Oct 31 01:18:38.121415 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Thu Oct 30 23:32:41 -00 2025 Oct 31 01:18:38.121438 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=7605c743a37b990723033788c91d5dcda748347858877b1088098370c2a7e4d3 Oct 31 01:18:38.121448 kernel: BIOS-provided physical RAM map: Oct 31 01:18:38.121463 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 31 01:18:38.121469 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Oct 31 01:18:38.121475 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Oct 31 01:18:38.121481 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Oct 31 01:18:38.121488 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Oct 31 01:18:38.121493 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Oct 31 01:18:38.121501 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Oct 31 01:18:38.121506 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Oct 31 01:18:38.121512 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Oct 31 01:18:38.121517 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Oct 31 01:18:38.121523 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Oct 31 01:18:38.121530 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Oct 31 01:18:38.121538 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Oct 31 01:18:38.121544 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Oct 31 01:18:38.121550 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Oct 31 01:18:38.121559 kernel: NX (Execute Disable) protection: active Oct 31 01:18:38.121565 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Oct 31 01:18:38.121571 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Oct 31 01:18:38.121577 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Oct 31 01:18:38.121583 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Oct 31 01:18:38.121588 kernel: extended physical RAM map: Oct 31 01:18:38.121594 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 31 01:18:38.121602 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Oct 31 01:18:38.121608 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Oct 31 01:18:38.121614 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Oct 31 01:18:38.121620 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Oct 31 01:18:38.121626 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Oct 31 01:18:38.121632 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Oct 31 01:18:38.121638 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b438017] usable Oct 31 01:18:38.121644 kernel: reserve setup_data: [mem 0x000000009b438018-0x000000009b474e57] usable Oct 31 01:18:38.121650 kernel: reserve setup_data: [mem 0x000000009b474e58-0x000000009b475017] usable Oct 31 01:18:38.121655 kernel: reserve setup_data: [mem 0x000000009b475018-0x000000009b47ec57] usable Oct 31 01:18:38.121661 kernel: reserve setup_data: [mem 0x000000009b47ec58-0x000000009c8eefff] usable Oct 31 01:18:38.121669 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Oct 31 01:18:38.121675 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Oct 31 01:18:38.121681 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Oct 31 01:18:38.121687 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Oct 31 01:18:38.121696 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Oct 31 01:18:38.121702 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Oct 31 01:18:38.121708 kernel: reserve setup_data: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Oct 31 01:18:38.121716 kernel: efi: EFI v2.70 by EDK II Oct 31 01:18:38.121723 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b673018 RNG=0x9cb73018 Oct 31 01:18:38.121729 kernel: random: crng init done Oct 31 01:18:38.121736 kernel: SMBIOS 2.8 present. Oct 31 01:18:38.121742 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Oct 31 01:18:38.121748 kernel: Hypervisor detected: KVM Oct 31 01:18:38.121755 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 31 01:18:38.121778 kernel: kvm-clock: cpu 0, msr 5a1a0001, primary cpu clock Oct 31 01:18:38.121785 kernel: kvm-clock: using sched offset of 5572974078 cycles Oct 31 01:18:38.121797 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 31 01:18:38.121803 kernel: tsc: Detected 2794.748 MHz processor Oct 31 01:18:38.121810 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 31 01:18:38.121817 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 31 01:18:38.121824 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Oct 31 01:18:38.121830 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 31 01:18:38.121837 kernel: Using GB pages for direct mapping Oct 31 01:18:38.121844 kernel: Secure boot disabled Oct 31 01:18:38.121850 kernel: ACPI: Early table checksum verification disabled Oct 31 01:18:38.121859 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Oct 31 01:18:38.121865 kernel: ACPI: XSDT 0x000000009CB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Oct 31 01:18:38.121872 kernel: ACPI: FACP 0x000000009CB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 01:18:38.121879 kernel: ACPI: DSDT 0x000000009CB7A000 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 01:18:38.121888 kernel: ACPI: FACS 0x000000009CBDD000 000040 Oct 31 01:18:38.121895 kernel: ACPI: APIC 0x000000009CB78000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 01:18:38.121901 kernel: ACPI: HPET 0x000000009CB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 01:18:38.121911 kernel: ACPI: MCFG 0x000000009CB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 01:18:38.121917 kernel: ACPI: WAET 0x000000009CB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 01:18:38.121926 kernel: ACPI: BGRT 0x000000009CB74000 000038 (v01 INTEL EDK2 00000002 01000013) Oct 31 01:18:38.121932 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb79000-0x9cb790f3] Oct 31 01:18:38.121939 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7a000-0x9cb7c1b9] Oct 31 01:18:38.121946 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Oct 31 01:18:38.121952 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb78000-0x9cb7808f] Oct 31 01:18:38.121959 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb77000-0x9cb77037] Oct 31 01:18:38.121965 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cb76000-0x9cb7603b] Oct 31 01:18:38.121972 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb75000-0x9cb75027] Oct 31 01:18:38.121978 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb74000-0x9cb74037] Oct 31 01:18:38.121986 kernel: No NUMA configuration found Oct 31 01:18:38.121993 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Oct 31 01:18:38.121999 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Oct 31 01:18:38.122006 kernel: Zone ranges: Oct 31 01:18:38.122013 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 31 01:18:38.122019 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Oct 31 01:18:38.122026 kernel: Normal empty Oct 31 01:18:38.122032 kernel: Movable zone start for each node Oct 31 01:18:38.122039 kernel: Early memory node ranges Oct 31 01:18:38.122047 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 31 01:18:38.122053 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Oct 31 01:18:38.122060 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Oct 31 01:18:38.122066 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Oct 31 01:18:38.122073 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Oct 31 01:18:38.122079 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Oct 31 01:18:38.122086 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Oct 31 01:18:38.122092 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 31 01:18:38.122099 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 31 01:18:38.122106 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Oct 31 01:18:38.122114 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 31 01:18:38.122120 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Oct 31 01:18:38.122127 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Oct 31 01:18:38.122134 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Oct 31 01:18:38.122140 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 31 01:18:38.122147 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 31 01:18:38.122153 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 31 01:18:38.122160 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 31 01:18:38.122167 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 31 01:18:38.122175 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 31 01:18:38.122181 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 31 01:18:38.122188 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 31 01:18:38.122197 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 31 01:18:38.122206 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 31 01:18:38.122213 kernel: TSC deadline timer available Oct 31 01:18:38.122219 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 31 01:18:38.122226 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 31 01:18:38.122232 kernel: kvm-guest: setup PV sched yield Oct 31 01:18:38.122241 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Oct 31 01:18:38.122247 kernel: Booting paravirtualized kernel on KVM Oct 31 01:18:38.122259 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 31 01:18:38.122268 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 31 01:18:38.122275 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Oct 31 01:18:38.122282 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Oct 31 01:18:38.122288 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 31 01:18:38.122295 kernel: kvm-guest: setup async PF for cpu 0 Oct 31 01:18:38.122302 kernel: kvm-guest: stealtime: cpu 0, msr 9b21c0c0 Oct 31 01:18:38.122309 kernel: kvm-guest: PV spinlocks enabled Oct 31 01:18:38.122316 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 31 01:18:38.122323 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Oct 31 01:18:38.122332 kernel: Policy zone: DMA32 Oct 31 01:18:38.122340 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=7605c743a37b990723033788c91d5dcda748347858877b1088098370c2a7e4d3 Oct 31 01:18:38.122347 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 31 01:18:38.122354 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 31 01:18:38.122363 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 31 01:18:38.122370 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 31 01:18:38.122377 kernel: Memory: 2397432K/2567000K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47496K init, 4084K bss, 169308K reserved, 0K cma-reserved) Oct 31 01:18:38.122384 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 31 01:18:38.122391 kernel: ftrace: allocating 34614 entries in 136 pages Oct 31 01:18:38.122398 kernel: ftrace: allocated 136 pages with 2 groups Oct 31 01:18:38.122405 kernel: rcu: Hierarchical RCU implementation. Oct 31 01:18:38.122412 kernel: rcu: RCU event tracing is enabled. Oct 31 01:18:38.122420 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 31 01:18:38.122428 kernel: Rude variant of Tasks RCU enabled. Oct 31 01:18:38.122435 kernel: Tracing variant of Tasks RCU enabled. Oct 31 01:18:38.122442 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 31 01:18:38.122449 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 31 01:18:38.122464 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 31 01:18:38.122470 kernel: Console: colour dummy device 80x25 Oct 31 01:18:38.122478 kernel: printk: console [ttyS0] enabled Oct 31 01:18:38.122485 kernel: ACPI: Core revision 20210730 Oct 31 01:18:38.122492 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 31 01:18:38.122500 kernel: APIC: Switch to symmetric I/O mode setup Oct 31 01:18:38.122507 kernel: x2apic enabled Oct 31 01:18:38.122514 kernel: Switched APIC routing to physical x2apic. Oct 31 01:18:38.122521 kernel: kvm-guest: setup PV IPIs Oct 31 01:18:38.122528 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 31 01:18:38.122535 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 31 01:18:38.122542 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 31 01:18:38.122549 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 31 01:18:38.122559 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 31 01:18:38.122567 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 31 01:18:38.122574 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 31 01:18:38.122581 kernel: Spectre V2 : Mitigation: Retpolines Oct 31 01:18:38.122588 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Oct 31 01:18:38.122595 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 31 01:18:38.122602 kernel: active return thunk: retbleed_return_thunk Oct 31 01:18:38.122609 kernel: RETBleed: Mitigation: untrained return thunk Oct 31 01:18:38.122619 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 31 01:18:38.122626 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 31 01:18:38.122634 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 31 01:18:38.122641 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 31 01:18:38.122648 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 31 01:18:38.122655 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 31 01:18:38.122662 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 31 01:18:38.122669 kernel: Freeing SMP alternatives memory: 32K Oct 31 01:18:38.122676 kernel: pid_max: default: 32768 minimum: 301 Oct 31 01:18:38.122683 kernel: LSM: Security Framework initializing Oct 31 01:18:38.122690 kernel: SELinux: Initializing. Oct 31 01:18:38.122698 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 31 01:18:38.122705 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 31 01:18:38.122712 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 31 01:18:38.122719 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 31 01:18:38.122726 kernel: ... version: 0 Oct 31 01:18:38.122733 kernel: ... bit width: 48 Oct 31 01:18:38.122740 kernel: ... generic registers: 6 Oct 31 01:18:38.122747 kernel: ... value mask: 0000ffffffffffff Oct 31 01:18:38.122754 kernel: ... max period: 00007fffffffffff Oct 31 01:18:38.122772 kernel: ... fixed-purpose events: 0 Oct 31 01:18:38.122779 kernel: ... event mask: 000000000000003f Oct 31 01:18:38.122786 kernel: signal: max sigframe size: 1776 Oct 31 01:18:38.122793 kernel: rcu: Hierarchical SRCU implementation. Oct 31 01:18:38.122800 kernel: smp: Bringing up secondary CPUs ... Oct 31 01:18:38.122807 kernel: x86: Booting SMP configuration: Oct 31 01:18:38.122814 kernel: .... node #0, CPUs: #1 Oct 31 01:18:38.122821 kernel: kvm-clock: cpu 1, msr 5a1a0041, secondary cpu clock Oct 31 01:18:38.122828 kernel: kvm-guest: setup async PF for cpu 1 Oct 31 01:18:38.122836 kernel: kvm-guest: stealtime: cpu 1, msr 9b29c0c0 Oct 31 01:18:38.122843 kernel: #2 Oct 31 01:18:38.122850 kernel: kvm-clock: cpu 2, msr 5a1a0081, secondary cpu clock Oct 31 01:18:38.122857 kernel: kvm-guest: setup async PF for cpu 2 Oct 31 01:18:38.122864 kernel: kvm-guest: stealtime: cpu 2, msr 9b31c0c0 Oct 31 01:18:38.122871 kernel: #3 Oct 31 01:18:38.122877 kernel: kvm-clock: cpu 3, msr 5a1a00c1, secondary cpu clock Oct 31 01:18:38.122884 kernel: kvm-guest: setup async PF for cpu 3 Oct 31 01:18:38.122891 kernel: kvm-guest: stealtime: cpu 3, msr 9b39c0c0 Oct 31 01:18:38.122902 kernel: smp: Brought up 1 node, 4 CPUs Oct 31 01:18:38.122909 kernel: smpboot: Max logical packages: 1 Oct 31 01:18:38.122916 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 31 01:18:38.122923 kernel: devtmpfs: initialized Oct 31 01:18:38.122930 kernel: x86/mm: Memory block size: 128MB Oct 31 01:18:38.122937 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Oct 31 01:18:38.122944 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Oct 31 01:18:38.122951 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Oct 31 01:18:38.122958 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Oct 31 01:18:38.122966 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Oct 31 01:18:38.122973 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 31 01:18:38.122980 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 31 01:18:38.122987 kernel: pinctrl core: initialized pinctrl subsystem Oct 31 01:18:38.122994 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 31 01:18:38.123001 kernel: audit: initializing netlink subsys (disabled) Oct 31 01:18:38.123008 kernel: audit: type=2000 audit(1761873516.952:1): state=initialized audit_enabled=0 res=1 Oct 31 01:18:38.123015 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 31 01:18:38.123022 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 31 01:18:38.123030 kernel: cpuidle: using governor menu Oct 31 01:18:38.123037 kernel: ACPI: bus type PCI registered Oct 31 01:18:38.123044 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 31 01:18:38.123051 kernel: dca service started, version 1.12.1 Oct 31 01:18:38.123058 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Oct 31 01:18:38.123065 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Oct 31 01:18:38.123072 kernel: PCI: Using configuration type 1 for base access Oct 31 01:18:38.123079 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 31 01:18:38.123089 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 31 01:18:38.123097 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 31 01:18:38.123104 kernel: ACPI: Added _OSI(Module Device) Oct 31 01:18:38.123111 kernel: ACPI: Added _OSI(Processor Device) Oct 31 01:18:38.123118 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 31 01:18:38.123125 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 31 01:18:38.123132 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 31 01:18:38.123138 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 31 01:18:38.123146 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 31 01:18:38.123152 kernel: ACPI: Interpreter enabled Oct 31 01:18:38.123160 kernel: ACPI: PM: (supports S0 S3 S5) Oct 31 01:18:38.123167 kernel: ACPI: Using IOAPIC for interrupt routing Oct 31 01:18:38.123174 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 31 01:18:38.123181 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Oct 31 01:18:38.123188 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 31 01:18:38.123324 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 31 01:18:38.123403 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Oct 31 01:18:38.123490 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Oct 31 01:18:38.123502 kernel: PCI host bridge to bus 0000:00 Oct 31 01:18:38.123593 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 31 01:18:38.123666 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 31 01:18:38.123737 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 31 01:18:38.123818 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Oct 31 01:18:38.123887 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Oct 31 01:18:38.123955 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window] Oct 31 01:18:38.124026 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 31 01:18:38.124132 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Oct 31 01:18:38.124338 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Oct 31 01:18:38.124418 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Oct 31 01:18:38.124506 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xc1044000-0xc1044fff] Oct 31 01:18:38.124582 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Oct 31 01:18:38.124661 kernel: pci 0000:00:01.0: BAR 0: assigned to efifb Oct 31 01:18:38.124737 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 31 01:18:38.124844 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Oct 31 01:18:38.124924 kernel: pci 0000:00:02.0: reg 0x10: [io 0x6100-0x611f] Oct 31 01:18:38.125003 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xc1043000-0xc1043fff] Oct 31 01:18:38.125078 kernel: pci 0000:00:02.