=ffffd1beb2d8 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd1beb318 a2=28 a3=ffffd1beb448 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd1beb2f8 a2=28 a3=ffffd1beb428 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd1beb2e8 a2=28 a3=ffffd1beb418 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd1beb318 a2=28 a3=ffffd1beb448 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1beb2f8 a2=28 a3=ffffd1beb428 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1beb318 a2=28 a3=ffffd1beb448 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1beb2e8 a2=28 a3=ffffd1beb418 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd1beb368 a2=28 a3=ffffd1beb4a8 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.623000 audit: BPF prog-id=161 op=LOAD Oct 29 00:35:35.623000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd1beb188 a2=40 a3=ffffd1beb1b8 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.623000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.624000 audit: BPF prog-id=161 op=UNLOAD Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffd1beb1b0 a2=50 a3=0 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.624000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffd1beb1b0 a2=50 a3=0 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.624000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit: BPF prog-id=162 op=LOAD Oct 29 00:35:35.624000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd1bea918 a2=94 a3=2 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.624000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.624000 audit: BPF prog-id=162 op=UNLOAD Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { perfmon } for pid=3660 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit[3660]: AVC avc: denied { bpf } for pid=3660 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.624000 audit: BPF prog-id=163 op=LOAD Oct 29 00:35:35.624000 audit[3660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd1beaaa8 a2=94 a3=30 items=0 ppid=3455 pid=3660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.624000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit: BPF prog-id=164 op=LOAD Oct 29 00:35:35.632000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff244fe18 a2=98 a3=fffff244fe08 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.632000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.632000 audit: BPF prog-id=164 op=UNLOAD Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.632000 audit: BPF prog-id=165 op=LOAD Oct 29 00:35:35.632000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff244faa8 a2=74 a3=95 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.632000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.633000 audit: BPF prog-id=165 op=UNLOAD Oct 29 00:35:35.633000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.633000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.633000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.633000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.633000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.633000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.633000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.633000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.633000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.633000 audit: BPF prog-id=166 op=LOAD Oct 29 00:35:35.633000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff244fb08 a2=94 a3=2 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.633000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.633000 audit: BPF prog-id=166 op=UNLOAD Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit: BPF prog-id=167 op=LOAD Oct 29 00:35:35.717000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff244fac8 a2=40 a3=fffff244faf8 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.717000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.717000 audit: BPF prog-id=167 op=UNLOAD Oct 29 00:35:35.717000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.717000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff244fbe0 a2=50 a3=0 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.717000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.727979 env[1223]: time="2025-10-29T00:35:35.727938099Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff244fb38 a2=28 a3=fffff244fc68 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff244fb68 a2=28 a3=fffff244fc98 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff244fa18 a2=28 a3=fffff244fb48 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff244fb88 a2=28 a3=fffff244fcb8 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff244fb68 a2=28 a3=fffff244fc98 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff244fb58 a2=28 a3=fffff244fc88 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff244fb88 a2=28 a3=fffff244fcb8 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff244fb68 a2=28 a3=fffff244fc98 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff244fb88 a2=28 a3=fffff244fcb8 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.726000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.726000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff244fb58 a2=28 a3=fffff244fc88 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.726000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff244fbd8 a2=28 a3=fffff244fd18 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.727000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff244f910 a2=50 a3=0 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.727000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit: BPF prog-id=168 op=LOAD Oct 29 00:35:35.727000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff244f918 a2=94 a3=5 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.727000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.727000 audit: BPF prog-id=168 op=UNLOAD Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff244fa20 a2=50 a3=0 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.727000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff244fb68 a2=4 a3=3 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.727000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { confidentiality } for pid=3669 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:35.727000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff244fb48 a2=94 a3=6 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.727000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { confidentiality } for pid=3669 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:35.727000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff244f318 a2=94 a3=83 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.727000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { perfmon } for pid=3669 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.727000 audit[3669]: AVC avc: denied { confidentiality } for pid=3669 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 29 00:35:35.727000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff244f318 a2=94 a3=83 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.727000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.728000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.728000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff2450d58 a2=10 a3=fffff2450e48 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.728000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.728000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.728000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff2450c18 a2=10 a3=fffff2450d08 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.728000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.728000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.728000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff2450b88 a2=10 a3=fffff2450d08 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.728000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.728000 audit[3669]: AVC avc: denied { bpf } for pid=3669 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:35.728000 audit[3669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff2450b88 a2=10 a3=fffff2450d08 items=0 ppid=3455 pid=3669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.728000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 29 00:35:35.733482 env[1223]: time="2025-10-29T00:35:35.733326231Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 29 00:35:35.733702 kubelet[1963]: E1029 00:35:35.733669 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:35:35.733779 kubelet[1963]: E1029 00:35:35.733727 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:35:35.734088 kubelet[1963]: E1029 00:35:35.734055 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:dd4f729e9553404383e4306eaeb84892,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-6s8cv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fc8f5ddc4-zc89z_calico-system(2e5c48c1-469b-4872-9822-ab3e1e33fe5e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:35.736020 env[1223]: time="2025-10-29T00:35:35.735992715Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 29 00:35:35.744000 audit: BPF prog-id=163 op=UNLOAD Oct 29 00:35:35.792000 audit[3692]: NETFILTER_CFG table=nat:105 family=2 entries=15 op=nft_register_chain pid=3692 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:35.792000 audit[3692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=fffff3422d70 a2=0 a3=ffff95bf1fa8 items=0 ppid=3455 pid=3692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.792000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:35.794000 audit[3695]: NETFILTER_CFG table=mangle:106 family=2 entries=16 op=nft_register_chain pid=3695 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:35.794000 audit[3695]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffffdf5d850 a2=0 a3=ffffb189efa8 items=0 ppid=3455 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.794000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:35.797000 audit[3691]: NETFILTER_CFG table=raw:107 family=2 entries=21 op=nft_register_chain pid=3691 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:35.797000 audit[3691]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffecc60a50 a2=0 a3=ffff8fc19fa8 items=0 ppid=3455 pid=3691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.797000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:35.803000 audit[3696]: NETFILTER_CFG table=filter:108 family=2 entries=94 op=nft_register_chain pid=3696 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:35.803000 audit[3696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=ffffe443dd20 a2=0 a3=ffff91c30fa8 items=0 ppid=3455 pid=3696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:35.803000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:35.931869 env[1223]: time="2025-10-29T00:35:35.931816489Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:35.933113 env[1223]: time="2025-10-29T00:35:35.933061747Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 29 00:35:35.933481 kubelet[1963]: E1029 00:35:35.933410 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:35:35.933761 kubelet[1963]: E1029 00:35:35.933497 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:35:35.933793 kubelet[1963]: E1029 00:35:35.933607 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-6s8cv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fc8f5ddc4-zc89z_calico-system(2e5c48c1-469b-4872-9822-ab3e1e33fe5e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:35.934850 kubelet[1963]: E1029 00:35:35.934799 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fc8f5ddc4-zc89z" podUID="2e5c48c1-469b-4872-9822-ab3e1e33fe5e" Oct 29 00:35:36.131425 systemd[1]: run-containerd-runc-k8s.io-32c9a24770ba61496f8cd3865cfaa88b8e133dad14b7dd87016916ee78a769e2-runc.OEHwPJ.mount: Deactivated successfully. Oct 29 00:35:36.758178 kubelet[1963]: E1029 00:35:36.758129 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fc8f5ddc4-zc89z" podUID="2e5c48c1-469b-4872-9822-ab3e1e33fe5e" Oct 29 00:35:36.778000 audit[3707]: NETFILTER_CFG table=filter:109 family=2 entries=20 op=nft_register_rule pid=3707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:36.778000 audit[3707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd4b89a10 a2=0 a3=1 items=0 ppid=2118 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:36.778000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:36.787000 audit[3707]: NETFILTER_CFG table=nat:110 family=2 entries=14 op=nft_register_rule pid=3707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:36.787000 audit[3707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffd4b89a10 a2=0 a3=1 items=0 ppid=2118 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:36.787000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:36.790581 systemd-networkd[1059]: vxlan.calico: Gained IPv6LL Oct 29 00:35:37.301588 systemd-networkd[1059]: calie12d21157ac: Gained IPv6LL Oct 29 00:35:40.580705 env[1223]: time="2025-10-29T00:35:40.579553974Z" level=info msg="StopPodSandbox for \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\"" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.650 [INFO][3722] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.650 [INFO][3722] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" iface="eth0" netns="/var/run/netns/cni-1210169a-8d78-59e3-8e32-fa153e8106ab" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.650 [INFO][3722] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" iface="eth0" netns="/var/run/netns/cni-1210169a-8d78-59e3-8e32-fa153e8106ab" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.653 [INFO][3722] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" iface="eth0" netns="/var/run/netns/cni-1210169a-8d78-59e3-8e32-fa153e8106ab" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.653 [INFO][3722] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.653 [INFO][3722] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.677 [INFO][3731] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" HandleID="k8s-pod-network.20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.677 [INFO][3731] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.677 [INFO][3731] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.686 [WARNING][3731] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" HandleID="k8s-pod-network.20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.686 [INFO][3731] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" HandleID="k8s-pod-network.20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.688 [INFO][3731] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:40.693590 env[1223]: 2025-10-29 00:35:40.690 [INFO][3722] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:40.695983 env[1223]: time="2025-10-29T00:35:40.695931842Z" level=info msg="TearDown network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\" successfully" Oct 29 00:35:40.696056 env[1223]: time="2025-10-29T00:35:40.695982084Z" level=info msg="StopPodSandbox for \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\" returns successfully" Oct 29 00:35:40.696041 systemd[1]: run-netns-cni\x2d1210169a\x2d8d78\x2d59e3\x2d8e32\x2dfa153e8106ab.mount: Deactivated successfully. Oct 29 00:35:40.696954 env[1223]: time="2025-10-29T00:35:40.696674153Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5984bf88b-b49cr,Uid:7f990c68-0bdc-4bb4-be36-8cb47e35962e,Namespace:calico-apiserver,Attempt:1,}" Oct 29 00:35:40.838150 systemd-networkd[1059]: calie7c45a8cc87: Link UP Oct 29 00:35:40.841079 systemd-networkd[1059]: calie7c45a8cc87: Gained carrier Oct 29 00:35:40.841579 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie7c45a8cc87: link becomes ready Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.747 [INFO][3740] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0 calico-apiserver-5984bf88b- calico-apiserver 7f990c68-0bdc-4bb4-be36-8cb47e35962e 973 0 2025-10-29 00:35:14 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5984bf88b projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5984bf88b-b49cr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie7c45a8cc87 [] [] }} ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Namespace="calico-apiserver" Pod="calico-apiserver-5984bf88b-b49cr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5984bf88b--b49cr-" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.747 [INFO][3740] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Namespace="calico-apiserver" Pod="calico-apiserver-5984bf88b-b49cr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.773 [INFO][3754] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" HandleID="k8s-pod-network.a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.773 [INFO][3754] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" HandleID="k8s-pod-network.a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c660), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5984bf88b-b49cr", "timestamp":"2025-10-29 00:35:40.773497353 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.773 [INFO][3754] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.773 [INFO][3754] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.773 [INFO][3754] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.784 [INFO][3754] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" host="localhost" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.788 [INFO][3754] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.792 [INFO][3754] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.807 [INFO][3754] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.814 [INFO][3754] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.814 [INFO][3754] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" host="localhost" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.816 [INFO][3754] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.822 [INFO][3754] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" host="localhost" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.832 [INFO][3754] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" host="localhost" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.832 [INFO][3754] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" host="localhost" Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.832 [INFO][3754] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:40.859470 env[1223]: 2025-10-29 00:35:40.832 [INFO][3754] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" HandleID="k8s-pod-network.a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.860100 env[1223]: 2025-10-29 00:35:40.834 [INFO][3740] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Namespace="calico-apiserver" Pod="calico-apiserver-5984bf88b-b49cr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0", GenerateName:"calico-apiserver-5984bf88b-", Namespace:"calico-apiserver", SelfLink:"", UID:"7f990c68-0bdc-4bb4-be36-8cb47e35962e", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5984bf88b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5984bf88b-b49cr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie7c45a8cc87", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:40.860100 env[1223]: 2025-10-29 00:35:40.834 [INFO][3740] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Namespace="calico-apiserver" Pod="calico-apiserver-5984bf88b-b49cr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.860100 env[1223]: 2025-10-29 00:35:40.834 [INFO][3740] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie7c45a8cc87 ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Namespace="calico-apiserver" Pod="calico-apiserver-5984bf88b-b49cr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.860100 env[1223]: 2025-10-29 00:35:40.838 [INFO][3740] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Namespace="calico-apiserver" Pod="calico-apiserver-5984bf88b-b49cr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.860100 env[1223]: 2025-10-29 00:35:40.841 [INFO][3740] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Namespace="calico-apiserver" Pod="calico-apiserver-5984bf88b-b49cr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0", GenerateName:"calico-apiserver-5984bf88b-", Namespace:"calico-apiserver", SelfLink:"", UID:"7f990c68-0bdc-4bb4-be36-8cb47e35962e", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5984bf88b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e", Pod:"calico-apiserver-5984bf88b-b49cr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie7c45a8cc87", MAC:"92:c4:de:76:60:e9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:40.860100 env[1223]: 2025-10-29 00:35:40.857 [INFO][3740] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e" Namespace="calico-apiserver" Pod="calico-apiserver-5984bf88b-b49cr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:40.870966 env[1223]: time="2025-10-29T00:35:40.870564847Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:40.870966 env[1223]: time="2025-10-29T00:35:40.870626890Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:40.870966 env[1223]: time="2025-10-29T00:35:40.870655331Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:40.871171 env[1223]: time="2025-10-29T00:35:40.871101470Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e pid=3787 runtime=io.containerd.runc.v2 Oct 29 00:35:40.881000 audit[3803]: NETFILTER_CFG table=filter:111 family=2 entries=50 op=nft_register_chain pid=3803 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:40.882810 kernel: kauditd_printk_skb: 653 callbacks suppressed Oct 29 00:35:40.882880 kernel: audit: type=1325 audit(1761698140.881:1168): table=filter:111 family=2 entries=50 op=nft_register_chain pid=3803 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:40.881000 audit[3803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=fffffa927230 a2=0 a3=ffffa6fe9fa8 items=0 ppid=3455 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.891443 kernel: audit: type=1300 audit(1761698140.881:1168): arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=fffffa927230 a2=0 a3=ffffa6fe9fa8 items=0 ppid=3455 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.881000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:40.894545 kernel: audit: type=1327 audit(1761698140.881:1168): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:40.896050 systemd[1]: Started cri-containerd-a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e.scope. Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.914409 kernel: audit: type=1400 audit(1761698140.908:1169): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.914497 kernel: audit: type=1400 audit(1761698140.908:1170): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.914522 kernel: audit: type=1400 audit(1761698140.908:1171): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.919857 kernel: audit: type=1400 audit(1761698140.908:1172): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.919943 kernel: audit: type=1400 audit(1761698140.908:1173): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.922684 systemd-resolved[1162]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.925539 kernel: audit: type=1400 audit(1761698140.908:1174): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.925609 kernel: audit: type=1400 audit(1761698140.908:1175): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit: BPF prog-id=169 op=LOAD Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3787 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133313832353737333063356236383465323661613932306562666531 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3787 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133313832353737333063356236383465323661613932306562666531 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.908000 audit: BPF prog-id=170 op=LOAD Oct 29 00:35:40.908000 audit[3798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3787 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133313832353737333063356236383465323661613932306562666531 Oct 29 00:35:40.911000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.911000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.911000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.911000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.911000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.911000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.911000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.911000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.911000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.911000 audit: BPF prog-id=171 op=LOAD Oct 29 00:35:40.911000 audit[3798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3787 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133313832353737333063356236383465323661613932306562666531 Oct 29 00:35:40.913000 audit: BPF prog-id=171 op=UNLOAD Oct 29 00:35:40.913000 audit: BPF prog-id=170 op=UNLOAD Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { perfmon } for pid=3798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit[3798]: AVC avc: denied { bpf } for pid=3798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:40.913000 audit: BPF prog-id=172 op=LOAD Oct 29 00:35:40.913000 audit[3798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3787 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:40.