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Oct 31 01:18:38.125165 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Oct 31 01:18:38.125245 kernel: pci 0000:00:03.0: reg 0x10: [io 0x6000-0x607f] Oct 31 01:18:38.125320 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Oct 31 01:18:38.125394 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Oct 31 01:18:38.125495 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Oct 31 01:18:38.125572 kernel: pci 0000:00:04.0: reg 0x10: [io 0x60e0-0x60ff] Oct 31 01:18:38.125646 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Oct 31 01:18:38.125721 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Oct 31 01:18:38.125818 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Oct 31 01:18:38.125912 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Oct 31 01:18:38.125992 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Oct 31 01:18:38.126081 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Oct 31 01:18:38.126158 kernel: pci 0000:00:1f.2: reg 0x20: [io 0x60c0-0x60df] Oct 31 01:18:38.126232 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xc1040000-0xc1040fff] Oct 31 01:18:38.126316 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Oct 31 01:18:38.126397 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x6080-0x60bf] Oct 31 01:18:38.126407 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 31 01:18:38.126414 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 31 01:18:38.126422 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 31 01:18:38.126429 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 31 01:18:38.126436 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Oct 31 01:18:38.126442 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Oct 31 01:18:38.126449 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Oct 31 01:18:38.126474 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Oct 31 01:18:38.126481 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Oct 31 01:18:38.126488 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Oct 31 01:18:38.126495 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Oct 31 01:18:38.126502 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Oct 31 01:18:38.126510 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Oct 31 01:18:38.126516 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Oct 31 01:18:38.126526 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Oct 31 01:18:38.126533 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Oct 31 01:18:38.126545 kernel: iommu: Default domain type: Translated Oct 31 01:18:38.126553 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 31 01:18:38.126631 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Oct 31 01:18:38.126706 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 31 01:18:38.126796 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Oct 31 01:18:38.126806 kernel: vgaarb: loaded Oct 31 01:18:38.126813 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 31 01:18:38.126820 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 31 01:18:38.126830 kernel: PTP clock support registered Oct 31 01:18:38.126837 kernel: Registered efivars operations Oct 31 01:18:38.126843 kernel: PCI: Using ACPI for IRQ routing Oct 31 01:18:38.126850 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 31 01:18:38.126857 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Oct 31 01:18:38.126864 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Oct 31 01:18:38.126871 kernel: e820: reserve RAM buffer [mem 0x9b438018-0x9bffffff] Oct 31 01:18:38.126879 kernel: e820: reserve RAM buffer [mem 0x9b475018-0x9bffffff] Oct 31 01:18:38.126888 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Oct 31 01:18:38.126899 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Oct 31 01:18:38.126908 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 31 01:18:38.126918 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 31 01:18:38.126927 kernel: clocksource: Switched to clocksource kvm-clock Oct 31 01:18:38.126935 kernel: VFS: Disk quotas dquot_6.6.0 Oct 31 01:18:38.126943 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 31 01:18:38.126950 kernel: pnp: PnP ACPI init Oct 31 01:18:38.127074 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Oct 31 01:18:38.127088 kernel: pnp: PnP ACPI: found 6 devices Oct 31 01:18:38.127095 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 31 01:18:38.127102 kernel: NET: Registered PF_INET protocol family Oct 31 01:18:38.127110 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 31 01:18:38.127117 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 31 01:18:38.127124 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 31 01:18:38.127131 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 31 01:18:38.127138 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 31 01:18:38.127145 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 31 01:18:38.127153 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 31 01:18:38.127160 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 31 01:18:38.127167 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 31 01:18:38.127174 kernel: NET: Registered PF_XDP protocol family Oct 31 01:18:38.127252 kernel: pci 0000:00:04.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Oct 31 01:18:38.127328 kernel: pci 0000:00:04.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Oct 31 01:18:38.127396 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 31 01:18:38.127477 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 31 01:18:38.127550 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 31 01:18:38.127617 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Oct 31 01:18:38.127683 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Oct 31 01:18:38.127754 kernel: pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window] Oct 31 01:18:38.127775 kernel: PCI: CLS 0 bytes, default 64 Oct 31 01:18:38.127782 kernel: Initialise system trusted keyrings Oct 31 01:18:38.127789 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 31 01:18:38.127796 kernel: Key type asymmetric registered Oct 31 01:18:38.127803 kernel: Asymmetric key parser 'x509' registered Oct 31 01:18:38.127813 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 31 01:18:38.127820 kernel: io scheduler mq-deadline registered Oct 31 01:18:38.127837 kernel: io scheduler kyber registered Oct 31 01:18:38.127849 kernel: io scheduler bfq registered Oct 31 01:18:38.127856 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 31 01:18:38.127864 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Oct 31 01:18:38.127871 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Oct 31 01:18:38.127879 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Oct 31 01:18:38.127886 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 31 01:18:38.127895 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 31 01:18:38.127902 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 31 01:18:38.127909 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 31 01:18:38.127917 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 31 01:18:38.128003 kernel: rtc_cmos 00:04: RTC can wake from S4 Oct 31 01:18:38.128014 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 31 01:18:38.128083 kernel: rtc_cmos 00:04: registered as rtc0 Oct 31 01:18:38.128153 kernel: rtc_cmos 00:04: setting system clock to 2025-10-31T01:18:37 UTC (1761873517) Oct 31 01:18:38.128225 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 31 01:18:38.128234 kernel: efifb: probing for efifb Oct 31 01:18:38.128242 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Oct 31 01:18:38.128249 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Oct 31 01:18:38.128256 kernel: efifb: scrolling: redraw Oct 31 01:18:38.128264 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 31 01:18:38.128271 kernel: Console: switching to colour frame buffer device 160x50 Oct 31 01:18:38.128278 kernel: fb0: EFI VGA frame buffer device Oct 31 01:18:38.128286 kernel: pstore: Registered efi as persistent store backend Oct 31 01:18:38.128295 kernel: NET: Registered PF_INET6 protocol family Oct 31 01:18:38.128302 kernel: Segment Routing with IPv6 Oct 31 01:18:38.128311 kernel: In-situ OAM (IOAM) with IPv6 Oct 31 01:18:38.128319 kernel: NET: Registered PF_PACKET protocol family Oct 31 01:18:38.128327 kernel: Key type dns_resolver registered Oct 31 01:18:38.128335 kernel: IPI shorthand broadcast: enabled Oct 31 01:18:38.128342 kernel: sched_clock: Marking stable (685302957, 235986902)->(1079356649, -158066790) Oct 31 01:18:38.128350 kernel: registered taskstats version 1 Oct 31 01:18:38.128357 kernel: Loading compiled-in X.509 certificates Oct 31 01:18:38.128364 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 8306d4e745b00e76b5fae2596c709096b7f28adc' Oct 31 01:18:38.128372 kernel: Key type .fscrypt registered Oct 31 01:18:38.128379 kernel: Key type fscrypt-provisioning registered Oct 31 01:18:38.128386 kernel: pstore: Using crash dump compression: deflate Oct 31 01:18:38.128393 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 31 01:18:38.128402 kernel: ima: Allocated hash algorithm: sha1 Oct 31 01:18:38.128410 kernel: ima: No architecture policies found Oct 31 01:18:38.128417 kernel: clk: Disabling unused clocks Oct 31 01:18:38.128424 kernel: Freeing unused kernel image (initmem) memory: 47496K Oct 31 01:18:38.128431 kernel: Write protecting the kernel read-only data: 28672k Oct 31 01:18:38.128438 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 31 01:18:38.128446 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Oct 31 01:18:38.128464 kernel: Run /init as init process Oct 31 01:18:38.128471 kernel: with arguments: Oct 31 01:18:38.128480 kernel: /init Oct 31 01:18:38.128488 kernel: with environment: Oct 31 01:18:38.128495 kernel: HOME=/ Oct 31 01:18:38.128502 kernel: TERM=linux Oct 31 01:18:38.128509 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 31 01:18:38.128519 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 31 01:18:38.128528 systemd[1]: Detected virtualization kvm. Oct 31 01:18:38.128536 systemd[1]: Detected architecture x86-64. Oct 31 01:18:38.128545 systemd[1]: Running in initrd. Oct 31 01:18:38.128553 systemd[1]: No hostname configured, using default hostname. Oct 31 01:18:38.128561 systemd[1]: Hostname set to . Oct 31 01:18:38.128569 systemd[1]: Initializing machine ID from VM UUID. Oct 31 01:18:38.128577 systemd[1]: Queued start job for default target initrd.target. Oct 31 01:18:38.128584 systemd[1]: Started systemd-ask-password-console.path. Oct 31 01:18:38.128592 systemd[1]: Reached target cryptsetup.target. Oct 31 01:18:38.128600 systemd[1]: Reached target paths.target. Oct 31 01:18:38.128608 systemd[1]: Reached target slices.target. Oct 31 01:18:38.128616 systemd[1]: Reached target swap.target. Oct 31 01:18:38.128624 systemd[1]: Reached target timers.target. Oct 31 01:18:38.128632 systemd[1]: Listening on iscsid.socket. Oct 31 01:18:38.128639 systemd[1]: Listening on iscsiuio.socket. Oct 31 01:18:38.128647 systemd[1]: Listening on systemd-journald-audit.socket. Oct 31 01:18:38.128655 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 31 01:18:38.128663 systemd[1]: Listening on systemd-journald.socket. Oct 31 01:18:38.128672 systemd[1]: Listening on systemd-networkd.socket. Oct 31 01:18:38.128680 systemd[1]: Listening on systemd-udevd-control.socket. Oct 31 01:18:38.128687 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 31 01:18:38.128695 systemd[1]: Reached target sockets.target. Oct 31 01:18:38.128703 systemd[1]: Starting kmod-static-nodes.service... Oct 31 01:18:38.128710 systemd[1]: Finished network-cleanup.service. Oct 31 01:18:38.128719 systemd[1]: Starting systemd-fsck-usr.service... Oct 31 01:18:38.128726 systemd[1]: Starting systemd-journald.service... Oct 31 01:18:38.128734 systemd[1]: Starting systemd-modules-load.service... Oct 31 01:18:38.128743 systemd[1]: Starting systemd-resolved.service... Oct 31 01:18:38.128751 systemd[1]: Starting systemd-vconsole-setup.service... Oct 31 01:18:38.128769 systemd[1]: Finished kmod-static-nodes.service. Oct 31 01:18:38.128778 kernel: audit: type=1130 audit(1761873518.123:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.128785 systemd[1]: Finished systemd-fsck-usr.service. Oct 31 01:18:38.128796 systemd-journald[198]: Journal started Oct 31 01:18:38.128836 systemd-journald[198]: Runtime Journal (/run/log/journal/5a1b6458d8a042ceadc7a7f144cdec83) is 6.0M, max 48.4M, 42.4M free. Oct 31 01:18:38.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.136806 kernel: audit: type=1130 audit(1761873518.131:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.136839 systemd[1]: Started systemd-journald.service. Oct 31 01:18:38.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.141097 systemd[1]: Finished systemd-vconsole-setup.service. Oct 31 01:18:38.155254 kernel: audit: type=1130 audit(1761873518.139:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.155300 kernel: audit: type=1130 audit(1761873518.141:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.143213 systemd[1]: Starting dracut-cmdline-ask.service... Oct 31 01:18:38.155439 systemd-modules-load[199]: Inserted module 'overlay' Oct 31 01:18:38.160388 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 31 01:18:38.169600 systemd-resolved[200]: Positive Trust Anchors: Oct 31 01:18:38.170449 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 31 01:18:38.170492 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 31 01:18:38.173554 systemd-resolved[200]: Defaulting to hostname 'linux'. Oct 31 01:18:38.197435 kernel: audit: type=1130 audit(1761873518.183:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.197485 kernel: audit: type=1130 audit(1761873518.184:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.174605 systemd[1]: Started systemd-resolved.service. Oct 31 01:18:38.184863 systemd[1]: Finished dracut-cmdline-ask.service. Oct 31 01:18:38.185582 systemd[1]: Reached target nss-lookup.target. Oct 31 01:18:38.198930 systemd[1]: Starting dracut-cmdline.service... Oct 31 01:18:38.208805 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 31 01:18:38.211574 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 31 01:18:38.221346 kernel: Bridge firewalling registered Oct 31 01:18:38.221374 kernel: audit: type=1130 audit(1761873518.215:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.221431 dracut-cmdline[215]: dracut-dracut-053 Oct 31 01:18:38.215880 systemd-modules-load[199]: Inserted module 'br_netfilter' Oct 31 01:18:38.224850 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=7605c743a37b990723033788c91d5dcda748347858877b1088098370c2a7e4d3 Oct 31 01:18:38.237822 kernel: SCSI subsystem initialized Oct 31 01:18:38.249799 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 31 01:18:38.249866 kernel: device-mapper: uevent: version 1.0.3 Oct 31 01:18:38.252989 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 31 01:18:38.255729 systemd-modules-load[199]: Inserted module 'dm_multipath' Oct 31 01:18:38.256817 systemd[1]: Finished systemd-modules-load.service. Oct 31 01:18:38.266641 kernel: audit: type=1130 audit(1761873518.258:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.259841 systemd[1]: Starting systemd-sysctl.service... Oct 31 01:18:38.269621 systemd[1]: Finished systemd-sysctl.service. Oct 31 01:18:38.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.278809 kernel: audit: type=1130 audit(1761873518.271:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.290789 kernel: Loading iSCSI transport class v2.0-870. Oct 31 01:18:38.310800 kernel: iscsi: registered transport (tcp) Oct 31 01:18:38.335064 kernel: iscsi: registered transport (qla4xxx) Oct 31 01:18:38.335098 kernel: QLogic iSCSI HBA Driver Oct 31 01:18:38.371372 systemd[1]: Finished dracut-cmdline.service. Oct 31 01:18:38.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.375581 systemd[1]: Starting dracut-pre-udev.service... Oct 31 01:18:38.427800 kernel: raid6: avx2x4 gen() 20515 MB/s Oct 31 01:18:38.445788 kernel: raid6: avx2x4 xor() 7343 MB/s Oct 31 01:18:38.463790 kernel: raid6: avx2x2 gen() 32022 MB/s Oct 31 01:18:38.481789 kernel: raid6: avx2x2 xor() 18639 MB/s Oct 31 01:18:38.499791 kernel: raid6: avx2x1 gen() 26166 MB/s Oct 31 01:18:38.517788 kernel: raid6: avx2x1 xor() 15101 MB/s Oct 31 01:18:38.535787 kernel: raid6: sse2x4 gen() 14717 MB/s Oct 31 01:18:38.553790 kernel: raid6: sse2x4 xor() 7312 MB/s Oct 31 01:18:38.571790 kernel: raid6: sse2x2 gen() 16218 MB/s Oct 31 01:18:38.589794 kernel: raid6: sse2x2 xor() 9730 MB/s Oct 31 01:18:38.607788 kernel: raid6: sse2x1 gen() 12342 MB/s Oct 31 01:18:38.626192 kernel: raid6: sse2x1 xor() 7717 MB/s Oct 31 01:18:38.626228 kernel: raid6: using algorithm avx2x2 gen() 32022 MB/s Oct 31 01:18:38.626238 kernel: raid6: .... xor() 18639 MB/s, rmw enabled Oct 31 01:18:38.627416 kernel: raid6: using avx2x2 recovery algorithm Oct 31 01:18:38.641800 kernel: xor: automatically using best checksumming function avx Oct 31 01:18:38.732820 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 31 01:18:38.741589 systemd[1]: Finished dracut-pre-udev.service. Oct 31 01:18:38.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.743000 audit: BPF prog-id=7 op=LOAD Oct 31 01:18:38.743000 audit: BPF prog-id=8 op=LOAD Oct 31 01:18:38.745178 systemd[1]: Starting systemd-udevd.service... Oct 31 01:18:38.758687 systemd-udevd[400]: Using default interface naming scheme 'v252'. Oct 31 01:18:38.762987 systemd[1]: Started systemd-udevd.service. Oct 31 01:18:38.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.767229 systemd[1]: Starting dracut-pre-trigger.service... Oct 31 01:18:38.777794 dracut-pre-trigger[408]: rd.md=0: removing MD RAID activation Oct 31 01:18:38.803279 systemd[1]: Finished dracut-pre-trigger.service. Oct 31 01:18:38.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.805535 systemd[1]: Starting systemd-udev-trigger.service... Oct 31 01:18:38.844235 systemd[1]: Finished systemd-udev-trigger.service. Oct 31 01:18:38.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:38.880874 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Oct 31 01:18:38.893094 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 31 01:18:38.893120 kernel: GPT:9289727 != 19775487 Oct 31 01:18:38.893140 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 31 01:18:38.893153 kernel: GPT:9289727 != 19775487 Oct 31 01:18:38.893165 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 31 01:18:38.893177 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 31 01:18:38.897785 kernel: cryptd: max_cpu_qlen set to 1000 Oct 31 01:18:38.899895 kernel: libata version 3.00 loaded. Oct 31 01:18:38.909219 kernel: ahci 0000:00:1f.2: version 3.0 Oct 31 01:18:38.931707 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Oct 31 01:18:38.931734 kernel: AVX2 version of gcm_enc/dec engaged. Oct 31 01:18:38.931759 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Oct 31 01:18:38.931957 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Oct 31 01:18:38.932075 kernel: AES CTR mode by8 optimization enabled Oct 31 01:18:38.932086 kernel: scsi host0: ahci Oct 31 01:18:38.932188 kernel: scsi host1: ahci Oct 31 01:18:38.932307 kernel: scsi host2: ahci Oct 31 01:18:38.932397 kernel: scsi host3: ahci Oct 31 01:18:38.932505 kernel: scsi host4: ahci Oct 31 01:18:38.932610 kernel: scsi host5: ahci Oct 31 01:18:38.932698 kernel: ata1: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040100 irq 34 Oct 31 01:18:38.932708 kernel: ata2: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040180 irq 34 Oct 31 01:18:38.932717 kernel: ata3: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040200 irq 34 Oct 31 01:18:38.932726 kernel: ata4: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040280 irq 34 Oct 31 01:18:38.932735 kernel: ata5: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040300 irq 34 Oct 31 01:18:38.932747 kernel: ata6: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040380 irq 34 Oct 31 01:18:38.948062 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 31 01:18:38.956040 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (449) Oct 31 01:18:38.950718 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 31 01:18:38.963681 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 31 01:18:38.970749 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 31 01:18:38.974389 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 31 01:18:38.975916 systemd[1]: Starting disk-uuid.service... Oct 31 01:18:38.985087 disk-uuid[526]: Primary Header is updated. Oct 31 01:18:38.985087 disk-uuid[526]: Secondary Entries is updated. Oct 31 01:18:38.985087 disk-uuid[526]: Secondary Header is updated. Oct 31 01:18:38.990592 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 31 01:18:39.249442 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Oct 31 01:18:39.249547 kernel: ata4: SATA link down (SStatus 0 SControl 300) Oct 31 01:18:39.249557 kernel: ata1: SATA link down (SStatus 0 SControl 300) Oct 31 01:18:39.249566 kernel: ata5: SATA link down (SStatus 0 SControl 300) Oct 31 01:18:39.249576 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 31 01:18:39.252082 kernel: ata3.00: applying bridge limits Oct 31 01:18:39.252803 kernel: ata2: SATA link down (SStatus 0 SControl 300) Oct 31 01:18:39.254800 kernel: ata6: SATA link down (SStatus 0 SControl 300) Oct 31 01:18:39.255797 kernel: ata3.00: configured for UDMA/100 Oct 31 01:18:39.259796 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 31 01:18:39.293039 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 31 01:18:39.310840 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 31 01:18:39.310855 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Oct 31 01:18:39.996793 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 31 01:18:39.996856 disk-uuid[527]: The operation has completed successfully. Oct 31 01:18:40.020443 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 31 01:18:40.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.020533 systemd[1]: Finished disk-uuid.service. Oct 31 01:18:40.024672 systemd[1]: Starting verity-setup.service... Oct 31 01:18:40.039804 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Oct 31 01:18:40.059773 systemd[1]: Found device dev-mapper-usr.device. Oct 31 01:18:40.063472 systemd[1]: Mounting sysusr-usr.mount... Oct 31 01:18:40.067298 systemd[1]: Finished verity-setup.service. Oct 31 01:18:40.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.126791 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 31 01:18:40.127301 systemd[1]: Mounted sysusr-usr.mount. Oct 31 01:18:40.128452 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 31 01:18:40.129332 systemd[1]: Starting ignition-setup.service... Oct 31 01:18:40.131435 systemd[1]: Starting parse-ip-for-networkd.service... Oct 31 01:18:40.140943 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 31 01:18:40.140962 kernel: BTRFS info (device vda6): using free space tree Oct 31 01:18:40.140971 kernel: BTRFS info (device vda6): has skinny extents Oct 31 01:18:40.151081 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 31 01:18:40.158183 systemd[1]: Finished ignition-setup.service. Oct 31 01:18:40.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.160168 systemd[1]: Starting ignition-fetch-offline.service... Oct 31 01:18:40.193972 ignition[650]: Ignition 2.14.0 Oct 31 01:18:40.195322 ignition[650]: Stage: fetch-offline Oct 31 01:18:40.196511 ignition[650]: no configs at "/usr/lib/ignition/base.d" Oct 31 01:18:40.198003 ignition[650]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 01:18:40.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.201000 audit: BPF prog-id=9 op=LOAD Oct 31 01:18:40.198957 ignition[650]: parsed url from cmdline: "" Oct 31 01:18:40.200001 systemd[1]: Finished parse-ip-for-networkd.service. Oct 31 01:18:40.198962 ignition[650]: no config URL provided Oct 31 01:18:40.203103 systemd[1]: Starting systemd-networkd.service... Oct 31 01:18:40.198971 ignition[650]: reading system config file "/usr/lib/ignition/user.ign" Oct 31 01:18:40.198980 ignition[650]: no config at "/usr/lib/ignition/user.ign" Oct 31 01:18:40.198999 ignition[650]: op(1): [started] loading QEMU firmware config module Oct 31 01:18:40.199004 ignition[650]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 31 01:18:40.201600 ignition[650]: op(1): [finished] loading QEMU firmware config module Oct 31 01:18:40.287424 ignition[650]: parsing config with SHA512: 70ab49f41af41d7cbc6265cd34f9f577478674b6e56831dd221f5e8c0649a4820bd6865ced5b16e3636f322bf1b1da6a2c13e256eec0b2337b3a9a293063c8ca Oct 31 01:18:40.293515 unknown[650]: fetched base config from "system" Oct 31 01:18:40.294107 ignition[650]: fetch-offline: fetch-offline passed Oct 31 01:18:40.293536 unknown[650]: fetched user config from "qemu" Oct 31 01:18:40.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.294164 ignition[650]: Ignition finished successfully Oct 31 01:18:40.296472 systemd[1]: Finished ignition-fetch-offline.service. Oct 31 01:18:40.314960 systemd-networkd[719]: lo: Link UP Oct 31 01:18:40.314974 systemd-networkd[719]: lo: Gained carrier Oct 31 01:18:40.315549 systemd-networkd[719]: Enumeration completed Oct 31 01:18:40.315788 systemd-networkd[719]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 31 01:18:40.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.316470 systemd[1]: Started systemd-networkd.service. Oct 31 01:18:40.316780 systemd-networkd[719]: eth0: Link UP Oct 31 01:18:40.316783 systemd-networkd[719]: eth0: Gained carrier Oct 31 01:18:40.322557 systemd[1]: Reached target network.target. Oct 31 01:18:40.325050 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 31 01:18:40.331887 systemd[1]: Starting ignition-kargs.service... Oct 31 01:18:40.334043 systemd-networkd[719]: eth0: DHCPv4 address 10.0.0.131/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 31 01:18:40.336948 systemd[1]: Starting iscsiuio.service... Oct 31 01:18:40.341292 systemd[1]: Started iscsiuio.service. Oct 31 01:18:40.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.343121 ignition[721]: Ignition 2.14.0 Oct 31 01:18:40.343127 ignition[721]: Stage: kargs Oct 31 01:18:40.343215 ignition[721]: no configs at "/usr/lib/ignition/base.d" Oct 31 01:18:40.343223 ignition[721]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 01:18:40.344144 ignition[721]: kargs: kargs passed Oct 31 01:18:40.344178 ignition[721]: Ignition finished successfully Oct 31 01:18:40.351144 systemd[1]: Starting iscsid.service... Oct 31 01:18:40.353326 systemd[1]: Finished ignition-kargs.service. Oct 31 01:18:40.355750 iscsid[731]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 31 01:18:40.355750 iscsid[731]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 31 01:18:40.355750 iscsid[731]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 31 01:18:40.355750 iscsid[731]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 31 01:18:40.355750 iscsid[731]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 31 01:18:40.355750 iscsid[731]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 31 01:18:40.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.355864 systemd[1]: Started iscsid.service. Oct 31 01:18:40.375746 systemd[1]: Starting dracut-initqueue.service... Oct 31 01:18:40.378682 systemd[1]: Starting ignition-disks.service... Oct 31 01:18:40.385076 systemd[1]: Finished dracut-initqueue.service. Oct 31 01:18:40.386464 ignition[733]: Ignition 2.14.0 Oct 31 01:18:40.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.387716 systemd[1]: Reached target remote-fs-pre.target. Oct 31 01:18:40.386471 ignition[733]: Stage: disks Oct 31 01:18:40.390030 systemd[1]: Reached target remote-cryptsetup.target. Oct 31 01:18:40.386557 ignition[733]: no configs at "/usr/lib/ignition/base.d" Oct 31 01:18:40.392731 systemd[1]: Reached target remote-fs.target. Oct 31 01:18:40.386566 ignition[733]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 01:18:40.387686 ignition[733]: disks: disks passed Oct 31 01:18:40.387724 ignition[733]: Ignition finished successfully Oct 31 01:18:40.402851 systemd[1]: Starting dracut-pre-mount.service... Oct 31 01:18:40.405469 systemd[1]: Finished ignition-disks.service. Oct 31 01:18:40.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.408078 systemd[1]: Reached target initrd-root-device.target. Oct 31 01:18:40.410812 systemd[1]: Reached target local-fs-pre.target. Oct 31 01:18:40.413317 systemd[1]: Reached target local-fs.target. Oct 31 01:18:40.415741 systemd[1]: Reached target sysinit.target. Oct 31 01:18:40.418064 systemd[1]: Reached target basic.target. Oct 31 01:18:40.420605 systemd[1]: Finished dracut-pre-mount.service. Oct 31 01:18:40.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.423720 systemd[1]: Starting systemd-fsck-root.service... Oct 31 01:18:40.434113 systemd-fsck[753]: ROOT: clean, 637/553520 files, 56032/553472 blocks Oct 31 01:18:40.439112 systemd[1]: Finished systemd-fsck-root.service. Oct 31 01:18:40.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.440800 systemd[1]: Mounting sysroot.mount... Oct 31 01:18:40.449416 systemd[1]: Mounted sysroot.mount. Oct 31 01:18:40.451622 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 31 01:18:40.451648 systemd[1]: Reached target initrd-root-fs.target. Oct 31 01:18:40.455100 systemd[1]: Mounting sysroot-usr.mount... Oct 31 01:18:40.457610 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 31 01:18:40.457646 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 31 01:18:40.457667 systemd[1]: Reached target ignition-diskful.target. Oct 31 01:18:40.465633 systemd[1]: Mounted sysroot-usr.mount. Oct 31 01:18:40.468518 systemd[1]: Starting initrd-setup-root.service... Oct 31 01:18:40.472327 initrd-setup-root[763]: cut: /sysroot/etc/passwd: No such file or directory Oct 31 01:18:40.476676 initrd-setup-root[771]: cut: /sysroot/etc/group: No such file or directory Oct 31 01:18:40.482141 initrd-setup-root[779]: cut: /sysroot/etc/shadow: No such file or directory Oct 31 01:18:40.487643 initrd-setup-root[787]: cut: /sysroot/etc/gshadow: No such file or directory Oct 31 01:18:40.518960 systemd[1]: Finished initrd-setup-root.service. Oct 31 01:18:40.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.522537 systemd[1]: Starting ignition-mount.service... Oct 31 01:18:40.525750 systemd[1]: Starting sysroot-boot.service... Oct 31 01:18:40.528584 bash[804]: umount: /sysroot/usr/share/oem: not mounted. Oct 31 01:18:40.540729 ignition[805]: INFO : Ignition 2.14.0 Oct 31 01:18:40.542311 ignition[805]: INFO : Stage: mount Oct 31 01:18:40.542311 ignition[805]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 31 01:18:40.542311 ignition[805]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 01:18:40.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.548703 ignition[805]: INFO : mount: mount passed Oct 31 01:18:40.548703 ignition[805]: INFO : Ignition finished successfully Oct 31 01:18:40.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:40.544895 systemd[1]: Finished ignition-mount.service. Oct 31 01:18:40.550141 systemd[1]: Finished sysroot-boot.service. Oct 31 01:18:41.072852 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 31 01:18:41.085076 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (814) Oct 31 01:18:41.085112 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 31 01:18:41.085126 kernel: BTRFS info (device vda6): using free space tree Oct 31 01:18:41.086510 kernel: BTRFS info (device vda6): has skinny extents Oct 31 01:18:41.091074 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 31 01:18:41.093436 systemd[1]: Starting ignition-files.service... Oct 31 01:18:41.111446 ignition[834]: INFO : Ignition 2.14.0 Oct 31 01:18:41.111446 ignition[834]: INFO : Stage: files Oct 31 01:18:41.114683 ignition[834]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 31 01:18:41.114683 ignition[834]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 01:18:41.114683 ignition[834]: DEBUG : files: compiled without relabeling support, skipping Oct 31 01:18:41.114683 ignition[834]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 31 01:18:41.114683 ignition[834]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 31 01:18:41.145017 ignition[834]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 31 01:18:41.145017 ignition[834]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 31 01:18:41.145017 ignition[834]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 31 01:18:41.145017 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Oct 31 01:18:41.145017 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Oct 31 01:18:41.115933 unknown[834]: wrote ssh authorized keys file for user: core Oct 31 01:18:41.234628 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 31 01:18:41.320670 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Oct 31 01:18:41.320670 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Oct 31 01:18:41.334739 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Oct 31 01:18:41.661154 systemd-networkd[719]: eth0: Gained IPv6LL Oct 31 01:18:41.782788 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Oct 31 01:18:42.725049 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Oct 31 01:18:42.725049 ignition[834]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Oct 31 01:18:42.733213 ignition[834]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 31 01:18:42.793089 ignition[834]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 31 01:18:42.797474 ignition[834]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Oct 31 01:18:42.797474 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 31 01:18:42.797474 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 31 01:18:42.797474 ignition[834]: INFO : files: files passed Oct 31 01:18:42.797474 ignition[834]: INFO : Ignition finished successfully Oct 31 01:18:42.838410 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 31 01:18:42.838458 kernel: audit: type=1130 audit(1761873522.796:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.838479 kernel: audit: type=1130 audit(1761873522.815:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.838510 kernel: audit: type=1130 audit(1761873522.822:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.838531 kernel: audit: type=1131 audit(1761873522.822:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.794523 systemd[1]: Finished ignition-files.service. Oct 31 01:18:42.798533 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 31 01:18:42.807611 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 31 01:18:42.846597 initrd-setup-root-after-ignition[857]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 31 01:18:42.808166 systemd[1]: Starting ignition-quench.service... Oct 31 01:18:42.863617 kernel: audit: type=1130 audit(1761873522.850:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.865027 kernel: audit: type=1131 audit(1761873522.850:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.865297 initrd-setup-root-after-ignition[859]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 31 01:18:42.811736 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 31 01:18:42.816377 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 31 01:18:42.816441 systemd[1]: Finished ignition-quench.service. Oct 31 01:18:42.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.823413 systemd[1]: Reached target ignition-complete.target. Oct 31 01:18:42.882691 kernel: audit: type=1130 audit(1761873522.874:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.834745 systemd[1]: Starting initrd-parse-etc.service... Oct 31 01:18:42.848013 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 31 01:18:42.848091 systemd[1]: Finished initrd-parse-etc.service. Oct 31 01:18:42.851184 systemd[1]: Reached target initrd-fs.target. Oct 31 01:18:42.863581 systemd[1]: Reached target initrd.target. Oct 31 01:18:42.865043 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 31 01:18:42.865648 systemd[1]: Starting dracut-pre-pivot.service... Oct 31 01:18:42.904032 kernel: audit: type=1131 audit(1761873522.895:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.874170 systemd[1]: Finished dracut-pre-pivot.service. Oct 31 01:18:42.876093 systemd[1]: Starting initrd-cleanup.service... Oct 31 01:18:42.887012 systemd[1]: Stopped target nss-lookup.target. Oct 31 01:18:42.888405 systemd[1]: Stopped target remote-cryptsetup.target. Oct 31 01:18:42.890993 systemd[1]: Stopped target timers.target. Oct 31 01:18:42.893416 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 31 01:18:42.893504 systemd[1]: Stopped dracut-pre-pivot.service. Oct 31 01:18:42.896805 systemd[1]: Stopped target initrd.target. Oct 31 01:18:42.904102 systemd[1]: Stopped target basic.target. Oct 31 01:18:42.906685 systemd[1]: Stopped target ignition-complete.target. Oct 31 01:18:42.909177 systemd[1]: Stopped target ignition-diskful.target. Oct 31 01:18:42.911734 systemd[1]: Stopped target initrd-root-device.target. Oct 31 01:18:42.939260 kernel: audit: type=1131 audit(1761873522.931:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.914475 systemd[1]: Stopped target remote-fs.target. Oct 31 01:18:42.916874 systemd[1]: Stopped target remote-fs-pre.target. Oct 31 01:18:42.950064 kernel: audit: type=1131 audit(1761873522.941:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.919700 systemd[1]: Stopped target sysinit.target. Oct 31 01:18:42.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.922105 systemd[1]: Stopped target local-fs.target. Oct 31 01:18:42.924463 systemd[1]: Stopped target local-fs-pre.target. Oct 31 01:18:42.926880 systemd[1]: Stopped target swap.target. Oct 31 01:18:42.929329 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 31 01:18:42.929445 systemd[1]: Stopped dracut-pre-mount.service. Oct 31 01:18:42.931985 systemd[1]: Stopped target cryptsetup.target. Oct 31 01:18:42.939299 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 31 01:18:42.939403 systemd[1]: Stopped dracut-initqueue.service. Oct 31 01:18:42.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.941861 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 31 01:18:42.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.941954 systemd[1]: Stopped ignition-fetch-offline.service. Oct 31 01:18:42.950169 systemd[1]: Stopped target paths.target. Oct 31 01:18:42.952911 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 31 01:18:42.956816 systemd[1]: Stopped systemd-ask-password-console.path. Oct 31 01:18:42.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.985377 ignition[874]: INFO : Ignition 2.14.0 Oct 31 01:18:42.985377 ignition[874]: INFO : Stage: umount Oct 31 01:18:42.985377 ignition[874]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 31 01:18:42.985377 ignition[874]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 01:18:42.985377 ignition[874]: INFO : umount: umount passed Oct 31 01:18:42.985377 ignition[874]: INFO : Ignition finished successfully Oct 31 01:18:42.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.958851 systemd[1]: Stopped target slices.target. Oct 31 01:18:43.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.961536 systemd[1]: Stopped target sockets.target. Oct 31 01:18:42.963946 systemd[1]: iscsid.socket: Deactivated successfully. Oct 31 01:18:42.964041 systemd[1]: Closed iscsid.socket. Oct 31 01:18:42.966237 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 31 01:18:42.966361 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 31 01:18:42.969323 systemd[1]: ignition-files.service: Deactivated successfully. Oct 31 01:18:43.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.969442 systemd[1]: Stopped ignition-files.service. Oct 31 01:18:42.972679 systemd[1]: Stopping ignition-mount.service... Oct 31 01:18:43.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.974756 systemd[1]: Stopping iscsiuio.service... Oct 31 01:18:43.026000 audit: BPF prog-id=6 op=UNLOAD Oct 31 01:18:42.978035 systemd[1]: Stopping sysroot-boot.service... Oct 31 01:18:42.979296 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 31 01:18:42.979539 systemd[1]: Stopped systemd-udev-trigger.service. Oct 31 01:18:43.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.982681 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 31 01:18:43.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.982899 systemd[1]: Stopped dracut-pre-trigger.service. Oct 31 01:18:42.987356 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 31 01:18:42.987442 systemd[1]: Stopped iscsiuio.service. Oct 31 01:18:42.989417 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 31 01:18:42.989487 systemd[1]: Stopped ignition-mount.service. Oct 31 01:18:43.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.993073 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 31 01:18:43.