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133313832353737333063356236383465323661613932306562666531 Oct 29 00:35:40.949247 env[1223]: time="2025-10-29T00:35:40.949201763Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5984bf88b-b49cr,Uid:7f990c68-0bdc-4bb4-be36-8cb47e35962e,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e\"" Oct 29 00:35:40.952763 env[1223]: time="2025-10-29T00:35:40.952726872Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:41.157347 env[1223]: time="2025-10-29T00:35:41.157206861Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:41.159117 env[1223]: time="2025-10-29T00:35:41.159055418Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:41.161127 kubelet[1963]: E1029 00:35:41.160835 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:41.161127 kubelet[1963]: E1029 00:35:41.160899 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:41.161127 kubelet[1963]: E1029 00:35:41.161061 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hr8ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5984bf88b-b49cr_calico-apiserver(7f990c68-0bdc-4bb4-be36-8cb47e35962e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:41.162400 kubelet[1963]: E1029 00:35:41.162360 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" podUID="7f990c68-0bdc-4bb4-be36-8cb47e35962e" Oct 29 00:35:41.769779 kubelet[1963]: E1029 00:35:41.769618 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" podUID="7f990c68-0bdc-4bb4-be36-8cb47e35962e" Oct 29 00:35:41.796000 audit[3822]: NETFILTER_CFG table=filter:112 family=2 entries=20 op=nft_register_rule pid=3822 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:41.796000 audit[3822]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcb58a5a0 a2=0 a3=1 items=0 ppid=2118 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.796000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:41.804000 audit[3822]: NETFILTER_CFG table=nat:113 family=2 entries=14 op=nft_register_rule pid=3822 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:41.804000 audit[3822]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffcb58a5a0 a2=0 a3=1 items=0 ppid=2118 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:41.804000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:42.579274 env[1223]: time="2025-10-29T00:35:42.579224354Z" level=info msg="StopPodSandbox for \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\"" Oct 29 00:35:42.579619 env[1223]: time="2025-10-29T00:35:42.579247035Z" level=info msg="StopPodSandbox for \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\"" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.631 [INFO][3849] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.631 [INFO][3849] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" iface="eth0" netns="/var/run/netns/cni-d829e103-bba4-e895-79a2-1f79bd29674a" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.632 [INFO][3849] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" iface="eth0" netns="/var/run/netns/cni-d829e103-bba4-e895-79a2-1f79bd29674a" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.632 [INFO][3849] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" iface="eth0" netns="/var/run/netns/cni-d829e103-bba4-e895-79a2-1f79bd29674a" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.632 [INFO][3849] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.632 [INFO][3849] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.654 [INFO][3865] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" HandleID="k8s-pod-network.fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.654 [INFO][3865] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.654 [INFO][3865] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.663 [WARNING][3865] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" HandleID="k8s-pod-network.fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.663 [INFO][3865] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" HandleID="k8s-pod-network.fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.664 [INFO][3865] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:42.667538 env[1223]: 2025-10-29 00:35:42.665 [INFO][3849] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:42.669948 env[1223]: time="2025-10-29T00:35:42.669904650Z" level=info msg="TearDown network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\" successfully" Oct 29 00:35:42.669948 env[1223]: time="2025-10-29T00:35:42.669946412Z" level=info msg="StopPodSandbox for \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\" returns successfully" Oct 29 00:35:42.670714 env[1223]: time="2025-10-29T00:35:42.670664641Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-64b9647db-jnrkc,Uid:7113e3f3-c736-4216-8f92-dee9d64f1690,Namespace:calico-system,Attempt:1,}" Oct 29 00:35:42.671392 systemd[1]: run-netns-cni\x2dd829e103\x2dbba4\x2de895\x2d79a2\x2d1f79bd29674a.mount: Deactivated successfully. Oct 29 00:35:42.677550 systemd-networkd[1059]: calie7c45a8cc87: Gained IPv6LL Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.640 [INFO][3850] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.641 [INFO][3850] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" iface="eth0" netns="/var/run/netns/cni-b5dbfb2e-75a0-d1b9-bf57-fe28fa6fb419" Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.641 [INFO][3850] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" iface="eth0" netns="/var/run/netns/cni-b5dbfb2e-75a0-d1b9-bf57-fe28fa6fb419" Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.641 [INFO][3850] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" iface="eth0" netns="/var/run/netns/cni-b5dbfb2e-75a0-d1b9-bf57-fe28fa6fb419" Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.641 [INFO][3850] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.641 [INFO][3850] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.664 [INFO][3871] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" HandleID="k8s-pod-network.e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.664 [INFO][3871] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.664 [INFO][3871] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.676 [WARNING][3871] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" HandleID="k8s-pod-network.e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.676 [INFO][3871] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" HandleID="k8s-pod-network.e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.679 [INFO][3871] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:42.690194 env[1223]: 2025-10-29 00:35:42.681 [INFO][3850] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:42.694492 systemd[1]: run-netns-cni\x2db5dbfb2e\x2d75a0\x2dd1b9\x2dbf57\x2dfe28fa6fb419.mount: Deactivated successfully. Oct 29 00:35:42.695544 env[1223]: time="2025-10-29T00:35:42.695347447Z" level=info msg="TearDown network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\" successfully" Oct 29 00:35:42.695544 env[1223]: time="2025-10-29T00:35:42.695403649Z" level=info msg="StopPodSandbox for \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\" returns successfully" Oct 29 00:35:42.695787 kubelet[1963]: E1029 00:35:42.695734 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:42.696732 env[1223]: time="2025-10-29T00:35:42.696677101Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-mmtvr,Uid:6cb9f80b-c57b-4005-9779-057c027d0c90,Namespace:kube-system,Attempt:1,}" Oct 29 00:35:42.772865 kubelet[1963]: E1029 00:35:42.772814 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" podUID="7f990c68-0bdc-4bb4-be36-8cb47e35962e" Oct 29 00:35:42.802527 systemd-networkd[1059]: calid2d5dc31dc6: Link UP Oct 29 00:35:42.805046 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 29 00:35:42.805088 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid2d5dc31dc6: link becomes ready Oct 29 00:35:42.804812 systemd-networkd[1059]: calid2d5dc31dc6: Gained carrier Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.720 [INFO][3881] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0 calico-kube-controllers-64b9647db- calico-system 7113e3f3-c736-4216-8f92-dee9d64f1690 992 0 2025-10-29 00:35:20 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:64b9647db projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-64b9647db-jnrkc eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calid2d5dc31dc6 [] [] }} ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Namespace="calico-system" Pod="calico-kube-controllers-64b9647db-jnrkc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.720 [INFO][3881] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Namespace="calico-system" Pod="calico-kube-controllers-64b9647db-jnrkc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.753 [INFO][3908] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" HandleID="k8s-pod-network.4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.753 [INFO][3908] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" HandleID="k8s-pod-network.4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c38d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-64b9647db-jnrkc", "timestamp":"2025-10-29 00:35:42.753401333 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.753 [INFO][3908] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.753 [INFO][3908] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.754 [INFO][3908] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.765 [INFO][3908] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" host="localhost" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.769 [INFO][3908] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.780 [INFO][3908] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.783 [INFO][3908] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.786 [INFO][3908] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.786 [INFO][3908] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" host="localhost" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.788 [INFO][3908] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.792 [INFO][3908] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" host="localhost" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.797 [INFO][3908] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" host="localhost" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.797 [INFO][3908] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" host="localhost" Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.797 [INFO][3908] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:42.820883 env[1223]: 2025-10-29 00:35:42.797 [INFO][3908] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" HandleID="k8s-pod-network.4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.821490 env[1223]: 2025-10-29 00:35:42.800 [INFO][3881] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Namespace="calico-system" Pod="calico-kube-controllers-64b9647db-jnrkc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0", GenerateName:"calico-kube-controllers-64b9647db-", Namespace:"calico-system", SelfLink:"", UID:"7113e3f3-c736-4216-8f92-dee9d64f1690", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"64b9647db", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-64b9647db-jnrkc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid2d5dc31dc6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:42.821490 env[1223]: 2025-10-29 00:35:42.800 [INFO][3881] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Namespace="calico-system" Pod="calico-kube-controllers-64b9647db-jnrkc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.821490 env[1223]: 2025-10-29 00:35:42.800 [INFO][3881] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid2d5dc31dc6 ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Namespace="calico-system" Pod="calico-kube-controllers-64b9647db-jnrkc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.821490 env[1223]: 2025-10-29 00:35:42.805 [INFO][3881] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Namespace="calico-system" Pod="calico-kube-controllers-64b9647db-jnrkc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.821490 env[1223]: 2025-10-29 00:35:42.805 [INFO][3881] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Namespace="calico-system" Pod="calico-kube-controllers-64b9647db-jnrkc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0", GenerateName:"calico-kube-controllers-64b9647db-", Namespace:"calico-system", SelfLink:"", UID:"7113e3f3-c736-4216-8f92-dee9d64f1690", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"64b9647db", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f", Pod:"calico-kube-controllers-64b9647db-jnrkc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid2d5dc31dc6", MAC:"a6:0a:97:74:0c:60", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:42.821490 env[1223]: 2025-10-29 00:35:42.817 [INFO][3881] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f" Namespace="calico-system" Pod="calico-kube-controllers-64b9647db-jnrkc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:42.828000 audit[3940]: NETFILTER_CFG table=filter:114 family=2 entries=46 op=nft_register_chain pid=3940 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:42.828000 audit[3940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23616 a0=3 a1=ffffd11f11e0 a2=0 a3=ffffad416fa8 items=0 ppid=3455 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.828000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:42.830077 env[1223]: time="2025-10-29T00:35:42.829885010Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:42.830077 env[1223]: time="2025-10-29T00:35:42.829927092Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:42.830077 env[1223]: time="2025-10-29T00:35:42.829936892Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:42.830420 env[1223]: time="2025-10-29T00:35:42.830236304Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f pid=3945 runtime=io.containerd.runc.v2 Oct 29 00:35:42.843258 systemd[1]: Started cri-containerd-4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f.scope. Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.861000 audit: BPF prog-id=173 op=LOAD Oct 29 00:35:42.862000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.862000 audit[3954]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3945 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431313134373861663932643633303635356239336162383534346531 Oct 29 00:35:42.862000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.862000 audit[3954]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3945 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431313134373861663932643633303635356239336162383534346531 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.863000 audit: BPF prog-id=174 op=LOAD Oct 29 00:35:42.863000 audit[3954]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3945 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431313134373861663932643633303635356239336162383534346531 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit: BPF prog-id=175 op=LOAD Oct 29 00:35:42.864000 audit[3954]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3945 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431313134373861663932643633303635356239336162383534346531 Oct 29 00:35:42.864000 audit: BPF prog-id=175 op=UNLOAD Oct 29 00:35:42.864000 audit: BPF prog-id=174 op=UNLOAD Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { perfmon } for pid=3954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.864000 audit: BPF prog-id=176 op=LOAD Oct 29 00:35:42.864000 audit[3954]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3945 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431313134373861663932643633303635356239336162383534346531 Oct 29 00:35:42.866564 systemd-resolved[1162]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:42.888985 env[1223]: time="2025-10-29T00:35:42.888929376Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-64b9647db-jnrkc,Uid:7113e3f3-c736-4216-8f92-dee9d64f1690,Namespace:calico-system,Attempt:1,} returns sandbox id \"4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f\"" Oct 29 00:35:42.891399 env[1223]: time="2025-10-29T00:35:42.891354315Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 29 00:35:42.898360 systemd-networkd[1059]: cali2ea188732fd: Link UP Oct 29 00:35:42.899872 systemd-networkd[1059]: cali2ea188732fd: Gained carrier Oct 29 00:35:42.900468 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2ea188732fd: link becomes ready Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.749 [INFO][3893] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0 coredns-668d6bf9bc- kube-system 6cb9f80b-c57b-4005-9779-057c027d0c90 993 0 2025-10-29 00:35:00 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-mmtvr eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2ea188732fd [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Namespace="kube-system" Pod="coredns-668d6bf9bc-mmtvr" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--mmtvr-" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.749 [INFO][3893] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Namespace="kube-system" Pod="coredns-668d6bf9bc-mmtvr" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.784 [INFO][3918] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" HandleID="k8s-pod-network.dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.784 [INFO][3918] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" HandleID="k8s-pod-network.dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c4f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-mmtvr", "timestamp":"2025-10-29 00:35:42.784611885 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.785 [INFO][3918] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.797 [INFO][3918] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.797 [INFO][3918] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.867 [INFO][3918] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" host="localhost" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.872 [INFO][3918] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.877 [INFO][3918] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.880 [INFO][3918] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.882 [INFO][3918] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.882 [INFO][3918] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" host="localhost" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.884 [INFO][3918] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.888 [INFO][3918] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" host="localhost" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.894 [INFO][3918] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" host="localhost" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.894 [INFO][3918] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" host="localhost" Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.894 [INFO][3918] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:42.914957 env[1223]: 2025-10-29 00:35:42.894 [INFO][3918] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" HandleID="k8s-pod-network.dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.915729 env[1223]: 2025-10-29 00:35:42.896 [INFO][3893] cni-plugin/k8s.go 418: Populated endpoint ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Namespace="kube-system" Pod="coredns-668d6bf9bc-mmtvr" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6cb9f80b-c57b-4005-9779-057c027d0c90", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-mmtvr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2ea188732fd", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:42.915729 env[1223]: 2025-10-29 00:35:42.897 [INFO][3893] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Namespace="kube-system" Pod="coredns-668d6bf9bc-mmtvr" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.915729 env[1223]: 2025-10-29 00:35:42.897 [INFO][3893] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2ea188732fd ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Namespace="kube-system" Pod="coredns-668d6bf9bc-mmtvr" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.915729 env[1223]: 2025-10-29 00:35:42.900 [INFO][3893] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Namespace="kube-system" Pod="coredns-668d6bf9bc-mmtvr" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.915729 env[1223]: 2025-10-29 00:35:42.900 [INFO][3893] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Namespace="kube-system" Pod="coredns-668d6bf9bc-mmtvr" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6cb9f80b-c57b-4005-9779-057c027d0c90", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd", Pod:"coredns-668d6bf9bc-mmtvr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2ea188732fd", MAC:"0a:d4:c7:14:24:a4", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:42.915729 env[1223]: 2025-10-29 00:35:42.912 [INFO][3893] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd" Namespace="kube-system" Pod="coredns-668d6bf9bc-mmtvr" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:42.926640 env[1223]: time="2025-10-29T00:35:42.926571190Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:42.926640 env[1223]: time="2025-10-29T00:35:42.926612232Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:42.925000 audit[3991]: NETFILTER_CFG table=filter:115 family=2 entries=46 op=nft_register_chain pid=3991 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:42.925000 audit[3991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23724 a0=3 a1=ffffda365ee0 a2=0 a3=ffff84639fa8 items=0 ppid=3455 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.925000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:42.927051 env[1223]: time="2025-10-29T00:35:42.926622152Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:42.927286 env[1223]: time="2025-10-29T00:35:42.927247098Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd pid=3994 runtime=io.containerd.runc.v2 Oct 29 00:35:42.941338 systemd[1]: Started cri-containerd-dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd.scope. Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.958000 audit: BPF prog-id=177 op=LOAD Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3994 pid=4004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463373537393065393639323736656363663466633463653863653632 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3994 pid=4004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463373537393065393639323736656363663466633463653863653632 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.959000 audit: BPF prog-id=178 op=LOAD Oct 29 00:35:42.959000 audit[4004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3994 pid=4004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463373537393065393639323736656363663466633463653863653632 Oct 29 00:35:42.960000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.960000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.960000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.960000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.960000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.960000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.960000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.960000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.960000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.960000 audit: BPF prog-id=179 op=LOAD Oct 29 00:35:42.960000 audit[4004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3994 pid=4004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463373537393065393639323736656363663466633463653863653632 Oct 29 00:35:42.961000 audit: BPF prog-id=179 op=UNLOAD Oct 29 00:35:42.961000 audit: BPF prog-id=178 op=UNLOAD Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { perfmon } for pid=4004 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit[4004]: AVC avc: denied { bpf } for pid=4004 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:42.961000 audit: BPF prog-id=180 op=LOAD Oct 29 00:35:42.961000 audit[4004]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3994 pid=4004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:42.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463373537393065393639323736656363663466633463653863653632 Oct 29 00:35:42.963170 systemd-resolved[1162]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:42.979729 env[1223]: time="2025-10-29T00:35:42.979679275Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-mmtvr,Uid:6cb9f80b-c57b-4005-9779-057c027d0c90,Namespace:kube-system,Attempt:1,} returns sandbox id \"dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd\"" Oct 29 00:35:42.980296 kubelet[1963]: E1029 00:35:42.980272 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:42.987157 env[1223]: time="2025-10-29T00:35:42.987119138Z" level=info msg="CreateContainer within sandbox \"dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 29 00:35:42.999755 env[1223]: time="2025-10-29T00:35:42.999699931Z" level=info msg="CreateContainer within sandbox \"dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"2af314bccec41e2c6bbae930821899c6449c563b66292fb49f677bbef13d506c\"" Oct 29 00:35:43.000469 env[1223]: time="2025-10-29T00:35:43.000423840Z" level=info msg="StartContainer for \"2af314bccec41e2c6bbae930821899c6449c563b66292fb49f677bbef13d506c\"" Oct 29 00:35:43.015684 systemd[1]: Started cri-containerd-2af314bccec41e2c6bbae930821899c6449c563b66292fb49f677bbef13d506c.scope. Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.036000 audit: BPF prog-id=181 op=LOAD Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3994 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261663331346263636563343165326336626261653933303832313839 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3994 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261663331346263636563343165326336626261653933303832313839 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit: BPF prog-id=182 op=LOAD Oct 29 00:35:43.037000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3994 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261663331346263636563343165326336626261653933303832313839 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit: BPF prog-id=183 op=LOAD Oct 29 00:35:43.037000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3994 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261663331346263636563343165326336626261653933303832313839 Oct 29 00:35:43.037000 audit: BPF prog-id=183 op=UNLOAD Oct 29 00:35:43.037000 audit: BPF prog-id=182 op=UNLOAD Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { perfmon } for pid=4034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit[4034]: AVC avc: denied { bpf } for pid=4034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.037000 audit: BPF prog-id=184 op=LOAD Oct 29 00:35:43.037000 audit[4034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3994 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261663331346263636563343165326336626261653933303832313839 Oct 29 00:35:43.083119 env[1223]: time="2025-10-29T00:35:43.080474491Z" level=info msg="StartContainer for \"2af314bccec41e2c6bbae930821899c6449c563b66292fb49f677bbef13d506c\" returns successfully" Oct 29 00:35:43.109000 audit[4046]: AVC avc: denied { getattr } for pid=4046 comm="coredns" path="cgroup:[4026532591]" dev="nsfs" ino=4026532591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c389,c968 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Oct 29 00:35:43.109000 audit[4046]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a50 a2=40000da578 a3=0 items=0 ppid=3994 pid=4046 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c389,c968 key=(null) Oct 29 00:35:43.109000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Oct 29 00:35:43.132753 env[1223]: time="2025-10-29T00:35:43.132696826Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:43.135583 env[1223]: time="2025-10-29T00:35:43.135527139Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 29 00:35:43.136242 kubelet[1963]: E1029 00:35:43.135912 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:35:43.136242 kubelet[1963]: E1029 00:35:43.135960 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:35:43.136242 kubelet[1963]: E1029 00:35:43.136151 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-r6gd7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-64b9647db-jnrkc_calico-system(7113e3f3-c736-4216-8f92-dee9d64f1690): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:43.137457 kubelet[1963]: E1029 00:35:43.137354 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" podUID="7113e3f3-c736-4216-8f92-dee9d64f1690" Oct 29 00:35:43.584494 env[1223]: time="2025-10-29T00:35:43.584449425Z" level=info msg="StopPodSandbox for \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\"" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.645 [INFO][4082] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.645 [INFO][4082] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" iface="eth0" netns="/var/run/netns/cni-ad98b1e4-47f6-ae8e-1e5c-1b6d445d1814" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.645 [INFO][4082] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" iface="eth0" netns="/var/run/netns/cni-ad98b1e4-47f6-ae8e-1e5c-1b6d445d1814" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.645 [INFO][4082] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" iface="eth0" netns="/var/run/netns/cni-ad98b1e4-47f6-ae8e-1e5c-1b6d445d1814" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.645 [INFO][4082] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.646 [INFO][4082] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.669 [INFO][4091] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" HandleID="k8s-pod-network.fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.669 [INFO][4091] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.669 [INFO][4091] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.678 [WARNING][4091] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" HandleID="k8s-pod-network.fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.678 [INFO][4091] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" HandleID="k8s-pod-network.fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.682 [INFO][4091] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:43.686856 env[1223]: 2025-10-29 00:35:43.684 [INFO][4082] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:43.688620 env[1223]: time="2025-10-29T00:35:43.688568082Z" level=info msg="TearDown network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\" successfully" Oct 29 00:35:43.688721 env[1223]: time="2025-10-29T00:35:43.688701887Z" level=info msg="StopPodSandbox for \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\" returns successfully" Oct 29 00:35:43.689234 systemd[1]: run-netns-cni\x2dad98b1e4\x2d47f6\x2dae8e\x2d1e5c\x2d1b6d445d1814.mount: Deactivated successfully. Oct 29 00:35:43.689643 env[1223]: time="2025-10-29T00:35:43.689503959Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-5gpmj,Uid:ed11f017-3fc8-47ea-980c-c9d4b03a0875,Namespace:calico-system,Attempt:1,}" Oct 29 00:35:43.779570 kubelet[1963]: E1029 00:35:43.779529 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:43.786455 kubelet[1963]: E1029 00:35:43.786365 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" podUID="7113e3f3-c736-4216-8f92-dee9d64f1690" Oct 29 00:35:43.803023 kubelet[1963]: I1029 00:35:43.796819 1963 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-mmtvr" podStartSLOduration=43.796800703 podStartE2EDuration="43.796800703s" podCreationTimestamp="2025-10-29 00:35:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:35:43.795584334 +0000 UTC m=+50.324217390" watchObservedRunningTime="2025-10-29 00:35:43.796800703 +0000 UTC m=+50.325433759" Oct 29 00:35:43.824000 audit[4114]: NETFILTER_CFG table=filter:116 family=2 entries=20 op=nft_register_rule pid=4114 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:43.824000 audit[4114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc926d970 a2=0 a3=1 items=0 ppid=2118 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.824000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:43.830000 audit[4114]: NETFILTER_CFG table=nat:117 family=2 entries=14 op=nft_register_rule pid=4114 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:43.830000 audit[4114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffc926d970 a2=0 a3=1 items=0 ppid=2118 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.830000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:43.857000 audit[4125]: NETFILTER_CFG table=filter:118 family=2 entries=17 op=nft_register_rule pid=4125 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:43.857000 audit[4125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe9b45e00 a2=0 a3=1 items=0 ppid=2118 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.857000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:43.862000 audit[4125]: NETFILTER_CFG table=nat:119 family=2 entries=35 op=nft_register_chain pid=4125 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:43.862000 audit[4125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffe9b45e00 a2=0 a3=1 items=0 ppid=2118 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.862000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:43.895338 systemd[1]: Started sshd@7-10.0.0.79:22-10.0.0.1:45360.service. Oct 29 00:35:43.