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:42.993140 systemd[1]: Finished initrd-cleanup.service. Oct 31 01:18:42.996277 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 31 01:18:42.997146 systemd[1]: Stopped target network.target. Oct 31 01:18:42.999729 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 31 01:18:42.999775 systemd[1]: Closed iscsiuio.socket. Oct 31 01:18:43.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.000981 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 31 01:18:43.001016 systemd[1]: Stopped ignition-disks.service. Oct 31 01:18:43.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.002303 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 31 01:18:43.002345 systemd[1]: Stopped ignition-kargs.service. Oct 31 01:18:43.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.004829 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 31 01:18:43.004866 systemd[1]: Stopped ignition-setup.service. Oct 31 01:18:43.006238 systemd[1]: Stopping systemd-networkd.service... Oct 31 01:18:43.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.008817 systemd[1]: Stopping systemd-resolved.service... Oct 31 01:18:43.013054 systemd-networkd[719]: eth0: DHCPv6 lease lost Oct 31 01:18:43.091000 audit: BPF prog-id=9 op=UNLOAD Oct 31 01:18:43.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.014821 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 31 01:18:43.014896 systemd[1]: Stopped systemd-networkd.service. Oct 31 01:18:43.020167 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 31 01:18:43.020241 systemd[1]: Stopped systemd-resolved.service. Oct 31 01:18:43.025040 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 31 01:18:43.025075 systemd[1]: Closed systemd-networkd.socket. Oct 31 01:18:43.027700 systemd[1]: Stopping network-cleanup.service... Oct 31 01:18:43.029784 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 31 01:18:43.029827 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 31 01:18:43.034963 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 31 01:18:43.035015 systemd[1]: Stopped systemd-sysctl.service. Oct 31 01:18:43.038109 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 31 01:18:43.038174 systemd[1]: Stopped systemd-modules-load.service. Oct 31 01:18:43.039836 systemd[1]: Stopping systemd-udevd.service... Oct 31 01:18:43.044296 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 31 01:18:43.047727 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 31 01:18:43.047925 systemd[1]: Stopped network-cleanup.service. Oct 31 01:18:43.050493 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 31 01:18:43.050701 systemd[1]: Stopped systemd-udevd.service. Oct 31 01:18:43.055511 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 31 01:18:43.055628 systemd[1]: Closed systemd-udevd-control.socket. Oct 31 01:18:43.058394 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 31 01:18:43.135026 systemd-journald[198]: Received SIGTERM from PID 1 (n/a). Oct 31 01:18:43.135058 iscsid[731]: iscsid shutting down. Oct 31 01:18:43.058429 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 31 01:18:43.061040 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 31 01:18:43.061075 systemd[1]: Stopped dracut-pre-udev.service. Oct 31 01:18:43.064072 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 31 01:18:43.064154 systemd[1]: Stopped dracut-cmdline.service. Oct 31 01:18:43.066679 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 31 01:18:43.066747 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 31 01:18:43.070649 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 31 01:18:43.072930 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 31 01:18:43.073011 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 31 01:18:43.074887 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 31 01:18:43.074923 systemd[1]: Stopped kmod-static-nodes.service. Oct 31 01:18:43.078652 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 31 01:18:43.078743 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 31 01:18:43.082719 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 31 01:18:43.083343 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 31 01:18:43.083494 systemd[1]: Stopped sysroot-boot.service. Oct 31 01:18:43.086247 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 31 01:18:43.086385 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 31 01:18:43.089125 systemd[1]: Reached target initrd-switch-root.target. Oct 31 01:18:43.091863 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 31 01:18:43.091921 systemd[1]: Stopped initrd-setup-root.service. Oct 31 01:18:43.094287 systemd[1]: Starting initrd-switch-root.service... Oct 31 01:18:43.112850 systemd[1]: Switching root. Oct 31 01:18:43.142892 systemd-journald[198]: Journal stopped Oct 31 01:18:50.296583 kernel: SELinux: Class mctp_socket not defined in policy. Oct 31 01:18:50.296645 kernel: SELinux: Class anon_inode not defined in policy. Oct 31 01:18:50.296664 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 31 01:18:50.296683 kernel: SELinux: policy capability network_peer_controls=1 Oct 31 01:18:50.296702 kernel: SELinux: policy capability open_perms=1 Oct 31 01:18:50.296716 kernel: SELinux: policy capability extended_socket_class=1 Oct 31 01:18:50.296735 kernel: SELinux: policy capability always_check_network=0 Oct 31 01:18:50.296754 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 31 01:18:50.296785 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 31 01:18:50.296805 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 31 01:18:50.296820 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 31 01:18:50.296839 systemd[1]: Successfully loaded SELinux policy in 49.352ms. Oct 31 01:18:50.296866 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.876ms. Oct 31 01:18:50.296892 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 31 01:18:50.296910 systemd[1]: Detected virtualization kvm. Oct 31 01:18:50.296925 systemd[1]: Detected architecture x86-64. Oct 31 01:18:50.296940 systemd[1]: Detected first boot. Oct 31 01:18:50.296955 systemd[1]: Initializing machine ID from VM UUID. Oct 31 01:18:50.296971 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Oct 31 01:18:50.296990 systemd[1]: Populated /etc with preset unit settings. Oct 31 01:18:50.297006 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 31 01:18:50.297024 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 31 01:18:50.297041 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 31 01:18:50.297058 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 31 01:18:50.297075 kernel: audit: type=1334 audit(1761873530.071:86): prog-id=12 op=LOAD Oct 31 01:18:50.297091 kernel: audit: type=1334 audit(1761873530.071:87): prog-id=3 op=UNLOAD Oct 31 01:18:50.297120 kernel: audit: type=1334 audit(1761873530.074:88): prog-id=13 op=LOAD Oct 31 01:18:50.297136 kernel: audit: type=1334 audit(1761873530.076:89): prog-id=14 op=LOAD Oct 31 01:18:50.297153 kernel: audit: type=1334 audit(1761873530.076:90): prog-id=4 op=UNLOAD Oct 31 01:18:50.297168 kernel: audit: type=1334 audit(1761873530.076:91): prog-id=5 op=UNLOAD Oct 31 01:18:50.297183 kernel: audit: type=1334 audit(1761873530.078:92): prog-id=15 op=LOAD Oct 31 01:18:50.297197 kernel: audit: type=1334 audit(1761873530.078:93): prog-id=12 op=UNLOAD Oct 31 01:18:50.297214 kernel: audit: type=1334 audit(1761873530.081:94): prog-id=16 op=LOAD Oct 31 01:18:50.297229 kernel: audit: type=1334 audit(1761873530.085:95): prog-id=17 op=LOAD Oct 31 01:18:50.297253 systemd[1]: iscsid.service: Deactivated successfully. Oct 31 01:18:50.297270 systemd[1]: Stopped iscsid.service. Oct 31 01:18:50.297285 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 31 01:18:50.297301 systemd[1]: Stopped initrd-switch-root.service. Oct 31 01:18:50.297317 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 31 01:18:50.297333 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 31 01:18:50.297349 systemd[1]: Created slice system-addon\x2drun.slice. Oct 31 01:18:50.297372 systemd[1]: Created slice system-getty.slice. Oct 31 01:18:50.297388 systemd[1]: Created slice system-modprobe.slice. Oct 31 01:18:50.297404 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 31 01:18:50.297420 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 31 01:18:50.297436 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 31 01:18:50.297451 systemd[1]: Created slice user.slice. Oct 31 01:18:50.297467 systemd[1]: Started systemd-ask-password-console.path. Oct 31 01:18:50.297484 systemd[1]: Started systemd-ask-password-wall.path. Oct 31 01:18:50.297503 systemd[1]: Set up automount boot.automount. Oct 31 01:18:50.297519 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 31 01:18:50.297534 systemd[1]: Stopped target initrd-switch-root.target. Oct 31 01:18:50.297549 systemd[1]: Stopped target initrd-fs.target. Oct 31 01:18:50.297565 systemd[1]: Stopped target initrd-root-fs.target. Oct 31 01:18:50.297580 systemd[1]: Reached target integritysetup.target. Oct 31 01:18:50.297603 systemd[1]: Reached target remote-cryptsetup.target. Oct 31 01:18:50.297619 systemd[1]: Reached target remote-fs.target. Oct 31 01:18:50.297635 systemd[1]: Reached target slices.target. Oct 31 01:18:50.297653 systemd[1]: Reached target swap.target. Oct 31 01:18:50.297669 systemd[1]: Reached target torcx.target. Oct 31 01:18:50.297685 systemd[1]: Reached target veritysetup.target. Oct 31 01:18:50.297701 systemd[1]: Listening on systemd-coredump.socket. Oct 31 01:18:50.297718 systemd[1]: Listening on systemd-initctl.socket. Oct 31 01:18:50.297734 systemd[1]: Listening on systemd-networkd.socket. Oct 31 01:18:50.297750 systemd[1]: Listening on systemd-udevd-control.socket. Oct 31 01:18:50.297781 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 31 01:18:50.297799 systemd[1]: Listening on systemd-userdbd.socket. Oct 31 01:18:50.297815 systemd[1]: Mounting dev-hugepages.mount... Oct 31 01:18:50.297834 systemd[1]: Mounting dev-mqueue.mount... Oct 31 01:18:50.297851 systemd[1]: Mounting media.mount... Oct 31 01:18:50.297867 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:50.297883 systemd[1]: Mounting sys-kernel-debug.mount... Oct 31 01:18:50.297899 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 31 01:18:50.297914 systemd[1]: Mounting tmp.mount... Oct 31 01:18:50.297930 systemd[1]: Starting flatcar-tmpfiles.service... Oct 31 01:18:50.297947 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 01:18:50.297974 systemd[1]: Starting kmod-static-nodes.service... Oct 31 01:18:50.297993 systemd[1]: Starting modprobe@configfs.service... Oct 31 01:18:50.298009 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 01:18:50.298024 systemd[1]: Starting modprobe@drm.service... Oct 31 01:18:50.298040 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 01:18:50.298056 systemd[1]: Starting modprobe@fuse.service... Oct 31 01:18:50.298072 systemd[1]: Starting modprobe@loop.service... Oct 31 01:18:50.298088 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 31 01:18:50.298115 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 31 01:18:50.298134 systemd[1]: Stopped systemd-fsck-root.service. Oct 31 01:18:50.298150 kernel: fuse: init (API version 7.34) Oct 31 01:18:50.298164 kernel: loop: module loaded Oct 31 01:18:50.298180 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 31 01:18:50.298195 systemd[1]: Stopped systemd-fsck-usr.service. Oct 31 01:18:50.298210 systemd[1]: Stopped systemd-journald.service. Oct 31 01:18:50.298226 systemd[1]: Starting systemd-journald.service... Oct 31 01:18:50.298241 systemd[1]: Starting systemd-modules-load.service... Oct 31 01:18:50.298257 systemd[1]: Starting systemd-network-generator.service... Oct 31 01:18:50.298273 systemd[1]: Starting systemd-remount-fs.service... Oct 31 01:18:50.298292 systemd[1]: Starting systemd-udev-trigger.service... Oct 31 01:18:50.298307 systemd[1]: verity-setup.service: Deactivated successfully. Oct 31 01:18:50.298325 systemd[1]: Stopped verity-setup.service. Oct 31 01:18:50.298341 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:50.298358 systemd-journald[996]: Journal started Oct 31 01:18:50.298413 systemd-journald[996]: Runtime Journal (/run/log/journal/5a1b6458d8a042ceadc7a7f144cdec83) is 6.0M, max 48.4M, 42.4M free. Oct 31 01:18:43.206000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 31 01:18:43.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 31 01:18:43.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 31 01:18:43.484000 audit: BPF prog-id=10 op=LOAD Oct 31 01:18:43.485000 audit: BPF prog-id=10 op=UNLOAD Oct 31 01:18:43.487000 audit: BPF prog-id=11 op=LOAD Oct 31 01:18:43.487000 audit: BPF prog-id=11 op=UNLOAD Oct 31 01:18:43.678000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Oct 31 01:18:43.678000 audit[907]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001c58a2 a1=c000146de0 a2=c00014f0c0 a3=32 items=0 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:18:43.678000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Oct 31 01:18:43.680000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Oct 31 01:18:43.680000 audit[907]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001c5979 a2=1ed a3=0 items=2 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:18:43.680000 audit: CWD cwd="/" Oct 31 01:18:43.680000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:43.680000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:43.680000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Oct 31 01:18:50.071000 audit: BPF prog-id=12 op=LOAD Oct 31 01:18:50.071000 audit: BPF prog-id=3 op=UNLOAD Oct 31 01:18:50.074000 audit: BPF prog-id=13 op=LOAD Oct 31 01:18:50.076000 audit: BPF prog-id=14 op=LOAD Oct 31 01:18:50.076000 audit: BPF prog-id=4 op=UNLOAD Oct 31 01:18:50.076000 audit: BPF prog-id=5 op=UNLOAD Oct 31 01:18:50.078000 audit: BPF prog-id=15 op=LOAD Oct 31 01:18:50.078000 audit: BPF prog-id=12 op=UNLOAD Oct 31 01:18:50.081000 audit: BPF prog-id=16 op=LOAD Oct 31 01:18:50.085000 audit: BPF prog-id=17 op=LOAD Oct 31 01:18:50.085000 audit: BPF prog-id=13 op=UNLOAD Oct 31 01:18:50.085000 audit: BPF prog-id=14 op=UNLOAD Oct 31 01:18:50.087000 audit: BPF prog-id=18 op=LOAD Oct 31 01:18:50.087000 audit: BPF prog-id=15 op=UNLOAD Oct 31 01:18:50.088000 audit: BPF prog-id=19 op=LOAD Oct 31 01:18:50.090000 audit: BPF prog-id=20 op=LOAD Oct 31 01:18:50.090000 audit: BPF prog-id=16 op=UNLOAD Oct 31 01:18:50.090000 audit: BPF prog-id=17 op=UNLOAD Oct 31 01:18:50.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.099000 audit: BPF prog-id=18 op=UNLOAD Oct 31 01:18:50.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.269000 audit: BPF prog-id=21 op=LOAD Oct 31 01:18:50.269000 audit: BPF prog-id=22 op=LOAD Oct 31 01:18:50.269000 audit: BPF prog-id=23 op=LOAD Oct 31 01:18:50.269000 audit: BPF prog-id=19 op=UNLOAD Oct 31 01:18:50.269000 audit: BPF prog-id=20 op=UNLOAD Oct 31 01:18:50.293000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 31 01:18:50.293000 audit[996]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffffd887330 a2=4000 a3=7ffffd8873cc items=0 ppid=1 pid=996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:18:50.293000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 31 01:18:50.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.663044 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 31 01:18:50.069541 systemd[1]: Queued start job for default target multi-user.target. Oct 31 01:18:43.665675 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 31 01:18:50.069554 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 31 01:18:43.665708 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 31 01:18:50.092170 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 31 01:18:43.665863 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 31 01:18:43.665878 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 31 01:18:43.665937 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 31 01:18:43.665959 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 31 01:18:43.666268 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 31 01:18:43.667319 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 31 01:18:43.667344 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 31 01:18:43.676617 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 31 01:18:43.676667 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 31 01:18:43.676697 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Oct 31 01:18:43.676716 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 31 01:18:50.303524 systemd[1]: Started systemd-journald.service. Oct 31 01:18:50.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:43.676743 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Oct 31 01:18:43.676841 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:43Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 31 01:18:49.726044 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:49Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 31 01:18:49.726334 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:49Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 31 01:18:49.726832 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:49Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 31 01:18:50.303958 systemd[1]: Mounted dev-hugepages.mount. Oct 31 01:18:49.727015 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:49Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 31 01:18:50.305265 systemd[1]: Mounted dev-mqueue.mount. Oct 31 01:18:49.727062 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:49Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 31 01:18:49.727140 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-10-31T01:18:49Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 31 01:18:50.306482 systemd[1]: Mounted media.mount. Oct 31 01:18:50.307594 systemd[1]: Mounted sys-kernel-debug.mount. Oct 31 01:18:50.308889 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 31 01:18:50.310274 systemd[1]: Mounted tmp.mount. Oct 31 01:18:50.311488 systemd[1]: Finished flatcar-tmpfiles.service. Oct 31 01:18:50.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.313026 systemd[1]: Finished kmod-static-nodes.service. Oct 31 01:18:50.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.314593 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 31 01:18:50.314722 systemd[1]: Finished modprobe@configfs.service. Oct 31 01:18:50.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.316273 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 01:18:50.316400 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 01:18:50.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.317992 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 31 01:18:50.318151 systemd[1]: Finished modprobe@drm.service. Oct 31 01:18:50.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.319563 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 01:18:50.319678 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 01:18:50.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.321268 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 31 01:18:50.321380 systemd[1]: Finished modprobe@fuse.service. Oct 31 01:18:50.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.322829 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 31 01:18:50.322942 systemd[1]: Finished modprobe@loop.service. Oct 31 01:18:50.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.324435 systemd[1]: Finished systemd-modules-load.service. Oct 31 01:18:50.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.326033 systemd[1]: Finished systemd-network-generator.service. Oct 31 01:18:50.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.327704 systemd[1]: Finished systemd-remount-fs.service. Oct 31 01:18:50.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.329531 systemd[1]: Reached target network-pre.target. Oct 31 01:18:50.331981 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 31 01:18:50.334684 systemd[1]: Mounting sys-kernel-config.mount... Oct 31 01:18:50.336012 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 31 01:18:50.337381 systemd[1]: Starting systemd-hwdb-update.service... Oct 31 01:18:50.339936 systemd[1]: Starting systemd-journal-flush.service... Oct 31 01:18:50.341297 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 31 01:18:50.342377 systemd[1]: Starting systemd-random-seed.service... Oct 31 01:18:50.343884 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 31 01:18:50.345173 systemd[1]: Starting systemd-sysctl.service... Oct 31 01:18:50.347621 systemd[1]: Starting systemd-sysusers.service... Oct 31 01:18:50.349297 systemd-journald[996]: Time spent on flushing to /var/log/journal/5a1b6458d8a042ceadc7a7f144cdec83 is 19.815ms for 1181 entries. Oct 31 01:18:50.349297 systemd-journald[996]: System Journal (/var/log/journal/5a1b6458d8a042ceadc7a7f144cdec83) is 8.0M, max 195.6M, 187.6M free. Oct 31 01:18:50.395730 systemd-journald[996]: Received client request to flush runtime journal. Oct 31 01:18:50.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.351673 systemd[1]: Finished systemd-udev-trigger.service. Oct 31 01:18:50.353274 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 31 01:18:50.354798 systemd[1]: Mounted sys-kernel-config.mount. Oct 31 01:18:50.357308 systemd[1]: Starting systemd-udev-settle.service... Oct 31 01:18:50.373778 systemd[1]: Finished systemd-random-seed.service. Oct 31 01:18:50.392014 systemd[1]: Reached target first-boot-complete.target. Oct 31 01:18:50.397208 systemd[1]: Finished systemd-journal-flush.service. Oct 31 01:18:50.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.404078 systemd[1]: Finished systemd-sysctl.service. Oct 31 01:18:50.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.406225 udevadm[1011]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 31 01:18:50.408409 systemd[1]: Finished systemd-sysusers.service. Oct 31 01:18:50.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:50.411010 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 31 01:18:50.427226 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 31 01:18:50.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.231006 systemd[1]: Finished systemd-hwdb-update.service. Oct 31 01:18:51.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.241000 audit: BPF prog-id=24 op=LOAD Oct 31 01:18:51.241000 audit: BPF prog-id=25 op=LOAD Oct 31 01:18:51.241000 audit: BPF prog-id=7 op=UNLOAD Oct 31 01:18:51.241000 audit: BPF prog-id=8 op=UNLOAD Oct 31 01:18:51.243163 systemd[1]: Starting systemd-udevd.service... Oct 31 01:18:51.259152 systemd-udevd[1016]: Using default interface naming scheme 'v252'. Oct 31 01:18:51.274678 systemd[1]: Started systemd-udevd.service. Oct 31 01:18:51.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.277000 audit: BPF prog-id=26 op=LOAD Oct 31 01:18:51.279202 systemd[1]: Starting systemd-networkd.service... Oct 31 01:18:51.285553 systemd[1]: Starting systemd-userdbd.service... Oct 31 01:18:51.283000 audit: BPF prog-id=27 op=LOAD Oct 31 01:18:51.284000 audit: BPF prog-id=28 op=LOAD Oct 31 01:18:51.284000 audit: BPF prog-id=29 op=LOAD Oct 31 01:18:51.313758 systemd[1]: Started systemd-userdbd.service. Oct 31 01:18:51.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.321677 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 31 01:18:51.333609 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 31 01:18:51.421412 systemd-networkd[1020]: lo: Link UP Oct 31 01:18:51.421839 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 31 01:18:51.421891 systemd-networkd[1020]: lo: Gained carrier Oct 31 01:18:51.422474 systemd-networkd[1020]: Enumeration completed Oct 31 01:18:51.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.422649 systemd[1]: Started systemd-networkd.service. Oct 31 01:18:51.424532 systemd-networkd[1020]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 31 01:18:51.410000 audit[1025]: AVC avc: denied { confidentiality } for pid=1025 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 31 01:18:51.426735 systemd-networkd[1020]: eth0: Link UP Oct 31 01:18:51.426823 systemd-networkd[1020]: eth0: Gained carrier Oct 31 01:18:51.410000 audit[1025]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=561edd154450 a1=338ec a2=7f885bfecbc5 a3=5 items=110 ppid=1016 pid=1025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:18:51.410000 audit: CWD cwd="/" Oct 31 01:18:51.410000 audit: PATH item=0 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=1 name=(null) inode=11869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=2 name=(null) inode=11869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=3 name=(null) inode=11870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=4 name=(null) inode=11869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=5 name=(null) inode=11871 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=6 name=(null) inode=11869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=7 name=(null) inode=11872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=8 name=(null) inode=11872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=9 name=(null) inode=11873 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=10 name=(null) inode=11872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=11 name=(null) inode=11874 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=12 name=(null) inode=11872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=13 name=(null) inode=11875 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=14 name=(null) inode=11872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=15 name=(null) inode=11876 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=16 name=(null) inode=11872 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=17 name=(null) inode=11877 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=18 name=(null) inode=11869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=19 name=(null) inode=11878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=20 name=(null) inode=11878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=21 name=(null) inode=11879 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=22 name=(null) inode=11878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=23 name=(null) inode=11880 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=24 name=(null) inode=11878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=25 name=(null) inode=11881 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=26 name=(null) inode=11878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=27 name=(null) inode=11882 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=28 name=(null) inode=11878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=29 name=(null) inode=11883 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=30 name=(null) inode=11869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=31 name=(null) inode=11884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=32 name=(null) inode=11884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=33 name=(null) inode=11885 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=34 name=(null) inode=11884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=35 name=(null) inode=11886 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=36 name=(null) inode=11884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=37 name=(null) inode=11887 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=38 name=(null) inode=11884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=39 name=(null) inode=11888 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=40 name=(null) inode=11884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=41 name=(null) inode=11889 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=42 name=(null) inode=11869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=43 name=(null) inode=11890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=44 name=(null) inode=11890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=45 name=(null) inode=11891 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=46 name=(null) inode=11890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=47 name=(null) inode=11892 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=48 name=(null) inode=11890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=49 name=(null) inode=11893 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=50 name=(null) inode=11890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=51 name=(null) inode=11894 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=52 name=(null) inode=11890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=53 name=(null) inode=11895 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=54 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=55 name=(null) inode=11896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=56 name=(null) inode=11896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=57 name=(null) inode=11897 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=58 name=(null) inode=11896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=59 name=(null) inode=11898 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=60 name=(null) inode=11896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=61 name=(null) inode=11899 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=62 name=(null) inode=11899 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=63 name=(null) inode=11900 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=64 name=(null) inode=11899 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=65 name=(null) inode=11901 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=66 name=(null) inode=11899 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=67 name=(null) inode=11902 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=68 name=(null) inode=11899 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=69 name=(null) inode=11903 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=70 name=(null) inode=11899 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=71 name=(null) inode=11904 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=72 name=(null) inode=11896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=73 name=(null) inode=11905 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=74 name=(null) inode=11905 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=75 name=(null) inode=11906 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=76 name=(null) inode=11905 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=77 name=(null) inode=11907 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=78 name=(null) inode=11905 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=79 name=(null) inode=11908 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=80 name=(null) inode=11905 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=81 name=(null) inode=11909 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=82 name=(null) inode=11905 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=83 name=(null) inode=11910 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=84 name=(null) inode=11896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=85 name=(null) inode=11911 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=86 name=(null) inode=11911 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=87 name=(null) inode=11912 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=88 name=(null) inode=11911 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=89 name=(null) inode=11913 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=90 name=(null) inode=11911 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=91 name=(null) inode=11914 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=92 name=(null) inode=11911 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=93 name=(null) inode=11915 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=94 name=(null) inode=11911 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=95 name=(null) inode=11916 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=96 name=(null) inode=11896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=97 name=(null) inode=11917 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=98 name=(null) inode=11917 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=99 name=(null) inode=11918 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=100 name=(null) inode=11917 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=101 name=(null) inode=11919 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=102 name=(null) inode=11917 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=103 name=(null) inode=11920 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=104 name=(null) inode=11917 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=105 name=(null) inode=11921 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=106 name=(null) inode=11917 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=107 name=(null) inode=11922 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PATH item=109 name=(null) inode=11923 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:18:51.410000 audit: PROCTITLE proctitle="(udev-worker)" Oct 31 01:18:51.439798 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 31 01:18:51.440938 systemd-networkd[1020]: eth0: DHCPv4 address 10.0.0.131/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 31 01:18:51.443970 kernel: ACPI: button: Power Button [PWRF] Oct 31 01:18:51.451796 kernel: mousedev: PS/2 mouse device common for all mice Oct 31 01:18:51.476363 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Oct 31 01:18:51.488094 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Oct 31 01:18:51.488256 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Oct 31 01:18:51.488386 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Oct 31 01:18:51.628696 kernel: kvm: Nested Virtualization enabled Oct 31 01:18:51.628798 kernel: SVM: kvm: Nested Paging enabled Oct 31 01:18:51.628814 kernel: SVM: Virtual VMLOAD VMSAVE supported Oct 31 01:18:51.629829 kernel: SVM: Virtual GIF supported Oct 31 01:18:51.644797 kernel: EDAC MC: Ver: 3.0.0 Oct 31 01:18:51.669270 systemd[1]: Finished systemd-udev-settle.service. Oct 31 01:18:51.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.672080 systemd[1]: Starting lvm2-activation-early.service... Oct 31 01:18:51.680808 lvm[1053]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 31 01:18:51.709934 systemd[1]: Finished lvm2-activation-early.service. Oct 31 01:18:51.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.711749 systemd[1]: Reached target cryptsetup.target. Oct 31 01:18:51.714261 systemd[1]: Starting lvm2-activation.service... Oct 31 01:18:51.717753 lvm[1054]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 31 01:18:51.837405 systemd[1]: Finished lvm2-activation.service. Oct 31 01:18:51.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.839002 systemd[1]: Reached target local-fs-pre.target. Oct 31 01:18:51.840455 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 31 01:18:51.840480 systemd[1]: Reached target local-fs.target. Oct 31 01:18:51.841822 systemd[1]: Reached target machines.target. Oct 31 01:18:51.844370 systemd[1]: Starting ldconfig.service... Oct 31 01:18:51.846223 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 01:18:51.846278 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 01:18:51.847362 systemd[1]: Starting systemd-boot-update.service... Oct 31 01:18:51.850124 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 31 01:18:51.853725 systemd[1]: Starting systemd-machine-id-commit.service... Oct 31 01:18:51.856782 systemd[1]: Starting systemd-sysext.service... Oct 31 01:18:51.858881 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1056 (bootctl) Oct 31 01:18:51.859327 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 31 01:18:51.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.866748 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 31 01:18:51.871378 systemd[1]: Unmounting usr-share-oem.mount... Oct 31 01:18:51.876508 systemd[1]: usr-share-oem.mount: Deactivated successfully. Oct 31 01:18:51.876646 systemd[1]: Unmounted usr-share-oem.mount. Oct 31 01:18:51.887793 kernel: loop0: detected capacity change from 0 to 229808 Oct 31 01:18:51.908441 systemd-fsck[1065]: fsck.fat 4.2 (2021-01-31) Oct 31 01:18:51.908441 systemd-fsck[1065]: /dev/vda1: 791 files, 120792/258078 clusters Oct 31 01:18:51.909896 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 31 01:18:51.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:51.913827 systemd[1]: Mounting boot.mount... Oct 31 01:18:51.939558 systemd[1]: Mounted boot.mount. Oct 31 01:18:52.512666 systemd[1]: Finished systemd-boot-update.service. Oct 31 01:18:52.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.518831 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Oct 31 01:18:52.541800 kernel: loop1: detected capacity change from 0 to 229808 Oct 31 01:18:52.563837 (sd-sysext)[1069]: Using extensions 'kubernetes'. Oct 31 01:18:52.564714 (sd-sysext)[1069]: Merged extensions into '/usr'. Oct 31 01:18:52.629246 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 31 01:18:52.631320 systemd[1]: Finished systemd-machine-id-commit.service. Oct 31 01:18:52.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.633377 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:52.635200 systemd[1]: Mounting usr-share-oem.mount... Oct 31 01:18:52.636698 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 01:18:52.638432 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 01:18:52.641313 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 01:18:52.644106 systemd[1]: Starting modprobe@loop.service... Oct 31 01:18:52.645507 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 01:18:52.645638 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 01:18:52.645738 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:52.646638 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 01:18:52.646786 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 01:18:52.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.648701 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 01:18:52.648978 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 01:18:52.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.653094 systemd[1]: Mounted usr-share-oem.mount. Oct 31 01:18:52.654875 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 31 01:18:52.655036 systemd[1]: Finished modprobe@loop.service. Oct 31 01:18:52.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.656891 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 31 01:18:52.656988 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 31 01:18:52.657887 systemd[1]: Finished systemd-sysext.service. Oct 31 01:18:52.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.660880 systemd[1]: Starting ensure-sysext.service... Oct 31 01:18:52.663050 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 31 01:18:52.669514 systemd[1]: Reloading. Oct 31 01:18:52.674826 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 31 01:18:52.675720 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 31 01:18:52.678144 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 31 01:18:52.733060 systemd-networkd[1020]: eth0: Gained IPv6LL Oct 31 01:18:52.742171 /usr/lib/systemd/system-generators/torcx-generator[1095]: time="2025-10-31T01:18:52Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 31 01:18:52.743304 /usr/lib/systemd/system-generators/torcx-generator[1095]: time="2025-10-31T01:18:52Z" level=info msg="torcx already run" Oct 31 01:18:52.804691 ldconfig[1055]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 31 01:18:52.848349 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 31 01:18:52.848368 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 31 01:18:52.866632 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 31 01:18:52.918000 audit: BPF prog-id=30 op=LOAD Oct 31 01:18:52.918000 audit: BPF prog-id=27 op=UNLOAD Oct 31 01:18:52.918000 audit: BPF prog-id=31 op=LOAD Oct 31 01:18:52.918000 audit: BPF prog-id=32 op=LOAD Oct 31 01:18:52.919000 audit: BPF prog-id=28 op=UNLOAD Oct 31 01:18:52.919000 audit: BPF prog-id=29 op=UNLOAD Oct 31 01:18:52.920000 audit: BPF prog-id=33 op=LOAD Oct 31 01:18:52.920000 audit: BPF prog-id=34 op=LOAD Oct 31 01:18:52.920000 audit: BPF prog-id=24 op=UNLOAD Oct 31 01:18:52.920000 audit: BPF prog-id=25 op=UNLOAD Oct 31 01:18:52.921000 audit: BPF prog-id=35 op=LOAD Oct 31 01:18:52.921000 audit: BPF prog-id=21 op=UNLOAD Oct 31 01:18:52.922000 audit: BPF prog-id=36 op=LOAD Oct 31 01:18:52.922000 audit: BPF prog-id=37 op=LOAD Oct 31 01:18:52.922000 audit: BPF prog-id=22 op=UNLOAD Oct 31 01:18:52.922000 audit: BPF prog-id=23 op=UNLOAD Oct 31 01:18:52.923000 audit: BPF prog-id=38 op=LOAD Oct 31 01:18:52.923000 audit: BPF prog-id=26 op=UNLOAD Oct 31 01:18:52.928320 systemd[1]: Finished ldconfig.service. Oct 31 01:18:52.