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.79:22-10.0.0.1:45360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:43.922207 systemd-networkd[1059]: cali20ed6644554: Link UP Oct 29 00:35:43.924565 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 29 00:35:43.924670 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali20ed6644554: link becomes ready Oct 29 00:35:43.924803 systemd-networkd[1059]: cali20ed6644554: Gained carrier Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.830 [INFO][4098] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--666569f655--5gpmj-eth0 goldmane-666569f655- calico-system ed11f017-3fc8-47ea-980c-c9d4b03a0875 1047 0 2025-10-29 00:35:18 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-666569f655-5gpmj eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali20ed6644554 [] [] }} ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Namespace="calico-system" Pod="goldmane-666569f655-5gpmj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--5gpmj-" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.830 [INFO][4098] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Namespace="calico-system" Pod="goldmane-666569f655-5gpmj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.870 [INFO][4117] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" HandleID="k8s-pod-network.2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.870 [INFO][4117] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" HandleID="k8s-pod-network.2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000335390), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-666569f655-5gpmj", "timestamp":"2025-10-29 00:35:43.870003239 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.870 [INFO][4117] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.870 [INFO][4117] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.870 [INFO][4117] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.880 [INFO][4117] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" host="localhost" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.887 [INFO][4117] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.894 [INFO][4117] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.897 [INFO][4117] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.902 [INFO][4117] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.902 [INFO][4117] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" host="localhost" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.906 [INFO][4117] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59 Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.910 [INFO][4117] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" host="localhost" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.917 [INFO][4117] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" host="localhost" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.917 [INFO][4117] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" host="localhost" Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.917 [INFO][4117] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:43.941752 env[1223]: 2025-10-29 00:35:43.917 [INFO][4117] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" HandleID="k8s-pod-network.2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.942722 env[1223]: 2025-10-29 00:35:43.920 [INFO][4098] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Namespace="calico-system" Pod="goldmane-666569f655-5gpmj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--5gpmj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--5gpmj-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"ed11f017-3fc8-47ea-980c-c9d4b03a0875", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-666569f655-5gpmj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali20ed6644554", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:43.942722 env[1223]: 2025-10-29 00:35:43.920 [INFO][4098] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Namespace="calico-system" Pod="goldmane-666569f655-5gpmj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.942722 env[1223]: 2025-10-29 00:35:43.920 [INFO][4098] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali20ed6644554 ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Namespace="calico-system" Pod="goldmane-666569f655-5gpmj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.942722 env[1223]: 2025-10-29 00:35:43.925 [INFO][4098] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Namespace="calico-system" Pod="goldmane-666569f655-5gpmj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.942722 env[1223]: 2025-10-29 00:35:43.926 [INFO][4098] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Namespace="calico-system" Pod="goldmane-666569f655-5gpmj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--5gpmj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--5gpmj-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"ed11f017-3fc8-47ea-980c-c9d4b03a0875", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59", Pod:"goldmane-666569f655-5gpmj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali20ed6644554", MAC:"ce:c9:f7:46:27:fe", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:43.942722 env[1223]: 2025-10-29 00:35:43.939 [INFO][4098] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59" Namespace="calico-system" Pod="goldmane-666569f655-5gpmj" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:43.947000 audit[4128]: USER_ACCT pid=4128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:43.948389 sshd[4128]: Accepted publickey for core from 10.0.0.1 port 45360 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:43.949000 audit[4128]: CRED_ACQ pid=4128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:43.949000 audit[4128]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde8b1220 a2=3 a3=1 items=0 ppid=1 pid=4128 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.949000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:43.950076 sshd[4128]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:43.954641 systemd-logind[1211]: New session 8 of user core. Oct 29 00:35:43.955530 systemd[1]: Started session-8.scope. Oct 29 00:35:43.959874 env[1223]: time="2025-10-29T00:35:43.959804081Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:43.960049 env[1223]: time="2025-10-29T00:35:43.960023170Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:43.960179 env[1223]: time="2025-10-29T00:35:43.960155015Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:43.960460 env[1223]: time="2025-10-29T00:35:43.960410225Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59 pid=4147 runtime=io.containerd.runc.v2 Oct 29 00:35:43.959000 audit[4128]: USER_START pid=4128 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:43.958000 audit[4142]: NETFILTER_CFG table=filter:120 family=2 entries=58 op=nft_register_chain pid=4142 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:43.958000 audit[4142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30392 a0=3 a1=ffffe82ef500 a2=0 a3=ffffa0913fa8 items=0 ppid=3455 pid=4142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.958000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:43.961000 audit[4156]: CRED_ACQ pid=4156 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:43.979664 systemd[1]: Started cri-containerd-2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59.scope. Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.996000 audit: BPF prog-id=185 op=LOAD Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4147 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236333361396437346230356166656632303232396534373733643835 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4147 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236333361396437346230356166656632303232396534373733643835 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit: BPF prog-id=186 op=LOAD Oct 29 00:35:43.997000 audit[4159]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4147 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236333361396437346230356166656632303232396534373733643835 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit: BPF prog-id=187 op=LOAD Oct 29 00:35:43.997000 audit[4159]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4147 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236333361396437346230356166656632303232396534373733643835 Oct 29 00:35:43.997000 audit: BPF prog-id=187 op=UNLOAD Oct 29 00:35:43.997000 audit: BPF prog-id=186 op=UNLOAD Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:43.997000 audit: BPF prog-id=188 op=LOAD Oct 29 00:35:43.997000 audit[4159]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4147 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:43.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236333361396437346230356166656632303232396534373733643835 Oct 29 00:35:43.999550 systemd-resolved[1162]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:44.018952 env[1223]: time="2025-10-29T00:35:44.018906440Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-5gpmj,Uid:ed11f017-3fc8-47ea-980c-c9d4b03a0875,Namespace:calico-system,Attempt:1,} returns sandbox id \"2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59\"" Oct 29 00:35:44.020577 env[1223]: time="2025-10-29T00:35:44.020538425Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 29 00:35:44.140525 sshd[4128]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:44.141000 audit[4128]: USER_END pid=4128 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:44.141000 audit[4128]: CRED_DISP pid=4128 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:44.144854 systemd[1]: session-8.scope: Deactivated successfully. Oct 29 00:35:44.145445 systemd-logind[1211]: Session 8 logged out. Waiting for processes to exit. Oct 29 00:35:44.145569 systemd[1]: sshd@7-10.0.0.79:22-10.0.0.1:45360.service: Deactivated successfully. Oct 29 00:35:44.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.79:22-10.0.0.1:45360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:44.146780 systemd-logind[1211]: Removed session 8. Oct 29 00:35:44.225596 env[1223]: time="2025-10-29T00:35:44.225543804Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:44.227151 env[1223]: time="2025-10-29T00:35:44.227095025Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 29 00:35:44.227944 kubelet[1963]: E1029 00:35:44.227899 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:35:44.228063 kubelet[1963]: E1029 00:35:44.227956 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:35:44.228135 kubelet[1963]: E1029 00:35:44.228085 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5q959,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-5gpmj_calico-system(ed11f017-3fc8-47ea-980c-c9d4b03a0875): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:44.229885 kubelet[1963]: E1029 00:35:44.229829 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-5gpmj" podUID="ed11f017-3fc8-47ea-980c-c9d4b03a0875" Oct 29 00:35:44.341613 systemd-networkd[1059]: calid2d5dc31dc6: Gained IPv6LL Oct 29 00:35:44.405643 systemd-networkd[1059]: cali2ea188732fd: Gained IPv6LL Oct 29 00:35:44.579924 env[1223]: time="2025-10-29T00:35:44.579869882Z" level=info msg="StopPodSandbox for \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\"" Oct 29 00:35:44.580619 env[1223]: time="2025-10-29T00:35:44.580586310Z" level=info msg="StopPodSandbox for \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\"" Oct 29 00:35:44.581636 env[1223]: time="2025-10-29T00:35:44.581358181Z" level=info msg="StopPodSandbox for \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\"" Oct 29 00:35:44.581636 env[1223]: time="2025-10-29T00:35:44.581481025Z" level=info msg="StopPodSandbox for \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\"" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.656 [INFO][4243] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.656 [INFO][4243] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" iface="eth0" netns="/var/run/netns/cni-392bb885-675e-0c75-769c-d10532ce862a" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.656 [INFO][4243] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" iface="eth0" netns="/var/run/netns/cni-392bb885-675e-0c75-769c-d10532ce862a" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.656 [INFO][4243] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" iface="eth0" netns="/var/run/netns/cni-392bb885-675e-0c75-769c-d10532ce862a" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.656 [INFO][4243] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.656 [INFO][4243] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.688 [INFO][4270] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" HandleID="k8s-pod-network.911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.688 [INFO][4270] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.689 [INFO][4270] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.697 [WARNING][4270] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" HandleID="k8s-pod-network.911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.697 [INFO][4270] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" HandleID="k8s-pod-network.911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.699 [INFO][4270] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:44.702796 env[1223]: 2025-10-29 00:35:44.701 [INFO][4243] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:44.703626 env[1223]: time="2025-10-29T00:35:44.703590489Z" level=info msg="TearDown network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\" successfully" Oct 29 00:35:44.703714 env[1223]: time="2025-10-29T00:35:44.703695974Z" level=info msg="StopPodSandbox for \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\" returns successfully" Oct 29 00:35:44.704486 env[1223]: time="2025-10-29T00:35:44.704459404Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-68bf75d69f-hk7dm,Uid:87f3eb2e-83c4-4548-a495-c83ad5b81b76,Namespace:calico-apiserver,Attempt:1,}" Oct 29 00:35:44.705977 systemd[1]: run-netns-cni\x2d392bb885\x2d675e\x2d0c75\x2d769c\x2dd10532ce862a.mount: Deactivated successfully. Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.683 [INFO][4244] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.684 [INFO][4244] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" iface="eth0" netns="/var/run/netns/cni-215f462a-4397-7103-61db-4e8440a696cc" Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.684 [INFO][4244] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" iface="eth0" netns="/var/run/netns/cni-215f462a-4397-7103-61db-4e8440a696cc" Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.685 [INFO][4244] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" iface="eth0" netns="/var/run/netns/cni-215f462a-4397-7103-61db-4e8440a696cc" Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.685 [INFO][4244] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.685 [INFO][4244] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.722 [INFO][4292] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" HandleID="k8s-pod-network.c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.722 [INFO][4292] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.722 [INFO][4292] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.732 [WARNING][4292] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" HandleID="k8s-pod-network.c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.732 [INFO][4292] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" HandleID="k8s-pod-network.c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.734 [INFO][4292] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:44.740819 env[1223]: 2025-10-29 00:35:44.736 [INFO][4244] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:44.743093 systemd[1]: run-netns-cni\x2d215f462a\x2d4397\x2d7103\x2d61db\x2d4e8440a696cc.mount: Deactivated successfully. Oct 29 00:35:44.744905 env[1223]: time="2025-10-29T00:35:44.744855680Z" level=info msg="TearDown network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\" successfully" Oct 29 00:35:44.745043 env[1223]: time="2025-10-29T00:35:44.745023606Z" level=info msg="StopPodSandbox for \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\" returns successfully" Oct 29 00:35:44.745824 env[1223]: time="2025-10-29T00:35:44.745789957Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-ztr7c,Uid:8d7ebf96-f131-40c2-9801-3bcd40c3dda3,Namespace:calico-system,Attempt:1,}" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.682 [INFO][4234] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.682 [INFO][4234] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" iface="eth0" netns="/var/run/netns/cni-9336d292-2fe8-28c5-4a16-ddd6555aba00" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.683 [INFO][4234] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" iface="eth0" netns="/var/run/netns/cni-9336d292-2fe8-28c5-4a16-ddd6555aba00" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.684 [INFO][4234] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" iface="eth0" netns="/var/run/netns/cni-9336d292-2fe8-28c5-4a16-ddd6555aba00" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.684 [INFO][4234] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.684 [INFO][4234] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.728 [INFO][4278] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" HandleID="k8s-pod-network.97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.728 [INFO][4278] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.734 [INFO][4278] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.748 [WARNING][4278] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" HandleID="k8s-pod-network.97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.748 [INFO][4278] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" HandleID="k8s-pod-network.97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.750 [INFO][4278] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:44.764397 env[1223]: 2025-10-29 00:35:44.753 [INFO][4234] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:44.764939 env[1223]: time="2025-10-29T00:35:44.764611540Z" level=info msg="TearDown network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\" successfully" Oct 29 00:35:44.764939 env[1223]: time="2025-10-29T00:35:44.764646302Z" level=info msg="StopPodSandbox for \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\" returns successfully" Oct 29 00:35:44.764992 kubelet[1963]: E1029 00:35:44.764952 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:44.765674 env[1223]: time="2025-10-29T00:35:44.765631580Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-clmmt,Uid:7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c,Namespace:kube-system,Attempt:1,}" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.685 [INFO][4254] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.685 [INFO][4254] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" iface="eth0" netns="/var/run/netns/cni-9e77841a-07b0-5d0e-77a3-c972699ee2fc" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.685 [INFO][4254] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" iface="eth0" netns="/var/run/netns/cni-9e77841a-07b0-5d0e-77a3-c972699ee2fc" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.685 [INFO][4254] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" iface="eth0" netns="/var/run/netns/cni-9e77841a-07b0-5d0e-77a3-c972699ee2fc" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.685 [INFO][4254] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.685 [INFO][4254] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.730 [INFO][4284] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" HandleID="k8s-pod-network.023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.730 [INFO][4284] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.750 [INFO][4284] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.771 [WARNING][4284] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" HandleID="k8s-pod-network.023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.771 [INFO][4284] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" HandleID="k8s-pod-network.023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.773 [INFO][4284] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:44.778709 env[1223]: 2025-10-29 00:35:44.775 [INFO][4254] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:44.779183 env[1223]: time="2025-10-29T00:35:44.778850143Z" level=info msg="TearDown network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\" successfully" Oct 29 00:35:44.779183 env[1223]: time="2025-10-29T00:35:44.778885064Z" level=info msg="StopPodSandbox for \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\" returns successfully" Oct 29 00:35:44.779546 env[1223]: time="2025-10-29T00:35:44.779508209Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-68bf75d69f-vwvqn,Uid:7ac47b9b-412b-4e0c-bee0-91b227127625,Namespace:calico-apiserver,Attempt:1,}" Oct 29 00:35:44.791735 kubelet[1963]: E1029 00:35:44.791703 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:44.792991 kubelet[1963]: E1029 00:35:44.792705 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" podUID="7113e3f3-c736-4216-8f92-dee9d64f1690" Oct 29 00:35:44.792991 kubelet[1963]: E1029 00:35:44.792818 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-5gpmj" podUID="ed11f017-3fc8-47ea-980c-c9d4b03a0875" Oct 29 00:35:44.821000 audit[4354]: NETFILTER_CFG table=filter:121 family=2 entries=14 op=nft_register_rule pid=4354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:44.821000 audit[4354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd2d16d90 a2=0 a3=1 items=0 ppid=2118 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.821000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:44.827000 audit[4354]: NETFILTER_CFG table=nat:122 family=2 entries=20 op=nft_register_rule pid=4354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:44.827000 audit[4354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd2d16d90 a2=0 a3=1 items=0 ppid=2118 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:44.945473 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 29 00:35:44.946505 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calide07662cbff: link becomes ready Oct 29 00:35:44.945719 systemd-networkd[1059]: calide07662cbff: Link UP Oct 29 00:35:44.945939 systemd-networkd[1059]: calide07662cbff: Gained carrier Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.829 [INFO][4315] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--ztr7c-eth0 csi-node-driver- calico-system 8d7ebf96-f131-40c2-9801-3bcd40c3dda3 1081 0 2025-10-29 00:35:20 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-ztr7c eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calide07662cbff [] [] }} ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Namespace="calico-system" Pod="csi-node-driver-ztr7c" WorkloadEndpoint="localhost-k8s-csi--node--driver--ztr7c-" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.830 [INFO][4315] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Namespace="calico-system" Pod="csi-node-driver-ztr7c" WorkloadEndpoint="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.882 [INFO][4364] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" HandleID="k8s-pod-network.86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.882 [INFO][4364] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" HandleID="k8s-pod-network.86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400049f100), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-ztr7c", "timestamp":"2025-10-29 00:35:44.882240347 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.882 [INFO][4364] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.882 [INFO][4364] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.882 [INFO][4364] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.897 [INFO][4364] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" host="localhost" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.908 [INFO][4364] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.914 [INFO][4364] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.916 [INFO][4364] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.919 [INFO][4364] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.919 [INFO][4364] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" host="localhost" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.920 [INFO][4364] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53 Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.926 [INFO][4364] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" host="localhost" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.932 [INFO][4364] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" host="localhost" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.932 [INFO][4364] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" host="localhost" Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.933 [INFO][4364] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:44.965225 env[1223]: 2025-10-29 00:35:44.933 [INFO][4364] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" HandleID="k8s-pod-network.86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.966081 env[1223]: 2025-10-29 00:35:44.941 [INFO][4315] cni-plugin/k8s.go 418: Populated endpoint ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Namespace="calico-system" Pod="csi-node-driver-ztr7c" WorkloadEndpoint="localhost-k8s-csi--node--driver--ztr7c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--ztr7c-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8d7ebf96-f131-40c2-9801-3bcd40c3dda3", ResourceVersion:"1081", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-ztr7c", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calide07662cbff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:44.966081 env[1223]: 2025-10-29 00:35:44.941 [INFO][4315] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Namespace="calico-system" Pod="csi-node-driver-ztr7c" WorkloadEndpoint="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.966081 env[1223]: 2025-10-29 00:35:44.941 [INFO][4315] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calide07662cbff ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Namespace="calico-system" Pod="csi-node-driver-ztr7c" WorkloadEndpoint="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.966081 env[1223]: 2025-10-29 00:35:44.946 [INFO][4315] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Namespace="calico-system" Pod="csi-node-driver-ztr7c" WorkloadEndpoint="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.966081 env[1223]: 2025-10-29 00:35:44.947 [INFO][4315] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Namespace="calico-system" Pod="csi-node-driver-ztr7c" WorkloadEndpoint="localhost-k8s-csi--node--driver--ztr7c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--ztr7c-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8d7ebf96-f131-40c2-9801-3bcd40c3dda3", ResourceVersion:"1081", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53", Pod:"csi-node-driver-ztr7c", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calide07662cbff", MAC:"66:af:b8:39:71:dd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:44.966081 env[1223]: 2025-10-29 00:35:44.956 [INFO][4315] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53" Namespace="calico-system" Pod="csi-node-driver-ztr7c" WorkloadEndpoint="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:44.973000 audit[4408]: NETFILTER_CFG table=filter:123 family=2 entries=50 op=nft_register_chain pid=4408 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:44.973000 audit[4408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24772 a0=3 a1=ffffdb1f9440 a2=0 a3=ffff8e1c4fa8 items=0 ppid=3455 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:44.973000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:44.976264 env[1223]: time="2025-10-29T00:35:44.976194619Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:44.976264 env[1223]: time="2025-10-29T00:35:44.976239421Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:44.976264 env[1223]: time="2025-10-29T00:35:44.976250421Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:44.976415 env[1223]: time="2025-10-29T00:35:44.976387627Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53 pid=4414 runtime=io.containerd.runc.v2 Oct 29 00:35:44.987342 systemd[1]: Started cri-containerd-86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53.scope. Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.005000 audit: BPF prog-id=189 op=LOAD Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4414 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836613461326463386334623933363930313939303732363465623262 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4414 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836613461326463386334623933363930313939303732363465623262 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit: BPF prog-id=190 op=LOAD Oct 29 00:35:45.006000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4414 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836613461326463386334623933363930313939303732363465623262 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit: BPF prog-id=191 op=LOAD Oct 29 00:35:45.006000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4414 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836613461326463386334623933363930313939303732363465623262 Oct 29 00:35:45.006000 audit: BPF prog-id=191 op=UNLOAD Oct 29 00:35:45.006000 audit: BPF prog-id=190 op=UNLOAD Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.006000 audit: BPF prog-id=192 op=LOAD Oct 29 00:35:45.006000 audit[4424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4414 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836613461326463386334623933363930313939303732363465623262 Oct 29 00:35:45.007561 systemd-resolved[1162]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:45.024820 env[1223]: time="2025-10-29T00:35:45.024590757Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-ztr7c,Uid:8d7ebf96-f131-40c2-9801-3bcd40c3dda3,Namespace:calico-system,Attempt:1,} returns sandbox id \"86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53\"" Oct 29 00:35:45.027264 env[1223]: time="2025-10-29T00:35:45.026125817Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 29 00:35:45.051078 systemd-networkd[1059]: calid3f60c86b3f: Link UP Oct 29 00:35:45.052448 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid3f60c86b3f: link becomes ready Oct 29 00:35:45.052605 systemd-networkd[1059]: calid3f60c86b3f: Gained carrier Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:44.784 [INFO][4301] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0 calico-apiserver-68bf75d69f- calico-apiserver 87f3eb2e-83c4-4548-a495-c83ad5b81b76 1079 0 2025-10-29 00:35:13 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:68bf75d69f projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-68bf75d69f-hk7dm eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid3f60c86b3f [] [] }} ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-hk7dm" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:44.788 [INFO][4301] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-hk7dm" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:44.886 [INFO][4360] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" HandleID="k8s-pod-network.29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:44.886 [INFO][4360] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" HandleID="k8s-pod-network.29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000323430), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-68bf75d69f-hk7dm", "timestamp":"2025-10-29 00:35:44.886467474 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:44.886 [INFO][4360] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:44.933 [INFO][4360] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:44.933 [INFO][4360] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:44.998 [INFO][4360] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" host="localhost" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.011 [INFO][4360] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.019 [INFO][4360] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.022 [INFO][4360] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.025 [INFO][4360] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.026 [INFO][4360] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" host="localhost" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.029 [INFO][4360] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29 Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.033 [INFO][4360] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" host="localhost" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.043 [INFO][4360] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" host="localhost" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.043 [INFO][4360] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" host="localhost" Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.043 [INFO][4360] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:45.070251 env[1223]: 2025-10-29 00:35:45.044 [INFO][4360] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" HandleID="k8s-pod-network.29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:45.070944 env[1223]: 2025-10-29 00:35:45.047 [INFO][4301] cni-plugin/k8s.go 418: Populated endpoint ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-hk7dm" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0", GenerateName:"calico-apiserver-68bf75d69f-", Namespace:"calico-apiserver", SelfLink:"", UID:"87f3eb2e-83c4-4548-a495-c83ad5b81b76", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"68bf75d69f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-68bf75d69f-hk7dm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3f60c86b3f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:45.070944 env[1223]: 2025-10-29 00:35:45.048 [INFO][4301] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-hk7dm" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:45.070944 env[1223]: 2025-10-29 00:35:45.048 [INFO][4301] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid3f60c86b3f ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-hk7dm" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:45.070944 env[1223]: 2025-10-29 00:35:45.052 [INFO][4301] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-hk7dm" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:45.070944 env[1223]: 2025-10-29 00:35:45.058 [INFO][4301] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-hk7dm" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0", GenerateName:"calico-apiserver-68bf75d69f-", Namespace:"calico-apiserver", SelfLink:"", UID:"87f3eb2e-83c4-4548-a495-c83ad5b81b76", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"68bf75d69f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29", Pod:"calico-apiserver-68bf75d69f-hk7dm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3f60c86b3f", MAC:"aa:07:3d:87:33:02", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:45.070944 env[1223]: 2025-10-29 00:35:45.068 [INFO][4301] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-hk7dm" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:45.085000 audit[4467]: NETFILTER_CFG table=filter:124 family=2 entries=41 op=nft_register_chain pid=4467 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:45.085000 audit[4467]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23096 a0=3 a1=fffff60847c0 a2=0 a3=ffffa4d1cfa8 items=0 ppid=3455 pid=4467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.085000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:45.086370 env[1223]: time="2025-10-29T00:35:45.086281079Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:45.086370 env[1223]: time="2025-10-29T00:35:45.086330601Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:45.086370 env[1223]: time="2025-10-29T00:35:45.086341282Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:45.086560 env[1223]: time="2025-10-29T00:35:45.086513848Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29 pid=4461 runtime=io.containerd.runc.v2 Oct 29 00:35:45.100167 systemd[1]: Started cri-containerd-29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29.scope. Oct 29 00:35:45.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.126000 audit: BPF prog-id=193 op=LOAD Oct 29 00:35:45.126000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.126000 audit[4474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4461 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239613232653062316234643837323030393635653730333031643763 Oct 29 00:35:45.126000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.126000 audit[4474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4461 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239613232653062316234643837323030393635653730333031643763 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit: BPF prog-id=194 op=LOAD Oct 29 00:35:45.127000 audit[4474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4461 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239613232653062316234643837323030393635653730333031643763 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.127000 audit: BPF prog-id=195 op=LOAD Oct 29 00:35:45.127000 audit[4474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4461 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239613232653062316234643837323030393635653730333031643763 Oct 29 00:35:45.127000 audit: BPF prog-id=195 op=UNLOAD Oct 29 00:35:45.128000 audit: BPF prog-id=194 op=UNLOAD Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { perfmon } for pid=4474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit[4474]: AVC avc: denied { bpf } for pid=4474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.128000 audit: BPF prog-id=196 op=LOAD Oct 29 00:35:45.128000 audit[4474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4461 pid=4474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239613232653062316234643837323030393635653730333031643763 Oct 29 00:35:45.130918 systemd-resolved[1162]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:45.150021 systemd-networkd[1059]: calif5095a33bad: Link UP Oct 29 00:35:45.158481 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif5095a33bad: link becomes ready Oct 29 00:35:45.157508 systemd-networkd[1059]: calif5095a33bad: Gained carrier Oct 29 00:35:45.162494 env[1223]: time="2025-10-29T00:35:45.162452726Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-68bf75d69f-hk7dm,Uid:87f3eb2e-83c4-4548-a495-c83ad5b81b76,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29\"" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:44.854 [INFO][4331] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--clmmt-eth0 coredns-668d6bf9bc- kube-system 7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c 1080 0 2025-10-29 00:35:00 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-clmmt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calif5095a33bad [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Namespace="kube-system" Pod="coredns-668d6bf9bc-clmmt" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--clmmt-" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:44.854 [INFO][4331] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Namespace="kube-system" Pod="coredns-668d6bf9bc-clmmt" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:44.894 [INFO][4376] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" HandleID="k8s-pod-network.032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:44.895 [INFO][4376] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" HandleID="k8s-pod-network.032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001904e0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-clmmt", "timestamp":"2025-10-29 00:35:44.894888567 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:44.895 [INFO][4376] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.043 [INFO][4376] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.044 [INFO][4376] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.099 [INFO][4376] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" host="localhost" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.110 [INFO][4376] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.121 [INFO][4376] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.123 [INFO][4376] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.128 [INFO][4376] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.128 [INFO][4376] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" host="localhost" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.130 [INFO][4376] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141 Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.136 [INFO][4376] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" host="localhost" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.144 [INFO][4376] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" host="localhost" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.145 [INFO][4376] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" host="localhost" Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.145 [INFO][4376] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:45.183740 env[1223]: 2025-10-29 00:35:45.145 [INFO][4376] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" HandleID="k8s-pod-network.032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:45.184323 env[1223]: 2025-10-29 00:35:45.147 [INFO][4331] cni-plugin/k8s.go 418: Populated endpoint ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Namespace="kube-system" Pod="coredns-668d6bf9bc-clmmt" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--clmmt-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-clmmt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif5095a33bad", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:45.184323 env[1223]: 2025-10-29 00:35:45.147 [INFO][4331] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Namespace="kube-system" Pod="coredns-668d6bf9bc-clmmt" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:45.184323 env[1223]: 2025-10-29 00:35:45.147 [INFO][4331] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif5095a33bad ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Namespace="kube-system" Pod="coredns-668d6bf9bc-clmmt" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:45.184323 env[1223]: 2025-10-29 00:35:45.160 [INFO][4331] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Namespace="kube-system" Pod="coredns-668d6bf9bc-clmmt" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:45.184323 env[1223]: 2025-10-29 00:35:45.160 [INFO][4331] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Namespace="kube-system" Pod="coredns-668d6bf9bc-clmmt" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--clmmt-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141", Pod:"coredns-668d6bf9bc-clmmt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif5095a33bad", MAC:"5a:94:b1:ed:e0:3c", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:45.184323 env[1223]: 2025-10-29 00:35:45.181 [INFO][4331] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141" Namespace="kube-system" Pod="coredns-668d6bf9bc-clmmt" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:45.205732 env[1223]: time="2025-10-29T00:35:45.205646567Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:45.206797 env[1223]: time="2025-10-29T00:35:45.205946859Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:45.206797 env[1223]: time="2025-10-29T00:35:45.205969780Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:45.208481 env[1223]: time="2025-10-29T00:35:45.207054982Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141 pid=4516 runtime=io.containerd.runc.v2 Oct 29 00:35:45.231000 audit[4534]: NETFILTER_CFG table=filter:125 family=2 entries=40 op=nft_register_chain pid=4534 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:45.231000 audit[4534]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20296 a0=3 a1=ffffd9eaf700 a2=0 a3=ffffa049bfa8 items=0 ppid=3455 pid=4534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.231000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:45.244617 systemd[1]: Started cri-containerd-032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141.scope. Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.261000 audit: BPF prog-id=197 op=LOAD Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4516 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033326533643338653466353234336464626366663861376637646634 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4516 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033326533643338653466353234336464626366663861376637646634 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit: BPF prog-id=198 op=LOAD Oct 29 00:35:45.262000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4516 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033326533643338653466353234336464626366663861376637646634 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit: BPF prog-id=199 op=LOAD Oct 29 00:35:45.262000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4516 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033326533643338653466353234336464626366663861376637646634 Oct 29 00:35:45.262000 audit: BPF prog-id=199 op=UNLOAD Oct 29 00:35:45.262000 audit: BPF prog-id=198 op=UNLOAD Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.262000 audit: BPF prog-id=200 op=LOAD Oct 29 00:35:45.262000 audit[4529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4516 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033326533643338653466353234336464626366663861376637646634 Oct 29 00:35:45.264445 systemd-resolved[1162]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:45.281987 systemd-networkd[1059]: cali53b2186aa17: Link UP Oct 29 00:35:45.284024 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali53b2186aa17: link becomes ready Oct 29 00:35:45.283580 systemd-networkd[1059]: cali53b2186aa17: Gained carrier Oct 29 00:35:45.293069 env[1223]: time="2025-10-29T00:35:45.293005649Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-clmmt,Uid:7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c,Namespace:kube-system,Attempt:1,} returns sandbox id \"032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141\"" Oct 29 00:35:45.296009 kubelet[1963]: E1029 00:35:45.295960 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:45.299449 env[1223]: time="2025-10-29T00:35:45.299398978Z" level=info msg="CreateContainer within sandbox \"032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:44.876 [INFO][4343] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0 calico-apiserver-68bf75d69f- calico-apiserver 7ac47b9b-412b-4e0c-bee0-91b227127625 1082 0 2025-10-29 00:35:13 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:68bf75d69f projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-68bf75d69f-vwvqn eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali53b2186aa17 [] [] }} ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-vwvqn" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:44.876 [INFO][4343] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-vwvqn" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:44.907 [INFO][4389] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" HandleID="k8s-pod-network.13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:44.907 [INFO][4389] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" HandleID="k8s-pod-network.13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000137ec0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-68bf75d69f-vwvqn", "timestamp":"2025-10-29 00:35:44.907088209 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:44.907 [INFO][4389] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.145 [INFO][4389] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.145 [INFO][4389] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.204 [INFO][4389] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" host="localhost" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.216 [INFO][4389] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.237 [INFO][4389] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.247 [INFO][4389] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.258 [INFO][4389] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.258 [INFO][4389] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" host="localhost" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.264 [INFO][4389] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.269 [INFO][4389] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" host="localhost" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.276 [INFO][4389] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" host="localhost" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.276 [INFO][4389] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" host="localhost" Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.276 [INFO][4389] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:45.305236 env[1223]: 2025-10-29 00:35:45.276 [INFO][4389] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" HandleID="k8s-pod-network.13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:45.305802 env[1223]: 2025-10-29 00:35:45.280 [INFO][4343] cni-plugin/k8s.go 418: Populated endpoint ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-vwvqn" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0", GenerateName:"calico-apiserver-68bf75d69f-", Namespace:"calico-apiserver", SelfLink:"", UID:"7ac47b9b-412b-4e0c-bee0-91b227127625", ResourceVersion:"1082", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"68bf75d69f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-68bf75d69f-vwvqn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53b2186aa17", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:45.305802 env[1223]: 2025-10-29 00:35:45.280 [INFO][4343] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-vwvqn" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:45.305802 env[1223]: 2025-10-29 00:35:45.280 [INFO][4343] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali53b2186aa17 ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-vwvqn" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:45.305802 env[1223]: 2025-10-29 00:35:45.283 [INFO][4343] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-vwvqn" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:45.305802 env[1223]: 2025-10-29 00:35:45.284 [INFO][4343] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-vwvqn" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0", GenerateName:"calico-apiserver-68bf75d69f-", Namespace:"calico-apiserver", SelfLink:"", UID:"7ac47b9b-412b-4e0c-bee0-91b227127625", ResourceVersion:"1082", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"68bf75d69f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac", Pod:"calico-apiserver-68bf75d69f-vwvqn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53b2186aa17", MAC:"c2:72:40:4a:9b:d9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:45.305802 env[1223]: 2025-10-29 00:35:45.294 [INFO][4343] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac" Namespace="calico-apiserver" Pod="calico-apiserver-68bf75d69f-vwvqn" WorkloadEndpoint="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:45.320000 audit[4567]: NETFILTER_CFG table=filter:126 family=2 entries=49 op=nft_register_chain pid=4567 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 29 00:35:45.320000 audit[4567]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25404 a0=3 a1=ffffcef88bc0 a2=0 a3=ffff91277fa8 items=0 ppid=3455 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.320000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 29 00:35:45.321743 env[1223]: time="2025-10-29T00:35:45.321702287Z" level=info msg="CreateContainer within sandbox \"032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1a9f17ea57dfa5ee674390c245d675b9229188b36554ceea104c3391b19b9c99\"" Oct 29 00:35:45.322298 env[1223]: time="2025-10-29T00:35:45.322268109Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:45.322548 env[1223]: time="2025-10-29T00:35:45.322515718Z" level=info msg="StartContainer for \"1a9f17ea57dfa5ee674390c245d675b9229188b36554ceea104c3391b19b9c99\"" Oct 29 00:35:45.323991 env[1223]: time="2025-10-29T00:35:45.323730046Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 29 00:35:45.323991 env[1223]: time="2025-10-29T00:35:45.323789688Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 29 00:35:45.323991 env[1223]: time="2025-10-29T00:35:45.323802248Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 29 00:35:45.324141 env[1223]: time="2025-10-29T00:35:45.324037338Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac pid=4568 runtime=io.containerd.runc.v2 Oct 29 00:35:45.324255 env[1223]: time="2025-10-29T00:35:45.324213184Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 29 00:35:45.324531 kubelet[1963]: E1029 00:35:45.324484 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:35:45.324603 kubelet[1963]: E1029 00:35:45.324539 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:35:45.324822 kubelet[1963]: E1029 00:35:45.324768 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b6ttw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-ztr7c_calico-system(8d7ebf96-f131-40c2-9801-3bcd40c3dda3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:45.325609 env[1223]: time="2025-10-29T00:35:45.325526276Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:45.344706 systemd[1]: Started cri-containerd-1a9f17ea57dfa5ee674390c245d675b9229188b36554ceea104c3391b19b9c99.scope. Oct 29 00:35:45.347853 systemd[1]: Started cri-containerd-13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac.scope. Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.364000 audit: BPF prog-id=201 op=LOAD Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4516 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161396631376561353764666135656536373433393063323435643637 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4516 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161396631376561353764666135656536373433393063323435643637 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit: BPF prog-id=202 op=LOAD Oct 29 00:35:45.365000 audit[4586]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4516 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161396631376561353764666135656536373433393063323435643637 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit: BPF prog-id=203 op=LOAD Oct 29 00:35:45.365000 audit[4586]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4516 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161396631376561353764666135656536373433393063323435643637 Oct 29 00:35:45.365000 audit: BPF prog-id=203 op=UNLOAD Oct 29 00:35:45.365000 audit: BPF prog-id=202 op=UNLOAD Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.365000 audit: BPF prog-id=204 op=LOAD Oct 29 00:35:45.365000 audit[4586]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4516 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161396631376561353764666135656536373433393063323435643637 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.373000 audit: BPF prog-id=205 op=LOAD Oct 29 00:35:45.374000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.374000 audit[4581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4568 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623838393766613061323331316331393365313438303762303430 Oct 29 00:35:45.374000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.374000 audit[4581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4568 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623838393766613061323331316331393365313438303762303430 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.375000 audit: BPF prog-id=206 op=LOAD Oct 29 00:35:45.375000 audit[4581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4568 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623838393766613061323331316331393365313438303762303430 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit: BPF prog-id=207 op=LOAD Oct 29 00:35:45.376000 audit[4581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4568 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623838393766613061323331316331393365313438303762303430 Oct 29 00:35:45.376000 audit: BPF prog-id=207 op=UNLOAD Oct 29 00:35:45.376000 audit: BPF prog-id=206 op=UNLOAD Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 29 00:35:45.376000 audit: BPF prog-id=208 op=LOAD Oct 29 00:35:45.376000 audit[4581]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4568 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133623838393766613061323331316331393365313438303762303430 Oct 29 00:35:45.379984 systemd-resolved[1162]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 29 00:35:45.392726 env[1223]: time="2025-10-29T00:35:45.392670890Z" level=info msg="StartContainer for \"1a9f17ea57dfa5ee674390c245d675b9229188b36554ceea104c3391b19b9c99\" returns successfully" Oct 29 00:35:45.398000 audit[4604]: AVC avc: denied { getattr } for pid=4604 comm="coredns" path="cgroup:[4026532329]" dev="nsfs" ino=4026532329 scontext=system_u:system_r:svirt_lxc_net_t:s0:c457,c539 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Oct 29 00:35:45.398000 audit[4604]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40001747f8 a2=40000da578 a3=0 items=0 ppid=4516 pid=4604 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c457,c539 key=(null) Oct 29 00:35:45.398000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Oct 29 00:35:45.410752 env[1223]: time="2025-10-29T00:35:45.410706832Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-68bf75d69f-vwvqn,Uid:7ac47b9b-412b-4e0c-bee0-91b227127625,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac\"" Oct 29 00:35:45.570324 env[1223]: time="2025-10-29T00:35:45.570188963Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:45.573390 env[1223]: time="2025-10-29T00:35:45.573315804Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:45.574542 kubelet[1963]: E1029 00:35:45.573728 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:45.574542 kubelet[1963]: E1029 00:35:45.573774 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:45.574542 kubelet[1963]: E1029 00:35:45.574459 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xkgbm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-68bf75d69f-hk7dm_calico-apiserver(87f3eb2e-83c4-4548-a495-c83ad5b81b76): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:45.574841 env[1223]: time="2025-10-29T00:35:45.574500691Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 29 00:35:45.577025 kubelet[1963]: E1029 00:35:45.576884 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" podUID="87f3eb2e-83c4-4548-a495-c83ad5b81b76" Oct 29 00:35:45.677968 systemd[1]: run-netns-cni\x2d9e77841a\x2d07b0\x2d5d0e\x2d77a3\x2dc972699ee2fc.mount: Deactivated successfully. Oct 29 00:35:45.678053 systemd[1]: run-netns-cni\x2d9336d292\x2d2fe8\x2d28c5\x2d4a16\x2dddd6555aba00.mount: Deactivated successfully. Oct 29 00:35:45.792596 env[1223]: time="2025-10-29T00:35:45.792546621Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:45.794249 env[1223]: time="2025-10-29T00:35:45.794196926Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 29 00:35:45.794390 kubelet[1963]: E1029 00:35:45.794350 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:35:45.794664 kubelet[1963]: E1029 00:35:45.794391 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:35:45.794664 kubelet[1963]: E1029 00:35:45.794591 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b6ttw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-ztr7c_calico-system(8d7ebf96-f131-40c2-9801-3bcd40c3dda3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:45.794920 env[1223]: time="2025-10-29T00:35:45.794894873Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:45.795694 kubelet[1963]: E1029 00:35:45.795664 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:45.795816 kubelet[1963]: E1029 00:35:45.795776 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:35:45.801747 kubelet[1963]: E1029 00:35:45.801725 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:45.802034 kubelet[1963]: E1029 00:35:45.801999 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-5gpmj" podUID="ed11f017-3fc8-47ea-980c-c9d4b03a0875" Oct 29 00:35:45.802174 kubelet[1963]: E1029 00:35:45.802062 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" podUID="87f3eb2e-83c4-4548-a495-c83ad5b81b76" Oct 29 00:35:45.810152 kubelet[1963]: I1029 00:35:45.810082 1963 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-clmmt" podStartSLOduration=45.810062303 podStartE2EDuration="45.810062303s" podCreationTimestamp="2025-10-29 00:35:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-29 00:35:45.809486241 +0000 UTC m=+52.338119297" watchObservedRunningTime="2025-10-29 00:35:45.810062303 +0000 UTC m=+52.338695359" Oct 29 00:35:45.835000 audit[4647]: NETFILTER_CFG table=filter:127 family=2 entries=14 op=nft_register_rule pid=4647 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:45.835000 audit[4647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffdc9c6250 a2=0 a3=1 items=0 ppid=2118 pid=4647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.835000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:45.840000 audit[4647]: NETFILTER_CFG table=nat:128 family=2 entries=44 op=nft_register_rule pid=4647 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:45.840000 audit[4647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffdc9c6250 a2=0 a3=1 items=0 ppid=2118 pid=4647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:45.840000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:45.877566 systemd-networkd[1059]: cali20ed6644554: Gained IPv6LL Oct 29 00:35:45.997513 env[1223]: time="2025-10-29T00:35:45.997451560Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:45.998305 env[1223]: time="2025-10-29T00:35:45.998259912Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:45.998588 kubelet[1963]: E1029 00:35:45.998536 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:45.998642 kubelet[1963]: E1029 00:35:45.998591 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:45.999242 kubelet[1963]: E1029 00:35:45.998913 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-glzvq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-68bf75d69f-vwvqn_calico-apiserver(7ac47b9b-412b-4e0c-bee0-91b227127625): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:46.002425 kubelet[1963]: E1029 00:35:46.002367 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" podUID="7ac47b9b-412b-4e0c-bee0-91b227127625" Oct 29 00:35:46.773587 systemd-networkd[1059]: calid3f60c86b3f: Gained IPv6LL Oct 29 00:35:46.803558 kubelet[1963]: E1029 00:35:46.803522 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:46.804128 kubelet[1963]: E1029 00:35:46.804092 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" podUID="87f3eb2e-83c4-4548-a495-c83ad5b81b76" Oct 29 00:35:46.804128 kubelet[1963]: E1029 00:35:46.804100 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" podUID="7ac47b9b-412b-4e0c-bee0-91b227127625" Oct 29 00:35:46.804866 kubelet[1963]: E1029 00:35:46.804816 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:35:46.838574 systemd-networkd[1059]: calif5095a33bad: Gained IPv6LL Oct 29 00:35:46.855000 audit[4649]: NETFILTER_CFG table=filter:129 family=2 entries=14 op=nft_register_rule pid=4649 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:46.856765 kernel: kauditd_printk_skb: 631 callbacks suppressed Oct 29 00:35:46.856830 kernel: audit: type=1325 audit(1761698146.855:1377): table=filter:129 family=2 entries=14 op=nft_register_rule pid=4649 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:46.855000 audit[4649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff96b6090 a2=0 a3=1 items=0 ppid=2118 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:46.864167 kernel: audit: type=1300 audit(1761698146.855:1377): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff96b6090 a2=0 a3=1 items=0 ppid=2118 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:46.855000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:46.866721 kernel: audit: type=1327 audit(1761698146.855:1377): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:46.877000 audit[4649]: NETFILTER_CFG table=nat:130 family=2 entries=56 op=nft_register_chain pid=4649 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:46.877000 audit[4649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=fffff96b6090 a2=0 a3=1 items=0 ppid=2118 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:46.886233 kernel: audit: type=1325 audit(1761698146.877:1378): table=nat:130 family=2 entries=56 op=nft_register_chain pid=4649 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:35:46.886528 kernel: audit: type=1300 audit(1761698146.877:1378): arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=fffff96b6090 a2=0 a3=1 items=0 ppid=2118 pid=4649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:46.886558 kernel: audit: type=1327 audit(1761698146.877:1378): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:46.877000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:35:46.901629 systemd-networkd[1059]: calide07662cbff: Gained IPv6LL Oct 29 00:35:46.901921 systemd-networkd[1059]: cali53b2186aa17: Gained IPv6LL Oct 29 00:35:47.804939 kubelet[1963]: E1029 00:35:47.804908 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:35:47.805889 kubelet[1963]: E1029 00:35:47.805843 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:35:49.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.79:22-10.0.0.1:45364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:49.158050 kernel: audit: type=1130 audit(1761698149.152:1379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.79:22-10.0.0.1:45364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:49.153753 systemd[1]: Started sshd@8-10.0.0.79:22-10.0.0.1:45364.service. Oct 29 00:35:49.213000 audit[4653]: USER_ACCT pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.217088 sshd[4653]: Accepted publickey for core from 10.0.0.1 port 45364 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:49.218954 sshd[4653]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:49.223196 kernel: audit: type=1101 audit(1761698149.213:1380): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.223280 kernel: audit: type=1103 audit(1761698149.217:1381): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.217000 audit[4653]: CRED_ACQ pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.230526 kernel: audit: type=1006 audit(1761698149.217:1382): pid=4653 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 29 00:35:49.217000 audit[4653]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee410df0 a2=3 a3=1 items=0 ppid=1 pid=4653 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:49.217000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:49.237936 systemd-logind[1211]: New session 9 of user core. Oct 29 00:35:49.239345 systemd[1]: Started session-9.scope. Oct 29 00:35:49.254000 audit[4653]: USER_START pid=4653 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.255000 audit[4655]: CRED_ACQ pid=4655 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.388925 sshd[4653]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:49.388000 audit[4653]: USER_END pid=4653 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.388000 audit[4653]: CRED_DISP pid=4653 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:49.391574 systemd[1]: sshd@8-10.0.0.79:22-10.0.0.1:45364.service: Deactivated successfully. Oct 29 00:35:49.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.79:22-10.0.0.1:45364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:49.392471 systemd[1]: session-9.scope: Deactivated successfully. Oct 29 00:35:49.392932 systemd-logind[1211]: Session 9 logged out. Waiting for processes to exit. Oct 29 00:35:49.394815 systemd-logind[1211]: Removed session 9. Oct 29 00:35:50.857000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.857000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40024b9600 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:35:50.857000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:50.857000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.857000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002dd6cc0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:35:50.857000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:50.985000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.985000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.985000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400ff5a660 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:35:50.985000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:50.985000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400f775680 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:35:50.985000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:50.990000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.990000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400f9b5100 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:35:50.990000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:50.991000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:50.991000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400ff5a6c0 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:35:50.991000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:51.000000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:51.000000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:51.000000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400f7757a0 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:35:51.000000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:51.000000 audit[1844]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400f9b5120 a2=fc6 a3=0 items=0 ppid=1686 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c942 key=(null) Oct 29 00:35:51.000000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3739002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 29 00:35:51.583566 env[1223]: time="2025-10-29T00:35:51.582257837Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 29 00:35:51.806230 env[1223]: time="2025-10-29T00:35:51.806180506Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:51.807423 env[1223]: time="2025-10-29T00:35:51.807381310Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 29 00:35:51.807739 kubelet[1963]: E1029 00:35:51.807703 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:35:51.808042 kubelet[1963]: E1029 00:35:51.808020 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:35:51.808272 kubelet[1963]: E1029 00:35:51.808231 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:dd4f729e9553404383e4306eaeb84892,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-6s8cv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fc8f5ddc4-zc89z_calico-system(2e5c48c1-469b-4872-9822-ab3e1e33fe5e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:51.810281 env[1223]: time="2025-10-29T00:35:51.810252574Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 29 00:35:52.009560 env[1223]: time="2025-10-29T00:35:52.009499226Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:52.010393 env[1223]: time="2025-10-29T00:35:52.010335456Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 29 00:35:52.010596 kubelet[1963]: E1029 00:35:52.010562 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:35:52.010693 kubelet[1963]: E1029 00:35:52.010677 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:35:52.010890 kubelet[1963]: E1029 00:35:52.010853 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-6s8cv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fc8f5ddc4-zc89z_calico-system(2e5c48c1-469b-4872-9822-ab3e1e33fe5e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:52.012165 kubelet[1963]: E1029 00:35:52.012131 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fc8f5ddc4-zc89z" podUID="2e5c48c1-469b-4872-9822-ab3e1e33fe5e" Oct 29 00:35:53.548659 env[1223]: time="2025-10-29T00:35:53.548611862Z" level=info msg="StopPodSandbox for \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\"" Oct 29 00:35:53.582863 env[1223]: time="2025-10-29T00:35:53.582779155Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.643 [WARNING][4679] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0", GenerateName:"calico-apiserver-5984bf88b-", Namespace:"calico-apiserver", SelfLink:"", UID:"7f990c68-0bdc-4bb4-be36-8cb47e35962e", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5984bf88b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e", Pod:"calico-apiserver-5984bf88b-b49cr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie7c45a8cc87", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.643 [INFO][4679] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.643 [INFO][4679] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" iface="eth0" netns="" Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.643 [INFO][4679] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.643 [INFO][4679] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.661 [INFO][4689] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" HandleID="k8s-pod-network.20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.661 [INFO][4689] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.661 [INFO][4689] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.670 [WARNING][4689] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" HandleID="k8s-pod-network.20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.670 [INFO][4689] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" HandleID="k8s-pod-network.20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.671 [INFO][4689] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.674640 env[1223]: 2025-10-29 00:35:53.673 [INFO][4679] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:53.675095 env[1223]: time="2025-10-29T00:35:53.674670419Z" level=info msg="TearDown network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\" successfully" Oct 29 00:35:53.675095 env[1223]: time="2025-10-29T00:35:53.674701780Z" level=info msg="StopPodSandbox for \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\" returns successfully" Oct 29 00:35:53.675389 env[1223]: time="2025-10-29T00:35:53.675353003Z" level=info msg="RemovePodSandbox for \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\"" Oct 29 00:35:53.675533 env[1223]: time="2025-10-29T00:35:53.675489768Z" level=info msg="Forcibly stopping sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\"" Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.710 [WARNING][4707] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0", GenerateName:"calico-apiserver-5984bf88b-", Namespace:"calico-apiserver", SelfLink:"", UID:"7f990c68-0bdc-4bb4-be36-8cb47e35962e", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5984bf88b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a318257730c5b684e26aa920ebfe1846f9e832a4548a01f98dae896f79867a0e", Pod:"calico-apiserver-5984bf88b-b49cr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie7c45a8cc87", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.710 [INFO][4707] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.710 [INFO][4707] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" iface="eth0" netns="" Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.710 [INFO][4707] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.710 [INFO][4707] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.727 [INFO][4717] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" HandleID="k8s-pod-network.20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.727 [INFO][4717] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.727 [INFO][4717] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.736 [WARNING][4717] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" HandleID="k8s-pod-network.20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.736 [INFO][4717] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" HandleID="k8s-pod-network.20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Workload="localhost-k8s-calico--apiserver--5984bf88b--b49cr-eth0" Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.738 [INFO][4717] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.741186 env[1223]: 2025-10-29 00:35:53.739 [INFO][4707] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7" Oct 29 00:35:53.741674 env[1223]: time="2025-10-29T00:35:53.741222902Z" level=info msg="TearDown network for sandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\" successfully" Oct 29 00:35:53.745918 env[1223]: time="2025-10-29T00:35:53.745878068Z" level=info msg="RemovePodSandbox \"20c49cc9b3830542fd14dba530fe6579cd3a36d06e87eeebfe6e7754ea048db7\" returns successfully" Oct 29 00:35:53.746496 env[1223]: time="2025-10-29T00:35:53.746470689Z" level=info msg="StopPodSandbox for \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\"" Oct 29 00:35:53.814310 env[1223]: time="2025-10-29T00:35:53.814192094Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:53.816093 env[1223]: time="2025-10-29T00:35:53.816035879Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:53.816745 kubelet[1963]: E1029 00:35:53.816687 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:53.817036 kubelet[1963]: E1029 00:35:53.816753 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:53.817036 kubelet[1963]: E1029 00:35:53.816864 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hr8ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5984bf88b-b49cr_calico-apiserver(7f990c68-0bdc-4bb4-be36-8cb47e35962e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:53.818287 kubelet[1963]: E1029 00:35:53.817982 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" podUID="7f990c68-0bdc-4bb4-be36-8cb47e35962e" Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.780 [WARNING][4735] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" WorkloadEndpoint="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.780 [INFO][4735] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.780 [INFO][4735] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" iface="eth0" netns="" Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.780 [INFO][4735] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.780 [INFO][4735] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.801 [INFO][4744] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" HandleID="k8s-pod-network.cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Workload="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.801 [INFO][4744] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.802 [INFO][4744] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.810 [WARNING][4744] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" HandleID="k8s-pod-network.cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Workload="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.810 [INFO][4744] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" HandleID="k8s-pod-network.cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Workload="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.812 [INFO][4744] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.818463 env[1223]: 2025-10-29 00:35:53.814 [INFO][4735] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:53.819788 env[1223]: time="2025-10-29T00:35:53.819756691Z" level=info msg="TearDown network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\" successfully" Oct 29 00:35:53.819865 env[1223]: time="2025-10-29T00:35:53.819848855Z" level=info msg="StopPodSandbox for \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\" returns successfully" Oct 29 00:35:53.820237 env[1223]: time="2025-10-29T00:35:53.820211468Z" level=info msg="RemovePodSandbox for \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\"" Oct 29 00:35:53.820296 env[1223]: time="2025-10-29T00:35:53.820245709Z" level=info msg="Forcibly stopping sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\"" Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.852 [WARNING][4763] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" WorkloadEndpoint="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.853 [INFO][4763] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.853 [INFO][4763] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" iface="eth0" netns="" Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.853 [INFO][4763] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.853 [INFO][4763] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.871 [INFO][4772] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" HandleID="k8s-pod-network.cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Workload="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.871 [INFO][4772] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.871 [INFO][4772] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.880 [WARNING][4772] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" HandleID="k8s-pod-network.cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Workload="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.880 [INFO][4772] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" HandleID="k8s-pod-network.cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Workload="localhost-k8s-whisker--84f56688c6--dv9k2-eth0" Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.881 [INFO][4772] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.885126 env[1223]: 2025-10-29 00:35:53.883 [INFO][4763] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd" Oct 29 00:35:53.885535 env[1223]: time="2025-10-29T00:35:53.885159294Z" level=info msg="TearDown network for sandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\" successfully" Oct 29 00:35:53.888095 env[1223]: time="2025-10-29T00:35:53.888060877Z" level=info msg="RemovePodSandbox \"cf71cf64140a995552ce89146b1b4629112bcc6a663b2d4eef916fa5d1aeb2fd\" returns successfully" Oct 29 00:35:53.888590 env[1223]: time="2025-10-29T00:35:53.888556535Z" level=info msg="StopPodSandbox for \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\"" Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.920 [WARNING][4791] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0", GenerateName:"calico-kube-controllers-64b9647db-", Namespace:"calico-system", SelfLink:"", UID:"7113e3f3-c736-4216-8f92-dee9d64f1690", ResourceVersion:"1093", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"64b9647db", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f", Pod:"calico-kube-controllers-64b9647db-jnrkc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid2d5dc31dc6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.921 [INFO][4791] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.921 [INFO][4791] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" iface="eth0" netns="" Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.921 [INFO][4791] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.921 [INFO][4791] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.938 [INFO][4799] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" HandleID="k8s-pod-network.fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.938 [INFO][4799] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.938 [INFO][4799] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.947 [WARNING][4799] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" HandleID="k8s-pod-network.fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.947 [INFO][4799] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" HandleID="k8s-pod-network.fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.949 [INFO][4799] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:53.953970 env[1223]: 2025-10-29 00:35:53.952 [INFO][4791] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:53.954592 env[1223]: time="2025-10-29T00:35:53.954554479Z" level=info msg="TearDown network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\" successfully" Oct 29 00:35:53.954664 env[1223]: time="2025-10-29T00:35:53.954647322Z" level=info msg="StopPodSandbox for \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\" returns successfully" Oct 29 00:35:53.955244 env[1223]: time="2025-10-29T00:35:53.955212062Z" level=info msg="RemovePodSandbox for \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\"" Oct 29 00:35:53.955300 env[1223]: time="2025-10-29T00:35:53.955253384Z" level=info msg="Forcibly stopping sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\"" Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:53.992 [WARNING][4817] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0", GenerateName:"calico-kube-controllers-64b9647db-", Namespace:"calico-system", SelfLink:"", UID:"7113e3f3-c736-4216-8f92-dee9d64f1690", ResourceVersion:"1093", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"64b9647db", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4111478af92d630655b93ab8544e11873dae4a4457a8ae31e68f1b7d8ce8a10f", Pod:"calico-kube-controllers-64b9647db-jnrkc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid2d5dc31dc6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:53.992 [INFO][4817] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:53.992 [INFO][4817] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" iface="eth0" netns="" Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:53.992 [INFO][4817] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:53.992 [INFO][4817] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:54.011 [INFO][4826] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" HandleID="k8s-pod-network.fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:54.011 [INFO][4826] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:54.011 [INFO][4826] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:54.021 [WARNING][4826] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" HandleID="k8s-pod-network.fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:54.021 [INFO][4826] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" HandleID="k8s-pod-network.fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Workload="localhost-k8s-calico--kube--controllers--64b9647db--jnrkc-eth0" Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:54.023 [INFO][4826] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.026570 env[1223]: 2025-10-29 00:35:54.024 [INFO][4817] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026" Oct 29 00:35:54.026986 env[1223]: time="2025-10-29T00:35:54.026611230Z" level=info msg="TearDown network for sandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\" successfully" Oct 29 00:35:54.029772 env[1223]: time="2025-10-29T00:35:54.029619776Z" level=info msg="RemovePodSandbox \"fbfb0e1b60ec38a4ebc079e611c89de7bd5982b3a63e9ab4569b2ab9676fb026\" returns successfully" Oct 29 00:35:54.030281 env[1223]: time="2025-10-29T00:35:54.030233997Z" level=info msg="StopPodSandbox for \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\"" Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.061 [WARNING][4845] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--5gpmj-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"ed11f017-3fc8-47ea-980c-c9d4b03a0875", ResourceVersion:"1150", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59", Pod:"goldmane-666569f655-5gpmj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali20ed6644554", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.062 [INFO][4845] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.062 [INFO][4845] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" iface="eth0" netns="" Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.062 [INFO][4845] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.062 [INFO][4845] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.080 [INFO][4855] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" HandleID="k8s-pod-network.fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.081 [INFO][4855] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.081 [INFO][4855] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.089 [WARNING][4855] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" HandleID="k8s-pod-network.fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.089 [INFO][4855] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" HandleID="k8s-pod-network.fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.090 [INFO][4855] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.093579 env[1223]: 2025-10-29 00:35:54.091 [INFO][4845] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:54.093579 env[1223]: time="2025-10-29T00:35:54.093547306Z" level=info msg="TearDown network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\" successfully" Oct 29 00:35:54.093579 env[1223]: time="2025-10-29T00:35:54.093578627Z" level=info msg="StopPodSandbox for \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\" returns successfully" Oct 29 00:35:54.095796 env[1223]: time="2025-10-29T00:35:54.095763784Z" level=info msg="RemovePodSandbox for \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\"" Oct 29 00:35:54.095853 env[1223]: time="2025-10-29T00:35:54.095805945Z" level=info msg="Forcibly stopping sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\"" Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.131 [WARNING][4872] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--5gpmj-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"ed11f017-3fc8-47ea-980c-c9d4b03a0875", ResourceVersion:"1150", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2633a9d74b05afef20229e4773d8566ca4b3de8e037f01067915b9f271d81e59", Pod:"goldmane-666569f655-5gpmj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali20ed6644554", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.131 [INFO][4872] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.131 [INFO][4872] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" iface="eth0" netns="" Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.131 [INFO][4872] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.131 [INFO][4872] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.151 [INFO][4880] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" HandleID="k8s-pod-network.fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.151 [INFO][4880] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.151 [INFO][4880] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.160 [WARNING][4880] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" HandleID="k8s-pod-network.fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.160 [INFO][4880] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" HandleID="k8s-pod-network.fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Workload="localhost-k8s-goldmane--666569f655--5gpmj-eth0" Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.161 [INFO][4880] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.164629 env[1223]: 2025-10-29 00:35:54.163 [INFO][4872] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a" Oct 29 00:35:54.165197 env[1223]: time="2025-10-29T00:35:54.164661129Z" level=info msg="TearDown network for sandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\" successfully" Oct 29 00:35:54.167647 env[1223]: time="2025-10-29T00:35:54.167606952Z" level=info msg="RemovePodSandbox \"fb47a01f6d93f7fd4d48aeebbd53d0d96e26791d5494fc52f3da3309f6042d6a\" returns successfully" Oct 29 00:35:54.168181 env[1223]: time="2025-10-29T00:35:54.168117410Z" level=info msg="StopPodSandbox for \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\"" Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.202 [WARNING][4897] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--ztr7c-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8d7ebf96-f131-40c2-9801-3bcd40c3dda3", ResourceVersion:"1179", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53", Pod:"csi-node-driver-ztr7c", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calide07662cbff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.202 [INFO][4897] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.202 [INFO][4897] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" iface="eth0" netns="" Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.202 [INFO][4897] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.202 [INFO][4897] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.220 [INFO][4907] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" HandleID="k8s-pod-network.c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.221 [INFO][4907] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.221 [INFO][4907] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.229 [WARNING][4907] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" HandleID="k8s-pod-network.c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.230 [INFO][4907] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" HandleID="k8s-pod-network.c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.231 [INFO][4907] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.235448 env[1223]: 2025-10-29 00:35:54.233 [INFO][4897] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:54.235957 env[1223]: time="2025-10-29T00:35:54.235921877Z" level=info msg="TearDown network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\" successfully" Oct 29 00:35:54.236022 env[1223]: time="2025-10-29T00:35:54.236006160Z" level=info msg="StopPodSandbox for \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\" returns successfully" Oct 29 00:35:54.236556 env[1223]: time="2025-10-29T00:35:54.236526538Z" level=info msg="RemovePodSandbox for \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\"" Oct 29 00:35:54.236607 env[1223]: time="2025-10-29T00:35:54.236577980Z" level=info msg="Forcibly stopping sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\"" Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.270 [WARNING][4925] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--ztr7c-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8d7ebf96-f131-40c2-9801-3bcd40c3dda3", ResourceVersion:"1179", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"86a4a2dc8c4b9369019907264eb2b96e206df6ea9b4e4d6a7a282028ea44fc53", Pod:"csi-node-driver-ztr7c", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calide07662cbff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.270 [INFO][4925] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.270 [INFO][4925] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" iface="eth0" netns="" Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.270 [INFO][4925] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.270 [INFO][4925] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.289 [INFO][4934] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" HandleID="k8s-pod-network.c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.289 [INFO][4934] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.289 [INFO][4934] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.298 [WARNING][4934] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" HandleID="k8s-pod-network.c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.298 [INFO][4934] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" HandleID="k8s-pod-network.c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Workload="localhost-k8s-csi--node--driver--ztr7c-eth0" Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.299 [INFO][4934] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.303166 env[1223]: 2025-10-29 00:35:54.301 [INFO][4925] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e" Oct 29 00:35:54.303603 env[1223]: time="2025-10-29T00:35:54.303200165Z" level=info msg="TearDown network for sandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\" successfully" Oct 29 00:35:54.331567 env[1223]: time="2025-10-29T00:35:54.331518482Z" level=info msg="RemovePodSandbox \"c87ba12d81425119c2ba988ddb40c576ee4ed5655c36f86c8d7bd89a9de7e43e\" returns successfully" Oct 29 00:35:54.332228 env[1223]: time="2025-10-29T00:35:54.332189745Z" level=info msg="StopPodSandbox for \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\"" Oct 29 00:35:54.394526 systemd[1]: Started sshd@9-10.0.0.79:22-10.0.0.1:51030.service. Oct 29 00:35:54.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.79:22-10.0.0.1:51030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.398794 kernel: kauditd_printk_skb: 31 callbacks suppressed Oct 29 00:35:54.398883 kernel: audit: type=1130 audit(1761698154.393:1396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.79:22-10.0.0.1:51030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.363 [WARNING][4953] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0", GenerateName:"calico-apiserver-68bf75d69f-", Namespace:"calico-apiserver", SelfLink:"", UID:"7ac47b9b-412b-4e0c-bee0-91b227127625", ResourceVersion:"1159", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"68bf75d69f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac", Pod:"calico-apiserver-68bf75d69f-vwvqn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53b2186aa17", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.364 [INFO][4953] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.364 [INFO][4953] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" iface="eth0" netns="" Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.364 [INFO][4953] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.364 [INFO][4953] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.382 [INFO][4962] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" HandleID="k8s-pod-network.023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.382 [INFO][4962] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.382 [INFO][4962] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.391 [WARNING][4962] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" HandleID="k8s-pod-network.023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.391 [INFO][4962] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" HandleID="k8s-pod-network.023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.393 [INFO][4962] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.401626 env[1223]: 2025-10-29 00:35:54.399 [INFO][4953] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:54.402036 env[1223]: time="2025-10-29T00:35:54.401617149Z" level=info msg="TearDown network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\" successfully" Oct 29 00:35:54.402036 env[1223]: time="2025-10-29T00:35:54.401646470Z" level=info msg="StopPodSandbox for \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\" returns successfully" Oct 29 00:35:54.402237 env[1223]: time="2025-10-29T00:35:54.402188049Z" level=info msg="RemovePodSandbox for \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\"" Oct 29 00:35:54.402299 env[1223]: time="2025-10-29T00:35:54.402244891Z" level=info msg="Forcibly stopping sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\"" Oct 29 00:35:54.445000 audit[4970]: USER_ACCT pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.446712 sshd[4970]: Accepted publickey for core from 10.0.0.1 port 51030 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:54.448202 sshd[4970]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:54.446000 audit[4970]: CRED_ACQ pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.452395 systemd-logind[1211]: New session 10 of user core. Oct 29 00:35:54.452910 systemd[1]: Started session-10.scope. Oct 29 00:35:54.453492 kernel: audit: type=1101 audit(1761698154.445:1397): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.453545 kernel: audit: type=1103 audit(1761698154.446:1398): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.453563 kernel: audit: type=1006 audit(1761698154.446:1399): pid=4970 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 29 00:35:54.455407 kernel: audit: type=1300 audit(1761698154.446:1399): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb04eb50 a2=3 a3=1 items=0 ppid=1 pid=4970 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:54.446000 audit[4970]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb04eb50 a2=3 a3=1 items=0 ppid=1 pid=4970 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:54.446000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:54.460213 kernel: audit: type=1327 audit(1761698154.446:1399): proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:54.460265 kernel: audit: type=1105 audit(1761698154.456:1400): pid=4970 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.456000 audit[4970]: USER_START pid=4970 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.458000 audit[4997]: CRED_ACQ pid=4997 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.467182 kernel: audit: type=1103 audit(1761698154.458:1401): pid=4997 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.442 [WARNING][4981] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0", GenerateName:"calico-apiserver-68bf75d69f-", Namespace:"calico-apiserver", SelfLink:"", UID:"7ac47b9b-412b-4e0c-bee0-91b227127625", ResourceVersion:"1159", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"68bf75d69f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"13b8897fa0a2311c193e14807b0404083fc403eefbc0e7cee555941d527f21ac", Pod:"calico-apiserver-68bf75d69f-vwvqn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53b2186aa17", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.443 [INFO][4981] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.443 [INFO][4981] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" iface="eth0" netns="" Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.443 [INFO][4981] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.443 [INFO][4981] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.476 [INFO][4991] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" HandleID="k8s-pod-network.023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.477 [INFO][4991] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.477 [INFO][4991] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.486 [WARNING][4991] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" HandleID="k8s-pod-network.023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.486 [INFO][4991] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" HandleID="k8s-pod-network.023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Workload="localhost-k8s-calico--apiserver--68bf75d69f--vwvqn-eth0" Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.487 [INFO][4991] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.490728 env[1223]: 2025-10-29 00:35:54.489 [INFO][4981] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba" Oct 29 00:35:54.491139 env[1223]: time="2025-10-29T00:35:54.490794128Z" level=info msg="TearDown network for sandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\" successfully" Oct 29 00:35:54.493993 env[1223]: time="2025-10-29T00:35:54.493953079Z" level=info msg="RemovePodSandbox \"023961217439c5a300472285bc0ee43401491f33ced8aa65a5fce9b12b8039ba\" returns successfully" Oct 29 00:35:54.494499 env[1223]: time="2025-10-29T00:35:54.494473737Z" level=info msg="StopPodSandbox for \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\"" Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.527 [WARNING][5010] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6cb9f80b-c57b-4005-9779-057c027d0c90", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd", Pod:"coredns-668d6bf9bc-mmtvr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2ea188732fd", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.527 [INFO][5010] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.527 [INFO][5010] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" iface="eth0" netns="" Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.527 [INFO][5010] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.527 [INFO][5010] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.549 [INFO][5030] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" HandleID="k8s-pod-network.e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.549 [INFO][5030] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.550 [INFO][5030] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.558 [WARNING][5030] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" HandleID="k8s-pod-network.e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.558 [INFO][5030] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" HandleID="k8s-pod-network.e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.560 [INFO][5030] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.566206 env[1223]: 2025-10-29 00:35:54.564 [INFO][5010] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:54.566910 env[1223]: time="2025-10-29T00:35:54.566228063Z" level=info msg="TearDown network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\" successfully" Oct 29 00:35:54.566910 env[1223]: time="2025-10-29T00:35:54.566258064Z" level=info msg="StopPodSandbox for \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\" returns successfully" Oct 29 00:35:54.566910 env[1223]: time="2025-10-29T00:35:54.566766122Z" level=info msg="RemovePodSandbox for \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\"" Oct 29 00:35:54.566910 env[1223]: time="2025-10-29T00:35:54.566813164Z" level=info msg="Forcibly stopping sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\"" Oct 29 00:35:54.621593 sshd[4970]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:54.621000 audit[4970]: USER_END pid=4970 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.626041 systemd[1]: Started sshd@10-10.0.0.79:22-10.0.0.1:51036.service. Oct 29 00:35:54.626979 systemd[1]: sshd@9-10.0.0.79:22-10.0.0.1:51030.service: Deactivated successfully. Oct 29 00:35:54.622000 audit[4970]: CRED_DISP pid=4970 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.627867 systemd[1]: session-10.scope: Deactivated successfully. Oct 29 00:35:54.628627 systemd-logind[1211]: Session 10 logged out. Waiting for processes to exit. Oct 29 00:35:54.629506 systemd-logind[1211]: Removed session 10. Oct 29 00:35:54.630444 kernel: audit: type=1106 audit(1761698154.621:1402): pid=4970 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.630513 kernel: audit: type=1104 audit(1761698154.622:1403): pid=4970 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.79:22-10.0.0.1:51036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.79:22-10.0.0.1:51030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.605 [WARNING][5047] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6cb9f80b-c57b-4005-9779-057c027d0c90", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dc75790e969276eccf4fc4ce8ce62ab21487e8b782d8d45da34ce61bb94200cd", Pod:"coredns-668d6bf9bc-mmtvr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2ea188732fd", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.608 [INFO][5047] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.608 [INFO][5047] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" iface="eth0" netns="" Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.608 [INFO][5047] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.608 [INFO][5047] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.636 [INFO][5057] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" HandleID="k8s-pod-network.e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.636 [INFO][5057] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.637 [INFO][5057] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.649 [WARNING][5057] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" HandleID="k8s-pod-network.e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.649 [INFO][5057] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" HandleID="k8s-pod-network.e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Workload="localhost-k8s-coredns--668d6bf9bc--mmtvr-eth0" Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.650 [INFO][5057] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.654803 env[1223]: 2025-10-29 00:35:54.652 [INFO][5047] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0" Oct 29 00:35:54.654803 env[1223]: time="2025-10-29T00:35:54.654775300Z" level=info msg="TearDown network for sandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\" successfully" Oct 29 00:35:54.658098 env[1223]: time="2025-10-29T00:35:54.658051695Z" level=info msg="RemovePodSandbox \"e9dd92bf6e0dc6d2d13fa56f3fa133c271a0b15849c54b9dd6643de5b828aca0\" returns successfully" Oct 29 00:35:54.658625 env[1223]: time="2025-10-29T00:35:54.658507591Z" level=info msg="StopPodSandbox for \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\"" Oct 29 00:35:54.674000 audit[5064]: USER_ACCT pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.676784 sshd[5064]: Accepted publickey for core from 10.0.0.1 port 51036 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:54.675000 audit[5064]: CRED_ACQ pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.676000 audit[5064]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3694ca0 a2=3 a3=1 items=0 ppid=1 pid=5064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:54.676000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:54.678212 sshd[5064]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:54.682595 systemd-logind[1211]: New session 11 of user core. Oct 29 00:35:54.683088 systemd[1]: Started session-11.scope. Oct 29 00:35:54.686000 audit[5064]: USER_START pid=5064 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.688000 audit[5087]: CRED_ACQ pid=5087 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.691 [WARNING][5079] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0", GenerateName:"calico-apiserver-68bf75d69f-", Namespace:"calico-apiserver", SelfLink:"", UID:"87f3eb2e-83c4-4548-a495-c83ad5b81b76", ResourceVersion:"1165", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"68bf75d69f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29", Pod:"calico-apiserver-68bf75d69f-hk7dm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3f60c86b3f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.691 [INFO][5079] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.691 [INFO][5079] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" iface="eth0" netns="" Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.691 [INFO][5079] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.691 [INFO][5079] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.710 [INFO][5089] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" HandleID="k8s-pod-network.911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.710 [INFO][5089] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.710 [INFO][5089] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.719 [WARNING][5089] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" HandleID="k8s-pod-network.911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.719 [INFO][5089] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" HandleID="k8s-pod-network.911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.720 [INFO][5089] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.724296 env[1223]: 2025-10-29 00:35:54.722 [INFO][5079] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:54.724749 env[1223]: time="2025-10-29T00:35:54.724324428Z" level=info msg="TearDown network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\" successfully" Oct 29 00:35:54.724749 env[1223]: time="2025-10-29T00:35:54.724353749Z" level=info msg="StopPodSandbox for \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\" returns successfully" Oct 29 00:35:54.724801 env[1223]: time="2025-10-29T00:35:54.724772283Z" level=info msg="RemovePodSandbox for \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\"" Oct 29 00:35:54.724847 env[1223]: time="2025-10-29T00:35:54.724806565Z" level=info msg="Forcibly stopping sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\"" Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.764 [WARNING][5107] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0", GenerateName:"calico-apiserver-68bf75d69f-", Namespace:"calico-apiserver", SelfLink:"", UID:"87f3eb2e-83c4-4548-a495-c83ad5b81b76", ResourceVersion:"1165", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 13, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"68bf75d69f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"29a22e0b1b4d87200965e70301d7c5b0b900ef33bf09d0157536b3d056474e29", Pod:"calico-apiserver-68bf75d69f-hk7dm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3f60c86b3f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.765 [INFO][5107] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.765 [INFO][5107] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" iface="eth0" netns="" Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.765 [INFO][5107] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.765 [INFO][5107] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.783 [INFO][5123] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" HandleID="k8s-pod-network.911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.783 [INFO][5123] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.783 [INFO][5123] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.792 [WARNING][5123] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" HandleID="k8s-pod-network.911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.792 [INFO][5123] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" HandleID="k8s-pod-network.911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Workload="localhost-k8s-calico--apiserver--68bf75d69f--hk7dm-eth0" Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.793 [INFO][5123] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.800658 env[1223]: 2025-10-29 00:35:54.798 [INFO][5107] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98" Oct 29 00:35:54.800658 env[1223]: time="2025-10-29T00:35:54.800371864Z" level=info msg="TearDown network for sandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\" successfully" Oct 29 00:35:54.806527 env[1223]: time="2025-10-29T00:35:54.806474479Z" level=info msg="RemovePodSandbox \"911cf09b71ce0057c99e22808daf6f394cef0312f3638a29325f2c8ce1e80d98\" returns successfully" Oct 29 00:35:54.807542 env[1223]: time="2025-10-29T00:35:54.807510676Z" level=info msg="StopPodSandbox for \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\"" Oct 29 00:35:54.876404 sshd[5064]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:54.880000 audit[5064]: USER_END pid=5064 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.880000 audit[5064]: CRED_DISP pid=5064 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.885769 systemd[1]: sshd@10-10.0.0.79:22-10.0.0.1:51036.service: Deactivated successfully. Oct 29 00:35:54.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.79:22-10.0.0.1:51036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.886534 systemd[1]: session-11.scope: Deactivated successfully. Oct 29 00:35:54.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.79:22-10.0.0.1:51040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:54.894561 systemd[1]: Started sshd@11-10.0.0.79:22-10.0.0.1:51040.service. Oct 29 00:35:54.894811 systemd-logind[1211]: Session 11 logged out. Waiting for processes to exit. Oct 29 00:35:54.895914 systemd-logind[1211]: Removed session 11. Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.858 [WARNING][5141] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--clmmt-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c", ResourceVersion:"1138", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141", Pod:"coredns-668d6bf9bc-clmmt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif5095a33bad", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.858 [INFO][5141] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.858 [INFO][5141] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" iface="eth0" netns="" Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.858 [INFO][5141] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.858 [INFO][5141] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.898 [INFO][5150] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" HandleID="k8s-pod-network.97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.898 [INFO][5150] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.898 [INFO][5150] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.916 [WARNING][5150] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" HandleID="k8s-pod-network.97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.916 [INFO][5150] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" HandleID="k8s-pod-network.97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.918 [INFO][5150] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.922468 env[1223]: 2025-10-29 00:35:54.920 [INFO][5141] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:54.924514 env[1223]: time="2025-10-29T00:35:54.922397519Z" level=info msg="TearDown network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\" successfully" Oct 29 00:35:54.924764 env[1223]: time="2025-10-29T00:35:54.924733442Z" level=info msg="StopPodSandbox for \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\" returns successfully" Oct 29 00:35:54.925361 env[1223]: time="2025-10-29T00:35:54.925309582Z" level=info msg="RemovePodSandbox for \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\"" Oct 29 00:35:54.925487 env[1223]: time="2025-10-29T00:35:54.925370504Z" level=info msg="Forcibly stopping sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\"" Oct 29 00:35:54.940000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:54.940000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40029555a0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:35:54.940000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:54.941000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:54.941000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001036880 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:35:54.941000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:54.943000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:54.943000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002955740 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:35:54.943000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:54.943000 audit[1835]: AVC avc: denied { watch } for pid=1835 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 29 00:35:54.943000 audit[1835]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000e992a0 a2=fc6 a3=0 items=0 ppid=1674 pid=1835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c322 key=(null) Oct 29 00:35:54.943000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 29 00:35:54.946000 audit[5158]: USER_ACCT pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.947895 sshd[5158]: Accepted publickey for core from 10.0.0.1 port 51040 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:35:54.947000 audit[5158]: CRED_ACQ pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.947000 audit[5158]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd78ae330 a2=3 a3=1 items=0 ppid=1 pid=5158 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:35:54.947000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:35:54.949647 sshd[5158]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:35:54.957125 systemd-logind[1211]: New session 12 of user core. Oct 29 00:35:54.958007 systemd[1]: Started session-12.scope. Oct 29 00:35:54.962000 audit[5158]: USER_START pid=5158 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.963000 audit[5181]: CRED_ACQ pid=5181 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.962 [WARNING][5172] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--clmmt-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7ab60c1c-bd63-4fff-bd3c-c7ccb67adc7c", ResourceVersion:"1138", Generation:0, CreationTimestamp:time.Date(2025, time.October, 29, 0, 35, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"032e3d38e4f5243ddbcff8a7f7df4eda9d427e547692ddb7dffd9a475c334141", Pod:"coredns-668d6bf9bc-clmmt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif5095a33bad", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.962 [INFO][5172] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.962 [INFO][5172] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" iface="eth0" netns="" Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.962 [INFO][5172] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.962 [INFO][5172] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.980 [INFO][5180] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" HandleID="k8s-pod-network.97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.980 [INFO][5180] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.981 [INFO][5180] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.990 [WARNING][5180] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" HandleID="k8s-pod-network.97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.990 [INFO][5180] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" HandleID="k8s-pod-network.97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Workload="localhost-k8s-coredns--668d6bf9bc--clmmt-eth0" Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.992 [INFO][5180] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 29 00:35:54.995964 env[1223]: 2025-10-29 00:35:54.994 [INFO][5172] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745" Oct 29 00:35:54.995964 env[1223]: time="2025-10-29T00:35:54.995945188Z" level=info msg="TearDown network for sandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\" successfully" Oct 29 00:35:54.998792 env[1223]: time="2025-10-29T00:35:54.998753007Z" level=info msg="RemovePodSandbox \"97fca28b7a2106babdcb7aeb4de309b123a2fdbf809b4971f18f62dd0e616745\" returns successfully" Oct 29 00:35:55.093279 sshd[5158]: pam_unix(sshd:session): session closed for user core Oct 29 00:35:55.093000 audit[5158]: USER_END pid=5158 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.093000 audit[5158]: CRED_DISP pid=5158 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:35:55.096383 systemd[1]: sshd@11-10.0.0.79:22-10.0.0.1:51040.service: Deactivated successfully. Oct 29 00:35:55.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.79:22-10.0.0.1:51040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:35:55.097250 systemd[1]: session-12.scope: Deactivated successfully. Oct 29 00:35:55.097833 systemd-logind[1211]: Session 12 logged out. Waiting for processes to exit. Oct 29 00:35:55.098448 systemd-logind[1211]: Removed session 12. Oct 29 00:35:58.579132 env[1223]: time="2025-10-29T00:35:58.579092148Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:35:58.827329 env[1223]: time="2025-10-29T00:35:58.827270495Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:58.829436 env[1223]: time="2025-10-29T00:35:58.829313443Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:35:58.829856 kubelet[1963]: E1029 00:35:58.829790 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:58.829856 kubelet[1963]: E1029 00:35:58.829845 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:35:58.830189 kubelet[1963]: E1029 00:35:58.830129 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-glzvq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-68bf75d69f-vwvqn_calico-apiserver(7ac47b9b-412b-4e0c-bee0-91b227127625): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:58.831967 kubelet[1963]: E1029 00:35:58.831920 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" podUID="7ac47b9b-412b-4e0c-bee0-91b227127625" Oct 29 00:35:59.581305 env[1223]: time="2025-10-29T00:35:59.581261151Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 29 00:35:59.795618 env[1223]: time="2025-10-29T00:35:59.795568401Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:35:59.796713 env[1223]: time="2025-10-29T00:35:59.796665095Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 29 00:35:59.797066 kubelet[1963]: E1029 00:35:59.796994 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:35:59.797144 kubelet[1963]: E1029 00:35:59.797073 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:35:59.797274 kubelet[1963]: E1029 00:35:59.797220 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-r6gd7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-64b9647db-jnrkc_calico-system(7113e3f3-c736-4216-8f92-dee9d64f1690): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 29 00:35:59.798400 kubelet[1963]: E1029 00:35:59.798370 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" podUID="7113e3f3-c736-4216-8f92-dee9d64f1690" Oct 29 00:36:00.098250 systemd[1]: Started sshd@12-10.0.0.79:22-10.0.0.1:54850.service. Oct 29 00:36:00.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.79:22-10.0.0.1:54850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:00.102626 kernel: kauditd_printk_skb: 35 callbacks suppressed Oct 29 00:36:00.102723 kernel: audit: type=1130 audit(1761698160.096:1427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.79:22-10.0.0.1:54850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:00.144000 audit[5211]: USER_ACCT pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.145646 sshd[5211]: Accepted publickey for core from 10.0.0.1 port 54850 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:00.147457 sshd[5211]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:00.145000 audit[5211]: CRED_ACQ pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.152543 kernel: audit: type=1101 audit(1761698160.144:1428): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.152634 kernel: audit: type=1103 audit(1761698160.145:1429): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.152654 kernel: audit: type=1006 audit(1761698160.145:1430): pid=5211 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 29 00:36:00.145000 audit[5211]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc855930 a2=3 a3=1 items=0 ppid=1 pid=5211 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:00.158467 kernel: audit: type=1300 audit(1761698160.145:1430): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc855930 a2=3 a3=1 items=0 ppid=1 pid=5211 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:00.145000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:00.159865 kernel: audit: type=1327 audit(1761698160.145:1430): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:00.161545 systemd-logind[1211]: New session 13 of user core. Oct 29 00:36:00.162691 systemd[1]: Started session-13.scope. Oct 29 00:36:00.165000 audit[5211]: USER_START pid=5211 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.166000 audit[5213]: CRED_ACQ pid=5213 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.174305 kernel: audit: type=1105 audit(1761698160.165:1431): pid=5211 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.174381 kernel: audit: type=1103 audit(1761698160.166:1432): pid=5213 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.285462 sshd[5211]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:00.285000 audit[5211]: USER_END pid=5211 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.288255 systemd[1]: sshd@12-10.0.0.79:22-10.0.0.1:54850.service: Deactivated successfully. Oct 29 00:36:00.289123 systemd[1]: session-13.scope: Deactivated successfully. Oct 29 00:36:00.285000 audit[5211]: CRED_DISP pid=5211 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.294164 kernel: audit: type=1106 audit(1761698160.285:1433): pid=5211 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.294301 kernel: audit: type=1104 audit(1761698160.285:1434): pid=5211 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:00.294210 systemd-logind[1211]: Session 13 logged out. Waiting for processes to exit. Oct 29 00:36:00.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.79:22-10.0.0.1:54850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:00.295449 systemd-logind[1211]: Removed session 13. Oct 29 00:36:00.579749 env[1223]: time="2025-10-29T00:36:00.579709474Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 29 00:36:00.802568 env[1223]: time="2025-10-29T00:36:00.802518056Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:00.804085 env[1223]: time="2025-10-29T00:36:00.804033142Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 29 00:36:00.804414 kubelet[1963]: E1029 00:36:00.804365 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:36:00.804652 kubelet[1963]: E1029 00:36:00.804426 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:36:00.804716 kubelet[1963]: E1029 00:36:00.804662 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5q959,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-5gpmj_calico-system(ed11f017-3fc8-47ea-980c-c9d4b03a0875): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:00.804878 env[1223]: time="2025-10-29T00:36:00.804848884Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:36:00.806133 kubelet[1963]: E1029 00:36:00.806089 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-5gpmj" podUID="ed11f017-3fc8-47ea-980c-c9d4b03a0875" Oct 29 00:36:00.997192 env[1223]: time="2025-10-29T00:36:00.997145942Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:00.998323 env[1223]: time="2025-10-29T00:36:00.998283157Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:36:00.998752 kubelet[1963]: E1029 00:36:00.998709 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:00.998869 kubelet[1963]: E1029 00:36:00.998765 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:00.998923 kubelet[1963]: E1029 00:36:00.998883 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xkgbm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-68bf75d69f-hk7dm_calico-apiserver(87f3eb2e-83c4-4548-a495-c83ad5b81b76): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:01.000116 kubelet[1963]: E1029 00:36:01.000066 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" podUID="87f3eb2e-83c4-4548-a495-c83ad5b81b76" Oct 29 00:36:02.578999 env[1223]: time="2025-10-29T00:36:02.578949211Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 29 00:36:02.810170 env[1223]: time="2025-10-29T00:36:02.809847190Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:02.811607 env[1223]: time="2025-10-29T00:36:02.811539198Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 29 00:36:02.811797 kubelet[1963]: E1029 00:36:02.811750 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:36:02.812070 kubelet[1963]: E1029 00:36:02.811811 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:36:02.812070 kubelet[1963]: E1029 00:36:02.811932 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b6ttw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-ztr7c_calico-system(8d7ebf96-f131-40c2-9801-3bcd40c3dda3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:02.814742 env[1223]: time="2025-10-29T00:36:02.814648778Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 29 00:36:03.020354 env[1223]: time="2025-10-29T00:36:03.020297751Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:03.022216 env[1223]: time="2025-10-29T00:36:03.022145318Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 29 00:36:03.022424 kubelet[1963]: E1029 00:36:03.022368 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:36:03.022502 kubelet[1963]: E1029 00:36:03.022423 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:36:03.022607 kubelet[1963]: E1029 00:36:03.022549 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b6ttw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-ztr7c_calico-system(8d7ebf96-f131-40c2-9801-3bcd40c3dda3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:03.023785 kubelet[1963]: E1029 00:36:03.023749 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:36:04.834264 kubelet[1963]: E1029 00:36:04.834166 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:05.289921 systemd[1]: Started sshd@13-10.0.0.79:22-10.0.0.1:54854.service. Oct 29 00:36:05.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.79:22-10.0.0.1:54854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:05.294500 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 29 00:36:05.294569 kernel: audit: type=1130 audit(1761698165.288:1436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.79:22-10.0.0.1:54854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:05.339000 audit[5250]: USER_ACCT pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.341366 sshd[5250]: Accepted publickey for core from 10.0.0.1 port 54854 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:05.343000 audit[5250]: CRED_ACQ pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.345664 sshd[5250]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:05.348509 kernel: audit: type=1101 audit(1761698165.339:1437): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.348712 kernel: audit: type=1103 audit(1761698165.343:1438): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.348756 kernel: audit: type=1006 audit(1761698165.343:1439): pid=5250 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 29 00:36:05.349498 systemd-logind[1211]: New session 14 of user core. Oct 29 00:36:05.350187 systemd[1]: Started session-14.scope. Oct 29 00:36:05.343000 audit[5250]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc61a46b0 a2=3 a3=1 items=0 ppid=1 pid=5250 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:05.354135 kernel: audit: type=1300 audit(1761698165.343:1439): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc61a46b0 a2=3 a3=1 items=0 ppid=1 pid=5250 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:05.343000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:05.355739 kernel: audit: type=1327 audit(1761698165.343:1439): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:05.355823 kernel: audit: type=1105 audit(1761698165.349:1440): pid=5250 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.349000 audit[5250]: USER_START pid=5250 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.353000 audit[5254]: CRED_ACQ pid=5254 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.362968 kernel: audit: type=1103 audit(1761698165.353:1441): pid=5254 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.471794 sshd[5250]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:05.471000 audit[5250]: USER_END pid=5250 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.474905 systemd[1]: sshd@13-10.0.0.79:22-10.0.0.1:54854.service: Deactivated successfully. Oct 29 00:36:05.475785 systemd[1]: session-14.scope: Deactivated successfully. Oct 29 00:36:05.476301 systemd-logind[1211]: Session 14 logged out. Waiting for processes to exit. Oct 29 00:36:05.476937 systemd-logind[1211]: Removed session 14. Oct 29 00:36:05.471000 audit[5250]: CRED_DISP pid=5250 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.480416 kernel: audit: type=1106 audit(1761698165.471:1442): pid=5250 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.480476 kernel: audit: type=1104 audit(1761698165.471:1443): pid=5250 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:05.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.79:22-10.0.0.1:54854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:05.580581 kubelet[1963]: E1029 00:36:05.580443 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fc8f5ddc4-zc89z" podUID="2e5c48c1-469b-4872-9822-ab3e1e33fe5e" Oct 29 00:36:09.580412 kubelet[1963]: E1029 00:36:09.580371 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" podUID="7f990c68-0bdc-4bb4-be36-8cb47e35962e" Oct 29 00:36:10.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.79:22-10.0.0.1:45030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:10.477980 systemd[1]: Started sshd@14-10.0.0.79:22-10.0.0.1:45030.service. Oct 29 00:36:10.479002 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 29 00:36:10.479064 kernel: audit: type=1130 audit(1761698170.476:1445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.79:22-10.0.0.1:45030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:10.530000 audit[5265]: USER_ACCT pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.532077 sshd[5265]: Accepted publickey for core from 10.0.0.1 port 45030 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:10.532000 audit[5265]: CRED_ACQ pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.536043 sshd[5265]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:10.539366 kernel: audit: type=1101 audit(1761698170.530:1446): pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.539494 kernel: audit: type=1103 audit(1761698170.532:1447): pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.539521 kernel: audit: type=1006 audit(1761698170.532:1448): pid=5265 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 29 00:36:10.532000 audit[5265]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe394a8b0 a2=3 a3=1 items=0 ppid=1 pid=5265 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:10.542569 systemd-logind[1211]: New session 15 of user core. Oct 29 00:36:10.543517 systemd[1]: Started session-15.scope. Oct 29 00:36:10.545235 kernel: audit: type=1300 audit(1761698170.532:1448): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe394a8b0 a2=3 a3=1 items=0 ppid=1 pid=5265 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:10.545311 kernel: audit: type=1327 audit(1761698170.532:1448): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:10.532000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:10.546000 audit[5265]: USER_START pid=5265 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.547000 audit[5267]: CRED_ACQ pid=5267 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.555936 kernel: audit: type=1105 audit(1761698170.546:1449): pid=5265 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.556048 kernel: audit: type=1103 audit(1761698170.547:1450): pid=5267 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.756092 sshd[5265]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:10.755000 audit[5265]: USER_END pid=5265 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.759043 systemd[1]: sshd@14-10.0.0.79:22-10.0.0.1:45030.service: Deactivated successfully. Oct 29 00:36:10.759855 systemd[1]: session-15.scope: Deactivated successfully. Oct 29 00:36:10.755000 audit[5265]: CRED_DISP pid=5265 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.762269 systemd-logind[1211]: Session 15 logged out. Waiting for processes to exit. Oct 29 00:36:10.763093 systemd-logind[1211]: Removed session 15. Oct 29 00:36:10.764965 kernel: audit: type=1106 audit(1761698170.755:1451): pid=5265 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.765052 kernel: audit: type=1104 audit(1761698170.755:1452): pid=5265 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:10.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.79:22-10.0.0.1:45030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:11.578962 kubelet[1963]: E1029 00:36:11.578928 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:12.578809 kubelet[1963]: E1029 00:36:12.578730 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" podUID="87f3eb2e-83c4-4548-a495-c83ad5b81b76" Oct 29 00:36:12.578993 kubelet[1963]: E1029 00:36:12.578818 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" podUID="7113e3f3-c736-4216-8f92-dee9d64f1690" Oct 29 00:36:12.579824 kubelet[1963]: E1029 00:36:12.579789 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-5gpmj" podUID="ed11f017-3fc8-47ea-980c-c9d4b03a0875" Oct 29 00:36:14.579192 kubelet[1963]: E1029 00:36:14.579086 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" podUID="7ac47b9b-412b-4e0c-bee0-91b227127625" Oct 29 00:36:15.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.79:22-10.0.0.1:45032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:15.761230 systemd[1]: Started sshd@15-10.0.0.79:22-10.0.0.1:45032.service. Oct 29 00:36:15.762255 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 29 00:36:15.762311 kernel: audit: type=1130 audit(1761698175.759:1454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.79:22-10.0.0.1:45032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:15.814000 audit[5278]: USER_ACCT pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.816216 sshd[5278]: Accepted publickey for core from 10.0.0.1 port 45032 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:15.820461 kernel: audit: type=1101 audit(1761698175.814:1455): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.819000 audit[5278]: CRED_ACQ pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.821180 sshd[5278]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:15.824850 systemd-logind[1211]: New session 16 of user core. Oct 29 00:36:15.826165 kernel: audit: type=1103 audit(1761698175.819:1456): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.826235 kernel: audit: type=1006 audit(1761698175.819:1457): pid=5278 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 29 00:36:15.826259 kernel: audit: type=1300 audit(1761698175.819:1457): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcedc5070 a2=3 a3=1 items=0 ppid=1 pid=5278 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:15.819000 audit[5278]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcedc5070 a2=3 a3=1 items=0 ppid=1 pid=5278 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:15.825682 systemd[1]: Started session-16.scope. Oct 29 00:36:15.819000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:15.831194 kernel: audit: type=1327 audit(1761698175.819:1457): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:15.830000 audit[5278]: USER_START pid=5278 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.831000 audit[5286]: CRED_ACQ pid=5286 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.838814 kernel: audit: type=1105 audit(1761698175.830:1458): pid=5278 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.839001 kernel: audit: type=1103 audit(1761698175.831:1459): pid=5286 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.962284 sshd[5278]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:15.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.79:22-10.0.0.1:45044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:15.966282 systemd[1]: Started sshd@16-10.0.0.79:22-10.0.0.1:45044.service. Oct 29 00:36:15.968299 systemd[1]: sshd@15-10.0.0.79:22-10.0.0.1:45032.service: Deactivated successfully. Oct 29 00:36:15.969038 systemd[1]: session-16.scope: Deactivated successfully. Oct 29 00:36:15.969566 systemd-logind[1211]: Session 16 logged out. Waiting for processes to exit. Oct 29 00:36:15.970339 systemd-logind[1211]: Removed session 16. Oct 29 00:36:15.965000 audit[5278]: USER_END pid=5278 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.974388 kernel: audit: type=1130 audit(1761698175.964:1460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.79:22-10.0.0.1:45044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:15.974485 kernel: audit: type=1106 audit(1761698175.965:1461): pid=5278 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.965000 audit[5278]: CRED_DISP pid=5278 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:15.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.79:22-10.0.0.1:45032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:16.014000 audit[5297]: USER_ACCT pid=5297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.016167 sshd[5297]: Accepted publickey for core from 10.0.0.1 port 45044 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:16.019000 audit[5297]: CRED_ACQ pid=5297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.019000 audit[5297]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb3b1f40 a2=3 a3=1 items=0 ppid=1 pid=5297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:16.019000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:16.021151 sshd[5297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:16.025155 systemd-logind[1211]: New session 17 of user core. Oct 29 00:36:16.026133 systemd[1]: Started session-17.scope. Oct 29 00:36:16.029000 audit[5297]: USER_START pid=5297 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.031000 audit[5300]: CRED_ACQ pid=5300 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.300621 sshd[5297]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:16.300000 audit[5297]: USER_END pid=5297 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.300000 audit[5297]: CRED_DISP pid=5297 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.304390 systemd[1]: Started sshd@17-10.0.0.79:22-10.0.0.1:45058.service. Oct 29 00:36:16.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.79:22-10.0.0.1:45058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:16.311276 systemd[1]: sshd@16-10.0.0.79:22-10.0.0.1:45044.service: Deactivated successfully. Oct 29 00:36:16.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.79:22-10.0.0.1:45044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:16.312090 systemd[1]: session-17.scope: Deactivated successfully. Oct 29 00:36:16.313014 systemd-logind[1211]: Session 17 logged out. Waiting for processes to exit. Oct 29 00:36:16.313905 systemd-logind[1211]: Removed session 17. Oct 29 00:36:16.354000 audit[5309]: USER_ACCT pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.356124 sshd[5309]: Accepted publickey for core from 10.0.0.1 port 45058 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:16.355000 audit[5309]: CRED_ACQ pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.355000 audit[5309]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9372d40 a2=3 a3=1 items=0 ppid=1 pid=5309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:16.355000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:16.357425 sshd[5309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:16.361059 systemd-logind[1211]: New session 18 of user core. Oct 29 00:36:16.361899 systemd[1]: Started session-18.scope. Oct 29 00:36:16.364000 audit[5309]: USER_START pid=5309 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.365000 audit[5312]: CRED_ACQ pid=5312 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:16.579645 kubelet[1963]: E1029 00:36:16.579530 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:36:17.011000 audit[5325]: NETFILTER_CFG table=filter:131 family=2 entries=26 op=nft_register_rule pid=5325 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:17.011000 audit[5325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=fffff53efa30 a2=0 a3=1 items=0 ppid=2118 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.011000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:17.022679 sshd[5309]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:17.018000 audit[5325]: NETFILTER_CFG table=nat:132 family=2 entries=20 op=nft_register_rule pid=5325 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:17.022000 audit[5309]: USER_END pid=5309 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.023000 audit[5309]: CRED_DISP pid=5309 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.026193 systemd[1]: Started sshd@18-10.0.0.79:22-10.0.0.1:45064.service. Oct 29 00:36:17.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.79:22-10.0.0.1:45064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.026745 systemd[1]: sshd@17-10.0.0.79:22-10.0.0.1:45058.service: Deactivated successfully. Oct 29 00:36:17.