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.931837 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 31 01:18:52.937101 systemd[1]: Starting audit-rules.service... Oct 31 01:18:52.939658 systemd[1]: Starting clean-ca-certificates.service... Oct 31 01:18:52.942475 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 31 01:18:52.945000 audit: BPF prog-id=39 op=LOAD Oct 31 01:18:52.947627 systemd[1]: Starting systemd-resolved.service... Oct 31 01:18:52.949000 audit: BPF prog-id=40 op=LOAD Oct 31 01:18:52.951205 systemd[1]: Starting systemd-timesyncd.service... Oct 31 01:18:52.953976 systemd[1]: Starting systemd-update-utmp.service... Oct 31 01:18:52.957621 systemd[1]: Finished clean-ca-certificates.service. Oct 31 01:18:52.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.959000 audit[1150]: SYSTEM_BOOT pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.970396 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 31 01:18:52.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:18:52.974150 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:52.974585 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 01:18:52.976731 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 01:18:52.980970 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 01:18:52.985085 systemd[1]: Starting modprobe@loop.service... Oct 31 01:18:52.986834 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 01:18:52.987005 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 01:18:52.989295 systemd[1]: Starting systemd-update-done.service... Oct 31 01:18:52.991191 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 31 01:18:52.991365 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:52.991000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 31 01:18:52.991000 audit[1163]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffffbc42d0 a2=420 a3=0 items=0 ppid=1139 pid=1163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:18:52.991000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 31 01:18:52.993028 augenrules[1163]: No rules Oct 31 01:18:52.994157 systemd[1]: Finished audit-rules.service. Oct 31 01:18:52.996672 systemd[1]: Finished systemd-update-utmp.service. Oct 31 01:18:52.999288 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 01:18:52.999467 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 01:18:53.002086 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 01:18:53.002278 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 01:18:53.004856 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 31 01:18:53.005049 systemd[1]: Finished modprobe@loop.service. Oct 31 01:18:53.007557 systemd[1]: Finished systemd-update-done.service. Oct 31 01:18:53.013436 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:53.013718 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 01:18:53.015983 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 01:18:53.022714 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 01:18:53.026824 systemd[1]: Starting modprobe@loop.service... Oct 31 01:18:53.028516 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 01:18:53.028695 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 01:18:53.028845 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 31 01:18:53.028929 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:53.030246 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 01:18:53.030392 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 01:18:53.032462 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 01:18:53.032644 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 01:18:53.035008 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 31 01:18:53.035178 systemd[1]: Finished modprobe@loop.service. Oct 31 01:18:53.036747 systemd-resolved[1148]: Positive Trust Anchors: Oct 31 01:18:53.036771 systemd-resolved[1148]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 31 01:18:53.036799 systemd-resolved[1148]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 31 01:18:53.037099 systemd[1]: Started systemd-timesyncd.service. Oct 31 01:18:53.037721 systemd-timesyncd[1149]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 31 01:18:53.037780 systemd-timesyncd[1149]: Initial clock synchronization to Fri 2025-10-31 01:18:53.406444 UTC. Oct 31 01:18:53.043674 systemd[1]: Reached target time-set.target. Oct 31 01:18:53.045735 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:53.046071 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 01:18:53.047984 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 01:18:53.052189 systemd-resolved[1148]: Defaulting to hostname 'linux'. Oct 31 01:18:53.053231 systemd[1]: Starting modprobe@drm.service... Oct 31 01:18:53.057237 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 01:18:53.060701 systemd[1]: Starting modprobe@loop.service... Oct 31 01:18:53.062373 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 01:18:53.062547 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 01:18:53.064510 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 31 01:18:53.066566 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 31 01:18:53.066718 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 31 01:18:53.068314 systemd[1]: Started systemd-resolved.service. Oct 31 01:18:53.070966 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 01:18:53.071167 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 01:18:53.073429 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 31 01:18:53.073599 systemd[1]: Finished modprobe@drm.service. Oct 31 01:18:53.075761 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 01:18:53.075936 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 01:18:53.078147 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 31 01:18:53.078305 systemd[1]: Finished modprobe@loop.service. Oct 31 01:18:53.080523 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 31 01:18:53.083456 systemd[1]: Reached target network.target. Oct 31 01:18:53.085186 systemd[1]: Reached target network-online.target. Oct 31 01:18:53.087156 systemd[1]: Reached target nss-lookup.target. Oct 31 01:18:53.088901 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 31 01:18:53.088955 systemd[1]: Reached target sysinit.target. Oct 31 01:18:53.090797 systemd[1]: Started motdgen.path. Oct 31 01:18:53.092311 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 31 01:18:53.094407 systemd[1]: Started logrotate.timer. Oct 31 01:18:53.095689 systemd[1]: Started mdadm.timer. Oct 31 01:18:53.096856 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 31 01:18:53.098341 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 31 01:18:53.098371 systemd[1]: Reached target paths.target. Oct 31 01:18:53.099635 systemd[1]: Reached target timers.target. Oct 31 01:18:53.101272 systemd[1]: Listening on dbus.socket. Oct 31 01:18:53.106211 systemd[1]: Starting docker.socket... Oct 31 01:18:53.110871 systemd[1]: Listening on sshd.socket. Oct 31 01:18:53.112590 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 01:18:53.112660 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 31 01:18:53.113489 systemd[1]: Finished ensure-sysext.service. Oct 31 01:18:53.115394 systemd[1]: Listening on docker.socket. Oct 31 01:18:53.118080 systemd[1]: Reached target sockets.target. Oct 31 01:18:53.129977 systemd[1]: Reached target basic.target. Oct 31 01:18:53.131413 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 31 01:18:53.131437 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 31 01:18:53.132593 systemd[1]: Starting containerd.service... Oct 31 01:18:53.135225 systemd[1]: Starting dbus.service... Oct 31 01:18:53.137657 systemd[1]: Starting enable-oem-cloudinit.service... Oct 31 01:18:53.140309 systemd[1]: Starting extend-filesystems.service... Oct 31 01:18:53.141919 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 31 01:18:53.142245 jq[1181]: false Oct 31 01:18:53.143076 systemd[1]: Starting kubelet.service... Oct 31 01:18:53.145540 systemd[1]: Starting motdgen.service... Oct 31 01:18:53.148229 systemd[1]: Starting prepare-helm.service... Oct 31 01:18:53.151020 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 31 01:18:53.154714 systemd[1]: Starting sshd-keygen.service... Oct 31 01:18:53.158987 dbus-daemon[1180]: [system] SELinux support is enabled Oct 31 01:18:53.161834 systemd[1]: Starting systemd-logind.service... Oct 31 01:18:53.163796 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 01:18:53.165469 extend-filesystems[1182]: Found loop1 Oct 31 01:18:53.165469 extend-filesystems[1182]: Found sr0 Oct 31 01:18:53.165469 extend-filesystems[1182]: Found vda Oct 31 01:18:53.165469 extend-filesystems[1182]: Found vda1 Oct 31 01:18:53.165469 extend-filesystems[1182]: Found vda2 Oct 31 01:18:53.165469 extend-filesystems[1182]: Found vda3 Oct 31 01:18:53.165469 extend-filesystems[1182]: Found usr Oct 31 01:18:53.165469 extend-filesystems[1182]: Found vda4 Oct 31 01:18:53.165469 extend-filesystems[1182]: Found vda6 Oct 31 01:18:53.165469 extend-filesystems[1182]: Found vda7 Oct 31 01:18:53.165469 extend-filesystems[1182]: Found vda9 Oct 31 01:18:53.165469 extend-filesystems[1182]: Checking size of /dev/vda9 Oct 31 01:18:53.163950 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 31 01:18:53.164679 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 31 01:18:53.313330 update_engine[1201]: I1031 01:18:53.222899 1201 main.cc:92] Flatcar Update Engine starting Oct 31 01:18:53.167267 systemd[1]: Starting update-engine.service... Oct 31 01:18:53.314046 jq[1203]: true Oct 31 01:18:53.171518 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 31 01:18:53.173680 systemd[1]: Started dbus.service. Oct 31 01:18:53.190499 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 31 01:18:53.314691 tar[1206]: linux-amd64/LICENSE Oct 31 01:18:53.314691 tar[1206]: linux-amd64/helm Oct 31 01:18:53.190852 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 31 01:18:53.192836 systemd[1]: motdgen.service: Deactivated successfully. Oct 31 01:18:53.193019 systemd[1]: Finished motdgen.service. Oct 31 01:18:53.323445 extend-filesystems[1182]: Resized partition /dev/vda9 Oct 31 01:18:53.199718 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 31 01:18:53.335842 jq[1207]: true Oct 31 01:18:53.336133 extend-filesystems[1212]: resize2fs 1.46.5 (30-Dec-2021) Oct 31 01:18:53.343359 update_engine[1201]: I1031 01:18:53.330629 1201 update_check_scheduler.cc:74] Next update check in 6m55s Oct 31 01:18:53.199940 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 31 01:18:53.206840 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 31 01:18:53.206867 systemd[1]: Reached target system-config.target. Oct 31 01:18:53.210380 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 31 01:18:53.210397 systemd[1]: Reached target user-config.target. Oct 31 01:18:53.322409 systemd[1]: Started update-engine.service. Oct 31 01:18:53.329606 systemd[1]: Started locksmithd.service. Oct 31 01:18:53.345816 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Oct 31 01:18:53.381805 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Oct 31 01:18:53.421539 extend-filesystems[1212]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Oct 31 01:18:53.421539 extend-filesystems[1212]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 31 01:18:53.421539 extend-filesystems[1212]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Oct 31 01:18:53.430283 extend-filesystems[1182]: Resized filesystem in /dev/vda9 Oct 31 01:18:53.423441 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 31 01:18:53.423642 systemd[1]: Finished extend-filesystems.service. Oct 31 01:18:53.433293 systemd-logind[1196]: Watching system buttons on /dev/input/event1 (Power Button) Oct 31 01:18:53.433320 systemd-logind[1196]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 31 01:18:53.436880 systemd-logind[1196]: New seat seat0. Oct 31 01:18:53.439548 bash[1233]: Updated "/home/core/.ssh/authorized_keys" Oct 31 01:18:53.441070 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 31 01:18:53.449817 systemd[1]: Started systemd-logind.service. Oct 31 01:18:53.455533 env[1208]: time="2025-10-31T01:18:53.453022611Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 31 01:18:53.520828 env[1208]: time="2025-10-31T01:18:53.482105132Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 31 01:18:53.520828 env[1208]: time="2025-10-31T01:18:53.482719955Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 31 01:18:53.522923 env[1208]: time="2025-10-31T01:18:53.522846827Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 31 01:18:53.523173 env[1208]: time="2025-10-31T01:18:53.523146038Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 31 01:18:53.523638 env[1208]: time="2025-10-31T01:18:53.523604969Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 31 01:18:53.523750 env[1208]: time="2025-10-31T01:18:53.523726046Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 31 01:18:53.523868 env[1208]: time="2025-10-31T01:18:53.523841392Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 31 01:18:53.523966 env[1208]: time="2025-10-31T01:18:53.523940618Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 31 01:18:53.524205 env[1208]: time="2025-10-31T01:18:53.524171882Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 31 01:18:53.524644 env[1208]: time="2025-10-31T01:18:53.524617938Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 31 01:18:53.524956 env[1208]: time="2025-10-31T01:18:53.524925615Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 31 01:18:53.525081 env[1208]: time="2025-10-31T01:18:53.525041493Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 31 01:18:53.525284 env[1208]: time="2025-10-31T01:18:53.525257438Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 31 01:18:53.525389 env[1208]: time="2025-10-31T01:18:53.525364268Z" level=info msg="metadata content store policy set" policy=shared Oct 31 01:18:53.536890 env[1208]: time="2025-10-31T01:18:53.536843425Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 31 01:18:53.537126 env[1208]: time="2025-10-31T01:18:53.537100127Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 31 01:18:53.537259 env[1208]: time="2025-10-31T01:18:53.537234900Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 31 01:18:53.537453 env[1208]: time="2025-10-31T01:18:53.537427781Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 31 01:18:53.537633 env[1208]: time="2025-10-31T01:18:53.537608941Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 31 01:18:53.537778 env[1208]: time="2025-10-31T01:18:53.537735989Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 31 01:18:53.537895 env[1208]: time="2025-10-31T01:18:53.537870782Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 31 01:18:53.538044 env[1208]: time="2025-10-31T01:18:53.538019331Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 31 01:18:53.538177 env[1208]: time="2025-10-31T01:18:53.538151929Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 31 01:18:53.538311 env[1208]: time="2025-10-31T01:18:53.538286161Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 31 01:18:53.538444 env[1208]: time="2025-10-31T01:18:53.538419241Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 31 01:18:53.538584 env[1208]: time="2025-10-31T01:18:53.538558432Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 31 01:18:53.538957 env[1208]: time="2025-10-31T01:18:53.538931992Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 31 01:18:53.539243 env[1208]: time="2025-10-31T01:18:53.539218049Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 31 01:18:53.540016 env[1208]: time="2025-10-31T01:18:53.539961413Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 31 01:18:53.540185 env[1208]: time="2025-10-31T01:18:53.540145508Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.540302 env[1208]: time="2025-10-31T01:18:53.540276574Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 31 01:18:53.540552 env[1208]: time="2025-10-31T01:18:53.540513969Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.540788 env[1208]: time="2025-10-31T01:18:53.540739692Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.540908 env[1208]: time="2025-10-31T01:18:53.540884604Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.541064 env[1208]: time="2025-10-31T01:18:53.541038262Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.541194 env[1208]: time="2025-10-31T01:18:53.541169408Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.541322 env[1208]: time="2025-10-31T01:18:53.541297458Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.541448 env[1208]: time="2025-10-31T01:18:53.541423875Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.541575 env[1208]: time="2025-10-31T01:18:53.541551445Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.541736 env[1208]: time="2025-10-31T01:18:53.541711976Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 31 01:18:53.542182 env[1208]: time="2025-10-31T01:18:53.542141902Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.542306 env[1208]: time="2025-10-31T01:18:53.542284570Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.542416 env[1208]: time="2025-10-31T01:18:53.542396840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.542521 env[1208]: time="2025-10-31T01:18:53.542501957Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 31 01:18:53.542638 env[1208]: time="2025-10-31T01:18:53.542614839Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 31 01:18:53.542749 env[1208]: time="2025-10-31T01:18:53.542728813Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 31 01:18:53.542916 env[1208]: time="2025-10-31T01:18:53.542877732Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 31 01:18:53.543090 env[1208]: time="2025-10-31T01:18:53.543046839Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 31 01:18:53.543663 env[1208]: time="2025-10-31T01:18:53.543554772Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 31 01:18:53.545338 env[1208]: time="2025-10-31T01:18:53.543860735Z" level=info msg="Connect containerd service" Oct 31 01:18:53.545338 env[1208]: time="2025-10-31T01:18:53.543929975Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 31 01:18:53.546276 env[1208]: time="2025-10-31T01:18:53.546245257Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 31 01:18:53.546756 env[1208]: time="2025-10-31T01:18:53.546483394Z" level=info msg="Start subscribing containerd event" Oct 31 01:18:53.548100 env[1208]: time="2025-10-31T01:18:53.548069268Z" level=info msg="Start recovering state" Oct 31 01:18:53.548316 env[1208]: time="2025-10-31T01:18:53.548293488Z" level=info msg="Start event monitor" Oct 31 01:18:53.548449 env[1208]: time="2025-10-31T01:18:53.548423602Z" level=info msg="Start snapshots syncer" Oct 31 01:18:53.548574 env[1208]: time="2025-10-31T01:18:53.548549509Z" level=info msg="Start cni network conf syncer for default" Oct 31 01:18:53.548669 env[1208]: time="2025-10-31T01:18:53.548645228Z" level=info msg="Start streaming server" Oct 31 01:18:53.550364 env[1208]: time="2025-10-31T01:18:53.550343884Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 31 01:18:53.550571 env[1208]: time="2025-10-31T01:18:53.550548247Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 31 01:18:53.554838 systemd[1]: Started containerd.service. Oct 31 01:18:53.555907 env[1208]: time="2025-10-31T01:18:53.555876559Z" level=info msg="containerd successfully booted in 0.104074s" Oct 31 01:18:53.770466 sshd_keygen[1202]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 31 01:18:53.796111 systemd[1]: Finished sshd-keygen.service. Oct 31 01:18:53.799615 systemd[1]: Starting issuegen.service... Oct 31 01:18:53.809632 systemd[1]: issuegen.service: Deactivated successfully. Oct 31 01:18:53.809951 systemd[1]: Finished issuegen.service. Oct 31 01:18:53.814323 systemd[1]: Starting systemd-user-sessions.service... Oct 31 01:18:53.834639 systemd[1]: Finished systemd-user-sessions.service. Oct 31 01:18:53.839074 systemd[1]: Started getty@tty1.service. Oct 31 01:18:53.841759 systemd[1]: Started serial-getty@ttyS0.service. Oct 31 01:18:53.843631 systemd[1]: Reached target getty.target. Oct 31 01:18:53.868053 locksmithd[1218]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 31 01:18:54.326037 tar[1206]: linux-amd64/README.md Oct 31 01:18:54.331019 systemd[1]: Finished prepare-helm.service. Oct 31 01:18:55.421229 systemd[1]: Started kubelet.service. Oct 31 01:18:55.424138 systemd[1]: Reached target multi-user.target. Oct 31 01:18:55.427316 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 31 01:18:55.441685 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 31 01:18:55.441938 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 31 01:18:55.444047 systemd[1]: Startup finished in 1.030s (kernel) + 5.278s (initrd) + 12.288s (userspace) = 18.597s. Oct 31 01:18:56.323074 kubelet[1262]: E1031 01:18:56.322996 1262 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 31 01:18:56.325058 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 31 01:18:56.325240 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 31 01:18:56.325570 systemd[1]: kubelet.service: Consumed 2.583s CPU time. Oct 31 01:19:02.330743 systemd[1]: Created slice system-sshd.slice. Oct 31 01:19:02.331883 systemd[1]: Started sshd@0-10.0.0.131:22-10.0.0.1:48882.service. Oct 31 01:19:02.374952 sshd[1272]: Accepted publickey for core from 10.0.0.1 port 48882 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:19:02.376335 sshd[1272]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:19:02.385231 systemd-logind[1196]: New session 1 of user core. Oct 31 01:19:02.386335 systemd[1]: Created slice user-500.slice. Oct 31 01:19:02.387432 systemd[1]: Starting user-runtime-dir@500.service... Oct 31 01:19:02.395153 systemd[1]: Finished user-runtime-dir@500.service. Oct 31 01:19:02.396523 systemd[1]: Starting user@500.service... Oct 31 01:19:02.399434 (systemd)[1275]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:19:02.468513 systemd[1275]: Queued start job for default target default.target. Oct 31 01:19:02.468987 systemd[1275]: Reached target paths.target. Oct 31 01:19:02.469006 systemd[1275]: Reached target sockets.target. Oct 31 01:19:02.469017 systemd[1275]: Reached target timers.target. Oct 31 01:19:02.469027 systemd[1275]: Reached target basic.target. Oct 31 01:19:02.469065 systemd[1275]: Reached target default.target. Oct 31 01:19:02.469094 systemd[1275]: Startup finished in 64ms. Oct 31 01:19:02.469176 systemd[1]: Started user@500.service. Oct 31 01:19:02.470279 systemd[1]: Started session-1.scope. Oct 31 01:19:02.523083 systemd[1]: Started sshd@1-10.0.0.131:22-10.0.0.1:48886.service. Oct 31 01:19:02.565373 sshd[1284]: Accepted publickey for core from 10.0.0.1 port 48886 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:19:02.566760 sshd[1284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:19:02.570372 systemd-logind[1196]: New session 2 of user core. Oct 31 01:19:02.571378 systemd[1]: Started session-2.scope. Oct 31 01:19:02.629045 sshd[1284]: pam_unix(sshd:session): session closed for user core Oct 31 01:19:02.631548 systemd[1]: sshd@1-10.0.0.131:22-10.0.0.1:48886.service: Deactivated successfully. Oct 31 01:19:02.632077 systemd[1]: session-2.scope: Deactivated successfully. Oct 31 01:19:02.632634 systemd-logind[1196]: Session 2 logged out. Waiting for processes to exit. Oct 31 01:19:02.633657 systemd[1]: Started sshd@2-10.0.0.131:22-10.0.0.1:48888.service. Oct 31 01:19:02.634502 systemd-logind[1196]: Removed session 2. Oct 31 01:19:02.675166 sshd[1290]: Accepted publickey for core from 10.0.0.1 port 48888 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:19:02.676567 sshd[1290]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:19:02.680030 systemd-logind[1196]: New session 3 of user core. Oct 31 01:19:02.680754 systemd[1]: Started session-3.scope. Oct 31 01:19:02.731368 sshd[1290]: pam_unix(sshd:session): session closed for user core Oct 31 01:19:02.734889 systemd[1]: Started sshd@3-10.0.0.131:22-10.0.0.1:48894.service. Oct 31 01:19:02.735443 systemd[1]: sshd@2-10.0.0.131:22-10.0.0.1:48888.service: Deactivated successfully. Oct 31 01:19:02.736057 systemd[1]: session-3.scope: Deactivated successfully. Oct 31 01:19:02.736533 systemd-logind[1196]: Session 3 logged out. Waiting for processes to exit. Oct 31 01:19:02.737177 systemd-logind[1196]: Removed session 3. Oct 31 01:19:02.775137 sshd[1296]: Accepted publickey for core from 10.0.0.1 port 48894 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:19:02.776703 sshd[1296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:19:02.780293 systemd-logind[1196]: New session 4 of user core. Oct 31 01:19:02.781217 systemd[1]: Started session-4.scope. Oct 31 01:19:02.835528 sshd[1296]: pam_unix(sshd:session): session closed for user core Oct 31 01:19:02.838262 systemd[1]: sshd@3-10.0.0.131:22-10.0.0.1:48894.service: Deactivated successfully. Oct 31 01:19:02.838806 systemd[1]: session-4.scope: Deactivated successfully. Oct 31 01:19:02.839280 systemd-logind[1196]: Session 4 logged out. Waiting for processes to exit. Oct 31 01:19:02.840466 systemd[1]: Started sshd@4-10.0.0.131:22-10.0.0.1:48898.service. Oct 31 01:19:02.841175 systemd-logind[1196]: Removed session 4. Oct 31 01:19:02.881955 sshd[1304]: Accepted publickey for core from 10.0.0.1 port 48898 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:19:02.883197 sshd[1304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:19:02.886653 systemd-logind[1196]: New session 5 of user core. Oct 31 01:19:02.887498 systemd[1]: Started session-5.scope. Oct 31 01:19:02.945302 sudo[1307]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 31 01:19:02.945510 sudo[1307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 31 01:19:02.955983 dbus-daemon[1180]: \xd0]\x8d9\xd4U: received setenforce notice (enforcing=413308480) Oct 31 01:19:02.957632 sudo[1307]: pam_unix(sudo:session): session closed for user root Oct 31 01:19:02.959203 sshd[1304]: pam_unix(sshd:session): session closed for user core Oct 31 01:19:02.962465 systemd[1]: sshd@4-10.0.0.131:22-10.0.0.1:48898.service: Deactivated successfully. Oct 31 01:19:02.963157 systemd[1]: session-5.scope: Deactivated successfully. Oct 31 01:19:02.963739 systemd-logind[1196]: Session 5 logged out. Waiting for processes to exit. Oct 31 01:19:02.964869 systemd[1]: Started sshd@5-10.0.0.131:22-10.0.0.1:48914.service. Oct 31 01:19:02.965638 systemd-logind[1196]: Removed session 5. Oct 31 01:19:03.005095 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 48914 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:19:03.006435 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:19:03.009769 systemd-logind[1196]: New session 6 of user core. Oct 31 01:19:03.010724 systemd[1]: Started session-6.scope. Oct 31 01:19:03.063668 sudo[1315]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 31 01:19:03.063909 sudo[1315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 31 01:19:03.066228 sudo[1315]: pam_unix(sudo:session): session closed for user root Oct 31 01:19:03.070121 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 31 01:19:03.070300 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 31 01:19:03.078199 systemd[1]: Stopping audit-rules.service... Oct 31 01:19:03.078000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 31 01:19:03.079102 auditctl[1318]: No rules Oct 31 01:19:03.079318 systemd[1]: audit-rules.service: Deactivated successfully. Oct 31 01:19:03.079443 systemd[1]: Stopped audit-rules.service. Oct 31 01:19:03.080943 systemd[1]: Starting audit-rules.service... Oct 31 01:19:03.084514 kernel: kauditd_printk_skb: 218 callbacks suppressed Oct 31 01:19:03.084598 kernel: audit: type=1305 audit(1761873543.078:197): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 31 01:19:03.078000 audit[1318]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffe88a3a30 a2=420 a3=0 items=0 ppid=1 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:03.096508 kernel: audit: type=1300 audit(1761873543.078:197): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffe88a3a30 a2=420 a3=0 items=0 ppid=1 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:03.096556 kernel: audit: type=1327 audit(1761873543.078:197): proctitle=2F7362696E2F617564697463746C002D44 Oct 31 01:19:03.078000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 31 01:19:03.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.104692 kernel: audit: type=1131 audit(1761873543.078:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.106502 augenrules[1335]: No rules Oct 31 01:19:03.107033 systemd[1]: Finished audit-rules.service. Oct 31 01:19:03.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.111305 systemd[1]: sshd@5-10.0.0.131:22-10.0.0.1:48914.service: Deactivated successfully. Oct 31 01:19:03.107883 sudo[1314]: pam_unix(sudo:session): session closed for user root Oct 31 01:19:03.111808 systemd[1]: session-6.scope: Deactivated successfully. Oct 31 01:19:03.109197 sshd[1311]: pam_unix(sshd:session): session closed for user core Oct 31 01:19:03.107000 audit[1314]: USER_END pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.113375 systemd[1]: Started sshd@6-10.0.0.131:22-10.0.0.1:48928.service. Oct 31 01:19:03.114013 systemd-logind[1196]: Session 6 logged out. Waiting for processes to exit. Oct 31 01:19:03.115314 systemd-logind[1196]: Removed session 6. Oct 31 01:19:03.119645 kernel: audit: type=1130 audit(1761873543.106:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.119705 kernel: audit: type=1106 audit(1761873543.107:200): pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.119766 kernel: audit: type=1104 audit(1761873543.107:201): pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.107000 audit[1314]: CRED_DISP pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.109000 audit[1311]: USER_END pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:03.134144 kernel: audit: type=1106 audit(1761873543.109:202): pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:03.134194 kernel: audit: type=1104 audit(1761873543.109:203): pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:03.109000 audit[1311]: CRED_DISP pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:03.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.131:22-10.0.0.1:48914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.171480 kernel: audit: type=1131 audit(1761873543.110:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.131:22-10.0.0.1:48914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.131:22-10.0.0.1:48928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.177000 audit[1341]: USER_ACCT pid=1341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:03.178202 sshd[1341]: Accepted publickey for core from 10.0.0.1 port 48928 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:19:03.178000 audit[1341]: CRED_ACQ pid=1341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:03.178000 audit[1341]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf87da650 a2=3 a3=0 items=0 ppid=1 pid=1341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:03.178000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:19:03.179511 sshd[1341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:19:03.183060 systemd-logind[1196]: New session 7 of user core. Oct 31 01:19:03.183888 systemd[1]: Started session-7.scope. Oct 31 01:19:03.186000 audit[1341]: USER_START pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:03.187000 audit[1343]: CRED_ACQ pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:03.234000 audit[1344]: USER_ACCT pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.234000 audit[1344]: CRED_REFR pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.236339 sudo[1344]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 31 01:19:03.236562 sudo[1344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 31 01:19:03.236000 audit[1344]: USER_START pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:03.264834 systemd[1]: Starting docker.service... Oct 31 01:19:03.505252 env[1356]: time="2025-10-31T01:19:03.505111139Z" level=info msg="Starting up" Oct 31 01:19:03.506625 env[1356]: time="2025-10-31T01:19:03.506595711Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 31 01:19:03.506625 env[1356]: time="2025-10-31T01:19:03.506612370Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 31 01:19:03.506705 env[1356]: time="2025-10-31T01:19:03.506638261Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 31 01:19:03.506705 env[1356]: time="2025-10-31T01:19:03.506647819Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 31 01:19:03.508812 env[1356]: time="2025-10-31T01:19:03.508762765Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 31 01:19:03.508812 env[1356]: time="2025-10-31T01:19:03.508796021Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 31 01:19:03.508812 env[1356]: time="2025-10-31T01:19:03.508816631Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 31 01:19:03.509012 env[1356]: time="2025-10-31T01:19:03.508829328Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 31 01:19:04.140327 env[1356]: time="2025-10-31T01:19:04.140255377Z" level=info msg="Loading containers: start." Oct 31 01:19:04.191000 audit[1390]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.191000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff6c2f49a0 a2=0 a3=7fff6c2f498c items=0 ppid=1356 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.191000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 31 01:19:04.193000 audit[1392]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.193000 audit[1392]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc3166a070 a2=0 a3=7ffc3166a05c items=0 ppid=1356 pid=1392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.193000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 31 01:19:04.195000 audit[1394]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.195000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd0d730c50 a2=0 a3=7ffd0d730c3c items=0 ppid=1356 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.195000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 31 01:19:04.196000 audit[1396]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.196000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe770e3ee0 a2=0 a3=7ffe770e3ecc items=0 ppid=1356 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.196000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 31 01:19:04.198000 audit[1398]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.198000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffce79c3f00 a2=0 a3=7ffce79c3eec items=0 ppid=1356 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.198000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 31 01:19:04.228000 audit[1403]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.228000 audit[1403]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdcded4100 a2=0 a3=7ffdcded40ec items=0 ppid=1356 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.228000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 31 01:19:04.535000 audit[1405]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.535000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff153ae850 a2=0 a3=7fff153ae83c items=0 ppid=1356 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.535000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 31 01:19:04.536000 audit[1407]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.536000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd557b07a0 a2=0 a3=7ffd557b078c items=0 ppid=1356 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.536000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 31 01:19:04.538000 audit[1409]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.538000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fffd5e4ab60 a2=0 a3=7fffd5e4ab4c items=0 ppid=1356 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.538000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 31 01:19:04.634000 audit[1413]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.634000 audit[1413]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdfaf72530 a2=0 a3=7ffdfaf7251c items=0 ppid=1356 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.634000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 31 01:19:04.638000 audit[1414]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.638000 audit[1414]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff29bf94b0 a2=0 a3=7fff29bf949c items=0 ppid=1356 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.638000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 31 01:19:04.765447 kernel: Initializing XFRM netlink socket Oct 31 01:19:04.815156 env[1356]: time="2025-10-31T01:19:04.814955737Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 31 01:19:04.851000 audit[1422]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.851000 audit[1422]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fff4a3314b0 a2=0 a3=7fff4a33149c items=0 ppid=1356 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.851000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 31 01:19:04.874000 audit[1425]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.874000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffcf89036c0 a2=0 a3=7ffcf89036ac items=0 ppid=1356 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.874000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 31 01:19:04.887000 audit[1428]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.887000 audit[1428]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffedc770ff0 a2=0 a3=7ffedc770fdc items=0 ppid=1356 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.887000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 31 01:19:04.891000 audit[1430]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.891000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcfb612cf0 a2=0 a3=7ffcfb612cdc items=0 ppid=1356 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.891000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 31 01:19:04.898000 audit[1432]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.898000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffc781bdaa0 a2=0 a3=7ffc781bda8c items=0 ppid=1356 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.898000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 31 01:19:04.904000 audit[1434]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.904000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffcc4ec54d0 a2=0 a3=7ffcc4ec54bc items=0 ppid=1356 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.904000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 31 01:19:04.909000 audit[1436]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.909000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe5e9fb960 a2=0 a3=7ffe5e9fb94c items=0 ppid=1356 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.909000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 31 01:19:04.921000 audit[1439]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.921000 audit[1439]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff70410560 a2=0 a3=7fff7041054c items=0 ppid=1356 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.921000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 31 01:19:04.927000 audit[1441]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.927000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffea3fc9e50 a2=0 a3=7ffea3fc9e3c items=0 ppid=1356 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.927000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 31 01:19:04.932000 audit[1443]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.932000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffe1cc51d90 a2=0 a3=7ffe1cc51d7c items=0 ppid=1356 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.932000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 31 01:19:04.934000 audit[1445]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:04.934000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffea396b200 a2=0 a3=7ffea396b1ec items=0 ppid=1356 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:04.934000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 31 01:19:04.936042 systemd-networkd[1020]: docker0: Link UP Oct 31 01:19:05.049000 audit[1449]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:05.049000 audit[1449]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff8e26a730 a2=0 a3=7fff8e26a71c items=0 ppid=1356 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:05.049000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 31 01:19:05.057000 audit[1450]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:05.057000 audit[1450]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc01e2d740 a2=0 a3=7ffc01e2d72c items=0 ppid=1356 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:05.057000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 31 01:19:05.062461 env[1356]: time="2025-10-31T01:19:05.061093845Z" level=info msg="Loading containers: done." Oct 31 01:19:05.086568 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck218971956-merged.mount: Deactivated successfully. Oct 31 01:19:05.218523 env[1356]: time="2025-10-31T01:19:05.218352513Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 31 01:19:05.218967 env[1356]: time="2025-10-31T01:19:05.218924338Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 31 01:19:05.219147 env[1356]: time="2025-10-31T01:19:05.219108423Z" level=info msg="Daemon has completed initialization" Oct 31 01:19:05.459086 systemd[1]: Started docker.service. Oct 31 01:19:05.