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.79:22-10.0.0.1:45058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.027576 systemd[1]: session-18.scope: Deactivated successfully. Oct 29 00:36:17.018000 audit[5325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff53efa30 a2=0 a3=1 items=0 ppid=2118 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.018000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:17.034698 systemd-logind[1211]: Session 18 logged out. Waiting for processes to exit. Oct 29 00:36:17.040500 systemd-logind[1211]: Removed session 18. Oct 29 00:36:17.047000 audit[5331]: NETFILTER_CFG table=filter:133 family=2 entries=38 op=nft_register_rule pid=5331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:17.047000 audit[5331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffc12f3080 a2=0 a3=1 items=0 ppid=2118 pid=5331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.047000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:17.056000 audit[5331]: NETFILTER_CFG table=nat:134 family=2 entries=20 op=nft_register_rule pid=5331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:17.056000 audit[5331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffc12f3080 a2=0 a3=1 items=0 ppid=2118 pid=5331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.056000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:17.072000 audit[5327]: USER_ACCT pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.074392 sshd[5327]: Accepted publickey for core from 10.0.0.1 port 45064 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:17.073000 audit[5327]: CRED_ACQ pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.073000 audit[5327]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6113080 a2=3 a3=1 items=0 ppid=1 pid=5327 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.073000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:17.075770 sshd[5327]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:17.079482 systemd-logind[1211]: New session 19 of user core. Oct 29 00:36:17.080311 systemd[1]: Started session-19.scope. Oct 29 00:36:17.083000 audit[5327]: USER_START pid=5327 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.085000 audit[5332]: CRED_ACQ pid=5332 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.379523 sshd[5327]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:17.383720 systemd[1]: Started sshd@19-10.0.0.79:22-10.0.0.1:45078.service. Oct 29 00:36:17.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.79:22-10.0.0.1:45078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.382000 audit[5327]: USER_END pid=5327 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.382000 audit[5327]: CRED_DISP pid=5327 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.385786 systemd[1]: session-19.scope: Deactivated successfully. Oct 29 00:36:17.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.79:22-10.0.0.1:45064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.386741 systemd-logind[1211]: Session 19 logged out. Waiting for processes to exit. Oct 29 00:36:17.386942 systemd[1]: sshd@18-10.0.0.79:22-10.0.0.1:45064.service: Deactivated successfully. Oct 29 00:36:17.388008 systemd-logind[1211]: Removed session 19. Oct 29 00:36:17.430000 audit[5341]: USER_ACCT pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.432299 sshd[5341]: Accepted publickey for core from 10.0.0.1 port 45078 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:17.431000 audit[5341]: CRED_ACQ pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.431000 audit[5341]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfca0fc0 a2=3 a3=1 items=0 ppid=1 pid=5341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:17.431000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:17.433842 sshd[5341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:17.437965 systemd-logind[1211]: New session 20 of user core. Oct 29 00:36:17.438903 systemd[1]: Started session-20.scope. Oct 29 00:36:17.441000 audit[5341]: USER_START pid=5341 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.443000 audit[5344]: CRED_ACQ pid=5344 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.604197 sshd[5341]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:17.603000 audit[5341]: USER_END pid=5341 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.603000 audit[5341]: CRED_DISP pid=5341 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:17.606884 systemd[1]: sshd@19-10.0.0.79:22-10.0.0.1:45078.service: Deactivated successfully. Oct 29 00:36:17.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.79:22-10.0.0.1:45078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:17.607654 systemd[1]: session-20.scope: Deactivated successfully. Oct 29 00:36:17.608201 systemd-logind[1211]: Session 20 logged out. Waiting for processes to exit. Oct 29 00:36:17.609016 systemd-logind[1211]: Removed session 20. Oct 29 00:36:18.579265 env[1223]: time="2025-10-29T00:36:18.579213983Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 29 00:36:18.792583 env[1223]: time="2025-10-29T00:36:18.792385070Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:18.793549 env[1223]: time="2025-10-29T00:36:18.793419908Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 29 00:36:18.793728 kubelet[1963]: E1029 00:36:18.793678 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:36:18.794091 kubelet[1963]: E1029 00:36:18.793737 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 29 00:36:18.794091 kubelet[1963]: E1029 00:36:18.793848 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:dd4f729e9553404383e4306eaeb84892,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-6s8cv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fc8f5ddc4-zc89z_calico-system(2e5c48c1-469b-4872-9822-ab3e1e33fe5e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:18.795752 env[1223]: time="2025-10-29T00:36:18.795720784Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 29 00:36:19.008171 env[1223]: time="2025-10-29T00:36:19.008109998Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:19.009558 env[1223]: time="2025-10-29T00:36:19.009500756Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 29 00:36:19.009787 kubelet[1963]: E1029 00:36:19.009752 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:36:19.009915 kubelet[1963]: E1029 00:36:19.009893 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 29 00:36:19.010094 kubelet[1963]: E1029 00:36:19.010057 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-6s8cv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7fc8f5ddc4-zc89z_calico-system(2e5c48c1-469b-4872-9822-ab3e1e33fe5e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:19.011453 kubelet[1963]: E1029 00:36:19.011407 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fc8f5ddc4-zc89z" podUID="2e5c48c1-469b-4872-9822-ab3e1e33fe5e" Oct 29 00:36:20.584111 env[1223]: time="2025-10-29T00:36:20.583924747Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:36:20.811148 env[1223]: time="2025-10-29T00:36:20.811081251Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:20.820351 env[1223]: time="2025-10-29T00:36:20.820273487Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:36:20.820580 kubelet[1963]: E1029 00:36:20.820532 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:20.820947 kubelet[1963]: E1029 00:36:20.820591 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:20.820947 kubelet[1963]: E1029 00:36:20.820725 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-hr8ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-5984bf88b-b49cr_calico-apiserver(7f990c68-0bdc-4bb4-be36-8cb47e35962e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:20.822219 kubelet[1963]: E1029 00:36:20.822173 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" podUID="7f990c68-0bdc-4bb4-be36-8cb47e35962e" Oct 29 00:36:21.578889 kubelet[1963]: E1029 00:36:21.578851 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:22.544479 kernel: kauditd_printk_skb: 57 callbacks suppressed Oct 29 00:36:22.544608 kernel: audit: type=1325 audit(1761698182.541:1503): table=filter:135 family=2 entries=26 op=nft_register_rule pid=5355 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:22.541000 audit[5355]: NETFILTER_CFG table=filter:135 family=2 entries=26 op=nft_register_rule pid=5355 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:22.541000 audit[5355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe5d4f160 a2=0 a3=1 items=0 ppid=2118 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:22.550943 kernel: audit: type=1300 audit(1761698182.541:1503): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe5d4f160 a2=0 a3=1 items=0 ppid=2118 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:22.541000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:22.553205 kernel: audit: type=1327 audit(1761698182.541:1503): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:22.557000 audit[5355]: NETFILTER_CFG table=nat:136 family=2 entries=104 op=nft_register_chain pid=5355 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:22.557000 audit[5355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffe5d4f160 a2=0 a3=1 items=0 ppid=2118 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:22.566277 kernel: audit: type=1325 audit(1761698182.557:1504): table=nat:136 family=2 entries=104 op=nft_register_chain pid=5355 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 29 00:36:22.566375 kernel: audit: type=1300 audit(1761698182.557:1504): arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffe5d4f160 a2=0 a3=1 items=0 ppid=2118 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:22.566414 kernel: audit: type=1327 audit(1761698182.557:1504): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:22.557000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 29 00:36:22.611717 systemd[1]: Started sshd@20-10.0.0.79:22-10.0.0.1:37270.service. Oct 29 00:36:22.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.79:22-10.0.0.1:37270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:22.615598 kernel: audit: type=1130 audit(1761698182.610:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.79:22-10.0.0.1:37270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:22.654000 audit[5357]: USER_ACCT pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.658691 sshd[5357]: Accepted publickey for core from 10.0.0.1 port 37270 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:22.660455 kernel: audit: type=1101 audit(1761698182.654:1506): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.659000 audit[5357]: CRED_ACQ pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.661611 sshd[5357]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:22.666949 kernel: audit: type=1103 audit(1761698182.659:1507): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.667029 kernel: audit: type=1006 audit(1761698182.659:1508): pid=5357 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 29 00:36:22.659000 audit[5357]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce55eaa0 a2=3 a3=1 items=0 ppid=1 pid=5357 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:22.659000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:22.666644 systemd[1]: Started session-21.scope. Oct 29 00:36:22.667523 systemd-logind[1211]: New session 21 of user core. Oct 29 00:36:22.670000 audit[5357]: USER_START pid=5357 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.671000 audit[5359]: CRED_ACQ pid=5359 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.802188 sshd[5357]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:22.802000 audit[5357]: USER_END pid=5357 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.803000 audit[5357]: CRED_DISP pid=5357 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:22.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.79:22-10.0.0.1:37270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:22.806273 systemd[1]: sshd@20-10.0.0.79:22-10.0.0.1:37270.service: Deactivated successfully. Oct 29 00:36:22.806487 systemd-logind[1211]: Session 21 logged out. Waiting for processes to exit. Oct 29 00:36:22.807185 systemd[1]: session-21.scope: Deactivated successfully. Oct 29 00:36:22.808183 systemd-logind[1211]: Removed session 21. Oct 29 00:36:26.580128 env[1223]: time="2025-10-29T00:36:26.579893093Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 29 00:36:26.786506 env[1223]: time="2025-10-29T00:36:26.786420804Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:26.787936 env[1223]: time="2025-10-29T00:36:26.787881130Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 29 00:36:26.788158 kubelet[1963]: E1029 00:36:26.788114 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:36:26.788418 kubelet[1963]: E1029 00:36:26.788170 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 29 00:36:26.788564 env[1223]: time="2025-10-29T00:36:26.788530052Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:36:26.789026 kubelet[1963]: E1029 00:36:26.788869 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5q959,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-5gpmj_calico-system(ed11f017-3fc8-47ea-980c-c9d4b03a0875): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:26.790375 kubelet[1963]: E1029 00:36:26.790332 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-5gpmj" podUID="ed11f017-3fc8-47ea-980c-c9d4b03a0875" Oct 29 00:36:26.984986 env[1223]: time="2025-10-29T00:36:26.984932004Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:26.985879 env[1223]: time="2025-10-29T00:36:26.985818448Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:36:26.986074 kubelet[1963]: E1029 00:36:26.986036 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:26.986153 kubelet[1963]: E1029 00:36:26.986091 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:26.986342 kubelet[1963]: E1029 00:36:26.986294 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-xkgbm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-68bf75d69f-hk7dm_calico-apiserver(87f3eb2e-83c4-4548-a495-c83ad5b81b76): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:26.986720 env[1223]: time="2025-10-29T00:36:26.986695251Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 29 00:36:26.988113 kubelet[1963]: E1029 00:36:26.988078 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" podUID="87f3eb2e-83c4-4548-a495-c83ad5b81b76" Oct 29 00:36:27.197976 env[1223]: time="2025-10-29T00:36:27.197921984Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:27.211742 env[1223]: time="2025-10-29T00:36:27.211673365Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 29 00:36:27.212138 kubelet[1963]: E1029 00:36:27.212096 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:36:27.212226 kubelet[1963]: E1029 00:36:27.212154 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 29 00:36:27.212334 kubelet[1963]: E1029 00:36:27.212287 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-r6gd7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-64b9647db-jnrkc_calico-system(7113e3f3-c736-4216-8f92-dee9d64f1690): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:27.214441 kubelet[1963]: E1029 00:36:27.214384 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" podUID="7113e3f3-c736-4216-8f92-dee9d64f1690" Oct 29 00:36:27.578537 kubelet[1963]: E1029 00:36:27.578494 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:27.579150 kubelet[1963]: E1029 00:36:27.579125 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:27.580016 env[1223]: time="2025-10-29T00:36:27.579973248Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 29 00:36:27.789752 env[1223]: time="2025-10-29T00:36:27.789679624Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:27.790816 env[1223]: time="2025-10-29T00:36:27.790754069Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 29 00:36:27.791015 kubelet[1963]: E1029 00:36:27.790978 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:27.791223 kubelet[1963]: E1029 00:36:27.791030 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 29 00:36:27.791223 kubelet[1963]: E1029 00:36:27.791152 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-glzvq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-68bf75d69f-vwvqn_calico-apiserver(7ac47b9b-412b-4e0c-bee0-91b227127625): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:27.792348 kubelet[1963]: E1029 00:36:27.792309 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" podUID="7ac47b9b-412b-4e0c-bee0-91b227127625" Oct 29 00:36:27.806954 systemd[1]: Started sshd@21-10.0.0.79:22-10.0.0.1:37278.service. Oct 29 00:36:27.812156 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 29 00:36:27.812256 kernel: audit: type=1130 audit(1761698187.805:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.79:22-10.0.0.1:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:27.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.79:22-10.0.0.1:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:27.849000 audit[5372]: USER_ACCT pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.852028 sshd[5372]: Accepted publickey for core from 10.0.0.1 port 37278 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:27.852534 sshd[5372]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:27.850000 audit[5372]: CRED_ACQ pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.858203 kernel: audit: type=1101 audit(1761698187.849:1515): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.858278 kernel: audit: type=1103 audit(1761698187.850:1516): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.860798 kernel: audit: type=1006 audit(1761698187.850:1517): pid=5372 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 29 00:36:27.850000 audit[5372]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1b28160 a2=3 a3=1 items=0 ppid=1 pid=5372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:27.864446 kernel: audit: type=1300 audit(1761698187.850:1517): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1b28160 a2=3 a3=1 items=0 ppid=1 pid=5372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:27.850000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:27.866750 kernel: audit: type=1327 audit(1761698187.850:1517): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:27.866961 systemd-logind[1211]: New session 22 of user core. Oct 29 00:36:27.867894 systemd[1]: Started session-22.scope. Oct 29 00:36:27.870000 audit[5372]: USER_START pid=5372 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.870000 audit[5374]: CRED_ACQ pid=5374 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.876481 kernel: audit: type=1105 audit(1761698187.870:1518): pid=5372 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.884482 kernel: audit: type=1103 audit(1761698187.870:1519): pid=5374 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.983732 sshd[5372]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:27.983000 audit[5372]: USER_END pid=5372 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.988845 systemd[1]: sshd@21-10.0.0.79:22-10.0.0.1:37278.service: Deactivated successfully. Oct 29 00:36:27.983000 audit[5372]: CRED_DISP pid=5372 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.989797 systemd[1]: session-22.scope: Deactivated successfully. Oct 29 00:36:27.992954 kernel: audit: type=1106 audit(1761698187.983:1520): pid=5372 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.993051 kernel: audit: type=1104 audit(1761698187.983:1521): pid=5372 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:27.990472 systemd-logind[1211]: Session 22 logged out. Waiting for processes to exit. Oct 29 00:36:27.991134 systemd-logind[1211]: Removed session 22. Oct 29 00:36:27.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.79:22-10.0.0.1:37278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:29.579154 kubelet[1963]: E1029 00:36:29.579103 1963 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 29 00:36:29.579967 env[1223]: time="2025-10-29T00:36:29.579926923Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 29 00:36:29.797726 env[1223]: time="2025-10-29T00:36:29.797660758Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:29.810592 env[1223]: time="2025-10-29T00:36:29.810522030Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 29 00:36:29.810824 kubelet[1963]: E1029 00:36:29.810785 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:36:29.810871 kubelet[1963]: E1029 00:36:29.810837 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 29 00:36:29.811021 kubelet[1963]: E1029 00:36:29.810973 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b6ttw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-ztr7c_calico-system(8d7ebf96-f131-40c2-9801-3bcd40c3dda3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:29.812990 env[1223]: time="2025-10-29T00:36:29.812949884Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 29 00:36:30.046000 env[1223]: time="2025-10-29T00:36:30.045923671Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 29 00:36:30.046928 env[1223]: time="2025-10-29T00:36:30.046880557Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 29 00:36:30.047128 kubelet[1963]: E1029 00:36:30.047083 1963 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:36:30.047199 kubelet[1963]: E1029 00:36:30.047148 1963 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 29 00:36:30.047315 kubelet[1963]: E1029 00:36:30.047265 1963 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b6ttw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-ztr7c_calico-system(8d7ebf96-f131-40c2-9801-3bcd40c3dda3): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 29 00:36:30.050263 kubelet[1963]: E1029 00:36:30.050155 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-ztr7c" podUID="8d7ebf96-f131-40c2-9801-3bcd40c3dda3" Oct 29 00:36:32.988903 systemd[1]: Started sshd@22-10.0.0.79:22-10.0.0.1:57590.service. Oct 29 00:36:32.991459 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 29 00:36:32.991540 kernel: audit: type=1130 audit(1761698192.987:1523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.79:22-10.0.0.1:57590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:32.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.79:22-10.0.0.1:57590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:33.039000 audit[5388]: USER_ACCT pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.041320 sshd[5388]: Accepted publickey for core from 10.0.0.1 port 57590 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:33.042575 sshd[5388]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:33.040000 audit[5388]: CRED_ACQ pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.046318 systemd-logind[1211]: New session 23 of user core. Oct 29 00:36:33.047226 systemd[1]: Started session-23.scope. Oct 29 00:36:33.047997 kernel: audit: type=1101 audit(1761698193.039:1524): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.048071 kernel: audit: type=1103 audit(1761698193.040:1525): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.048098 kernel: audit: type=1006 audit(1761698193.040:1526): pid=5388 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 29 00:36:33.040000 audit[5388]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0b126a0 a2=3 a3=1 items=0 ppid=1 pid=5388 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:33.053778 kernel: audit: type=1300 audit(1761698193.040:1526): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0b126a0 a2=3 a3=1 items=0 ppid=1 pid=5388 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:33.040000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:33.057718 kernel: audit: type=1327 audit(1761698193.040:1526): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:33.050000 audit[5388]: USER_START pid=5388 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.067524 kernel: audit: type=1105 audit(1761698193.050:1527): pid=5388 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.067618 kernel: audit: type=1103 audit(1761698193.052:1528): pid=5390 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.052000 audit[5390]: CRED_ACQ pid=5390 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.167736 sshd[5388]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:33.167000 audit[5388]: USER_END pid=5388 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.170707 systemd[1]: sshd@22-10.0.0.79:22-10.0.0.1:57590.service: Deactivated successfully. Oct 29 00:36:33.171506 systemd[1]: session-23.scope: Deactivated successfully. Oct 29 00:36:33.172173 systemd-logind[1211]: Session 23 logged out. Waiting for processes to exit. Oct 29 00:36:33.172810 systemd-logind[1211]: Removed session 23. Oct 29 00:36:33.167000 audit[5388]: CRED_DISP pid=5388 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.176051 kernel: audit: type=1106 audit(1761698193.167:1529): pid=5388 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.176111 kernel: audit: type=1104 audit(1761698193.167:1530): pid=5388 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:33.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.79:22-10.0.0.1:57590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:33.580806 kubelet[1963]: E1029 00:36:33.580615 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7fc8f5ddc4-zc89z" podUID="2e5c48c1-469b-4872-9822-ab3e1e33fe5e" Oct 29 00:36:34.770424 systemd[1]: run-containerd-runc-k8s.io-9cd5240c232444013782d6c88280963034add517fa7e77e777570a2b1beb1195-runc.en8J3A.mount: Deactivated successfully. Oct 29 00:36:35.580107 kubelet[1963]: E1029 00:36:35.580058 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-5984bf88b-b49cr" podUID="7f990c68-0bdc-4bb4-be36-8cb47e35962e" Oct 29 00:36:37.581024 kubelet[1963]: E1029 00:36:37.580975 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-64b9647db-jnrkc" podUID="7113e3f3-c736-4216-8f92-dee9d64f1690" Oct 29 00:36:38.180081 systemd[1]: Started sshd@23-10.0.0.79:22-10.0.0.1:57606.service. Oct 29 00:36:38.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.79:22-10.0.0.1:57606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:38.186723 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 29 00:36:38.186796 kernel: audit: type=1130 audit(1761698198.180:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.79:22-10.0.0.1:57606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:38.250000 audit[5423]: USER_ACCT pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.252593 sshd[5423]: Accepted publickey for core from 10.0.0.1 port 57606 ssh2: RSA SHA256:pYB66aLjdXbBwWKgZ+jLlT0UVkYzJYHWsaqS3PI+gyo Oct 29 00:36:38.254142 sshd[5423]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 29 00:36:38.252000 audit[5423]: CRED_ACQ pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.258012 systemd-logind[1211]: New session 24 of user core. Oct 29 00:36:38.259383 kernel: audit: type=1101 audit(1761698198.250:1533): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.259423 kernel: audit: type=1103 audit(1761698198.252:1534): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.259498 kernel: audit: type=1006 audit(1761698198.252:1535): pid=5423 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 29 00:36:38.258853 systemd[1]: Started session-24.scope. Oct 29 00:36:38.252000 audit[5423]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc55e10a0 a2=3 a3=1 items=0 ppid=1 pid=5423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:38.264964 kernel: audit: type=1300 audit(1761698198.252:1535): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc55e10a0 a2=3 a3=1 items=0 ppid=1 pid=5423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 29 00:36:38.265172 kernel: audit: type=1327 audit(1761698198.252:1535): proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:38.252000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 29 00:36:38.266244 kernel: audit: type=1105 audit(1761698198.260:1536): pid=5423 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.260000 audit[5423]: USER_START pid=5423 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.262000 audit[5425]: CRED_ACQ pid=5425 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.273031 kernel: audit: type=1103 audit(1761698198.262:1537): pid=5425 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.398979 sshd[5423]: pam_unix(sshd:session): session closed for user core Oct 29 00:36:38.398000 audit[5423]: USER_END pid=5423 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.401907 systemd-logind[1211]: Session 24 logged out. Waiting for processes to exit. Oct 29 00:36:38.402143 systemd[1]: sshd@23-10.0.0.79:22-10.0.0.1:57606.service: Deactivated successfully. Oct 29 00:36:38.403264 systemd[1]: session-24.scope: Deactivated successfully. Oct 29 00:36:38.404013 systemd-logind[1211]: Removed session 24. Oct 29 00:36:38.398000 audit[5423]: CRED_DISP pid=5423 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.407358 kernel: audit: type=1106 audit(1761698198.398:1538): pid=5423 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.407405 kernel: audit: type=1104 audit(1761698198.398:1539): pid=5423 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 29 00:36:38.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.79:22-10.0.0.1:57606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 29 00:36:38.578830 kubelet[1963]: E1029 00:36:38.578789 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-hk7dm" podUID="87f3eb2e-83c4-4548-a495-c83ad5b81b76" Oct 29 00:36:39.579305 kubelet[1963]: E1029 00:36:39.579265 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-68bf75d69f-vwvqn" podUID="7ac47b9b-412b-4e0c-bee0-91b227127625" Oct 29 00:36:39.579665 kubelet[1963]: E1029 00:36:39.579384 1963 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-5gpmj" podUID="ed11f017-3fc8-47ea-980c-c9d4b03a0875"