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:05.468043 env[1356]: time="2025-10-31T01:19:05.467971417Z" level=info msg="API listen on /run/docker.sock" Oct 31 01:19:06.515517 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 31 01:19:06.515793 systemd[1]: Stopped kubelet.service. Oct 31 01:19:06.515851 systemd[1]: kubelet.service: Consumed 2.583s CPU time. Oct 31 01:19:06.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:06.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:06.517830 systemd[1]: Starting kubelet.service... Oct 31 01:19:06.518734 env[1208]: time="2025-10-31T01:19:06.518684913Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\"" Oct 31 01:19:06.667575 systemd[1]: Started kubelet.service. Oct 31 01:19:06.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:07.095943 kubelet[1490]: E1031 01:19:07.095837 1490 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 31 01:19:07.102761 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 31 01:19:07.102936 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 31 01:19:07.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 31 01:19:07.820578 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1754226022.mount: Deactivated successfully. Oct 31 01:19:10.723189 env[1208]: time="2025-10-31T01:19:10.723118585Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:10.725177 env[1208]: time="2025-10-31T01:19:10.725132766Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:10.727319 env[1208]: time="2025-10-31T01:19:10.727272671Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:10.729224 env[1208]: time="2025-10-31T01:19:10.729180438Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:1b9c6c00bc1fe86860e72efb8e4148f9e436a132eba4ca636ca4f48d61d6dfb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:10.730070 env[1208]: time="2025-10-31T01:19:10.730038483Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\" returns image reference \"sha256:b7335a56022aba291f5df653c01b7ab98d64fb5cab221378617f4a1236e06a62\"" Oct 31 01:19:10.730868 env[1208]: time="2025-10-31T01:19:10.730828453Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\"" Oct 31 01:19:12.850277 env[1208]: time="2025-10-31T01:19:12.849883878Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:12.858234 env[1208]: time="2025-10-31T01:19:12.858096891Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:12.863648 env[1208]: time="2025-10-31T01:19:12.863542419Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:12.866312 env[1208]: time="2025-10-31T01:19:12.866244519Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:1082a6ab67fb46397314dd36b36cb197ba4a4c5365033e9ad22bc7edaaaabd5c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:12.867079 env[1208]: time="2025-10-31T01:19:12.867028165Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\" returns image reference \"sha256:8bb43160a0df4d7d34c89d9edbc48735bc2f830771e4b501937338221be0f668\"" Oct 31 01:19:12.868701 env[1208]: time="2025-10-31T01:19:12.867587662Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\"" Oct 31 01:19:15.570861 env[1208]: time="2025-10-31T01:19:15.570758420Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:15.573220 env[1208]: time="2025-10-31T01:19:15.573176654Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:15.575584 env[1208]: time="2025-10-31T01:19:15.575540616Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:15.579563 env[1208]: time="2025-10-31T01:19:15.579495592Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:3e7b57c9d9f06b77f0064e5be7f3df61e0151101160acd5fdecce911df28a189,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:15.580410 env[1208]: time="2025-10-31T01:19:15.580372093Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\" returns image reference \"sha256:33b680aadf474b7e5e73957fc00c6af86dd0484c699c8461ba33ee656d1823bf\"" Oct 31 01:19:15.581224 env[1208]: time="2025-10-31T01:19:15.581182293Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\"" Oct 31 01:19:17.265676 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 31 01:19:17.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:17.265890 systemd[1]: Stopped kubelet.service. Oct 31 01:19:17.279108 kernel: kauditd_printk_skb: 88 callbacks suppressed Oct 31 01:19:17.279305 kernel: audit: type=1130 audit(1761873557.265:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:17.279338 kernel: audit: type=1131 audit(1761873557.265:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:17.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:17.267455 systemd[1]: Starting kubelet.service... Oct 31 01:19:17.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:17.390455 systemd[1]: Started kubelet.service. Oct 31 01:19:17.397907 kernel: audit: type=1130 audit(1761873557.389:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:17.568899 kubelet[1502]: E1031 01:19:17.566557 1502 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 31 01:19:17.568336 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2327258537.mount: Deactivated successfully. Oct 31 01:19:17.570614 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 31 01:19:17.570725 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 31 01:19:17.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 31 01:19:17.577789 kernel: audit: type=1131 audit(1761873557.569:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 31 01:19:19.377093 env[1208]: time="2025-10-31T01:19:19.377009563Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:19.426518 env[1208]: time="2025-10-31T01:19:19.426460221Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:19.430775 env[1208]: time="2025-10-31T01:19:19.430733323Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:19.437440 env[1208]: time="2025-10-31T01:19:19.437391647Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:71445ec84ad98bd52a7784865a9d31b1b50b56092d3f7699edc39eefd71befe1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:19.437944 env[1208]: time="2025-10-31T01:19:19.437914500Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\" returns image reference \"sha256:2844ee7bb56c2c194e1f4adafb9e7b60b9ed16aa4d07ab8ad1f019362e2efab3\"" Oct 31 01:19:19.439052 env[1208]: time="2025-10-31T01:19:19.439021944Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Oct 31 01:19:21.732794 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2222825439.mount: Deactivated successfully. Oct 31 01:19:23.352146 env[1208]: time="2025-10-31T01:19:23.352041733Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:23.354324 env[1208]: time="2025-10-31T01:19:23.354293049Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:23.356674 env[1208]: time="2025-10-31T01:19:23.356649071Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:23.359095 env[1208]: time="2025-10-31T01:19:23.359065082Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:23.360076 env[1208]: time="2025-10-31T01:19:23.360028722Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Oct 31 01:19:23.360905 env[1208]: time="2025-10-31T01:19:23.360878398Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Oct 31 01:19:24.092160 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3939296677.mount: Deactivated successfully. Oct 31 01:19:24.109520 env[1208]: time="2025-10-31T01:19:24.108547591Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:24.112326 env[1208]: time="2025-10-31T01:19:24.111288095Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:24.117481 env[1208]: time="2025-10-31T01:19:24.115690607Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:24.121341 env[1208]: time="2025-10-31T01:19:24.120036324Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Oct 31 01:19:24.121341 env[1208]: time="2025-10-31T01:19:24.119148697Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:24.127535 env[1208]: time="2025-10-31T01:19:24.127437098Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Oct 31 01:19:25.309560 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2904759817.mount: Deactivated successfully. Oct 31 01:19:27.765465 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Oct 31 01:19:27.779555 kernel: audit: type=1130 audit(1761873567.764:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:27.779634 kernel: audit: type=1131 audit(1761873567.764:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:27.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:27.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:27.765666 systemd[1]: Stopped kubelet.service. Oct 31 01:19:27.767331 systemd[1]: Starting kubelet.service... Oct 31 01:19:27.969190 systemd[1]: Started kubelet.service. Oct 31 01:19:27.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:27.976800 kernel: audit: type=1130 audit(1761873567.968:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:28.023903 kubelet[1514]: E1031 01:19:28.023720 1514 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 31 01:19:28.025894 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 31 01:19:28.026045 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 31 01:19:28.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 31 01:19:28.032803 kernel: audit: type=1131 audit(1761873568.025:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 31 01:19:31.188980 env[1208]: time="2025-10-31T01:19:31.188915450Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:31.191135 env[1208]: time="2025-10-31T01:19:31.191099662Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:31.195847 env[1208]: time="2025-10-31T01:19:31.195800477Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:31.196832 env[1208]: time="2025-10-31T01:19:31.196805082Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:31.197720 env[1208]: time="2025-10-31T01:19:31.197683481Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Oct 31 01:19:34.571560 systemd[1]: Stopped kubelet.service. Oct 31 01:19:34.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:34.573629 systemd[1]: Starting kubelet.service... Oct 31 01:19:34.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:34.584547 kernel: audit: type=1130 audit(1761873574.569:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:34.584608 kernel: audit: type=1131 audit(1761873574.569:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:34.601114 systemd[1]: Reloading. Oct 31 01:19:34.669592 /usr/lib/systemd/system-generators/torcx-generator[1571]: time="2025-10-31T01:19:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 31 01:19:34.669623 /usr/lib/systemd/system-generators/torcx-generator[1571]: time="2025-10-31T01:19:34Z" level=info msg="torcx already run" Oct 31 01:19:35.119942 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 31 01:19:35.119965 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 31 01:19:35.150081 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 31 01:19:35.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.244007 kernel: audit: type=1400 audit(1761873575.230:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.244086 kernel: audit: type=1400 audit(1761873575.230:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.244116 kernel: audit: type=1400 audit(1761873575.230:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.250903 kernel: audit: type=1400 audit(1761873575.230:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.257365 kernel: audit: type=1400 audit(1761873575.230:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.270870 kernel: audit: type=1400 audit(1761873575.230:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.270927 kernel: audit: type=1400 audit(1761873575.230:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.277495 kernel: audit: type=1400 audit(1761873575.230:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.243000 audit: BPF prog-id=46 op=LOAD Oct 31 01:19:35.243000 audit: BPF prog-id=30 op=UNLOAD Oct 31 01:19:35.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.256000 audit: BPF prog-id=47 op=LOAD Oct 31 01:19:35.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.263000 audit: BPF prog-id=48 op=LOAD Oct 31 01:19:35.263000 audit: BPF prog-id=31 op=UNLOAD Oct 31 01:19:35.263000 audit: BPF prog-id=32 op=UNLOAD Oct 31 01:19:35.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.276000 audit: BPF prog-id=49 op=LOAD Oct 31 01:19:35.276000 audit: BPF prog-id=40 op=UNLOAD Oct 31 01:19:35.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.283000 audit: BPF prog-id=50 op=LOAD Oct 31 01:19:35.284000 audit: BPF prog-id=39 op=UNLOAD Oct 31 01:19:35.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit: BPF prog-id=51 op=LOAD Oct 31 01:19:35.287000 audit: BPF prog-id=41 op=UNLOAD Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit: BPF prog-id=52 op=LOAD Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.287000 audit: BPF prog-id=53 op=LOAD Oct 31 01:19:35.287000 audit: BPF prog-id=42 op=UNLOAD Oct 31 01:19:35.287000 audit: BPF prog-id=43 op=UNLOAD Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit: BPF prog-id=54 op=LOAD Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.288000 audit: BPF prog-id=55 op=LOAD Oct 31 01:19:35.288000 audit: BPF prog-id=33 op=UNLOAD Oct 31 01:19:35.288000 audit: BPF prog-id=34 op=UNLOAD Oct 31 01:19:35.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.290000 audit: BPF prog-id=56 op=LOAD Oct 31 01:19:35.290000 audit: BPF prog-id=44 op=UNLOAD Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.291000 audit: BPF prog-id=57 op=LOAD Oct 31 01:19:35.291000 audit: BPF prog-id=35 op=UNLOAD Oct 31 01:19:35.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit: BPF prog-id=58 op=LOAD Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.292000 audit: BPF prog-id=59 op=LOAD Oct 31 01:19:35.292000 audit: BPF prog-id=36 op=UNLOAD Oct 31 01:19:35.292000 audit: BPF prog-id=37 op=UNLOAD Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.294000 audit: BPF prog-id=60 op=LOAD Oct 31 01:19:35.294000 audit: BPF prog-id=38 op=UNLOAD Oct 31 01:19:35.308654 systemd[1]: Started kubelet.service. Oct 31 01:19:35.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:35.310898 systemd[1]: Stopping kubelet.service... Oct 31 01:19:35.316710 systemd[1]: kubelet.service: Deactivated successfully. Oct 31 01:19:35.316993 systemd[1]: Stopped kubelet.service. Oct 31 01:19:35.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:35.319330 systemd[1]: Starting kubelet.service... Oct 31 01:19:35.440858 systemd[1]: Started kubelet.service. Oct 31 01:19:35.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:35.491705 kubelet[1619]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 31 01:19:35.491705 kubelet[1619]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Oct 31 01:19:35.491705 kubelet[1619]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 31 01:19:35.492209 kubelet[1619]: I1031 01:19:35.491739 1619 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 31 01:19:35.856600 kubelet[1619]: I1031 01:19:35.856543 1619 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Oct 31 01:19:35.856600 kubelet[1619]: I1031 01:19:35.856587 1619 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 31 01:19:35.857049 kubelet[1619]: I1031 01:19:35.857018 1619 server.go:956] "Client rotation is on, will bootstrap in background" Oct 31 01:19:35.880795 kubelet[1619]: E1031 01:19:35.880713 1619 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.131:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Oct 31 01:19:35.886341 kubelet[1619]: I1031 01:19:35.886313 1619 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 31 01:19:35.892780 kubelet[1619]: E1031 01:19:35.892726 1619 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Oct 31 01:19:35.892852 kubelet[1619]: I1031 01:19:35.892792 1619 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Oct 31 01:19:35.899006 kubelet[1619]: I1031 01:19:35.898968 1619 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 31 01:19:35.899513 kubelet[1619]: I1031 01:19:35.899301 1619 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 31 01:19:35.900369 kubelet[1619]: I1031 01:19:35.899502 1619 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Oct 31 01:19:35.900555 kubelet[1619]: I1031 01:19:35.900379 1619 topology_manager.go:138] "Creating topology manager with none policy" Oct 31 01:19:35.900555 kubelet[1619]: I1031 01:19:35.900396 1619 container_manager_linux.go:303] "Creating device plugin manager" Oct 31 01:19:35.900626 kubelet[1619]: I1031 01:19:35.900600 1619 state_mem.go:36] "Initialized new in-memory state store" Oct 31 01:19:35.943120 kubelet[1619]: I1031 01:19:35.943032 1619 kubelet.go:480] "Attempting to sync node with API server" Oct 31 01:19:35.943120 kubelet[1619]: I1031 01:19:35.943113 1619 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 31 01:19:35.943388 kubelet[1619]: I1031 01:19:35.943183 1619 kubelet.go:386] "Adding apiserver pod source" Oct 31 01:19:35.943388 kubelet[1619]: I1031 01:19:35.943215 1619 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 31 01:19:35.966278 kubelet[1619]: E1031 01:19:35.966067 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.131:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Oct 31 01:19:35.971749 kubelet[1619]: E1031 01:19:35.971689 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.131:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Oct 31 01:19:35.977103 kubelet[1619]: I1031 01:19:35.977064 1619 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 31 01:19:35.977920 kubelet[1619]: I1031 01:19:35.977859 1619 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Oct 31 01:19:35.979598 kubelet[1619]: W1031 01:19:35.979560 1619 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 31 01:19:35.982756 kubelet[1619]: I1031 01:19:35.982725 1619 watchdog_linux.go:99] "Systemd watchdog is not enabled" Oct 31 01:19:35.982863 kubelet[1619]: I1031 01:19:35.982801 1619 server.go:1289] "Started kubelet" Oct 31 01:19:35.983625 kubelet[1619]: I1031 01:19:35.983546 1619 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Oct 31 01:19:35.982000 audit[1619]: AVC avc: denied { mac_admin } for pid=1619 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.982000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 01:19:35.982000 audit[1619]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b133b0 a1=c000545b48 a2=c000b13380 a3=25 items=0 ppid=1 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:35.982000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 01:19:35.987000 audit[1619]: AVC avc: denied { mac_admin } for pid=1619 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:35.987000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 01:19:35.987000 audit[1619]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000501900 a1=c000545b60 a2=c000b13440 a3=25 items=0 ppid=1 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:35.987000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 01:19:35.989433 kubelet[1619]: I1031 01:19:35.984548 1619 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Oct 31 01:19:35.989433 kubelet[1619]: I1031 01:19:35.989312 1619 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Oct 31 01:19:35.989650 kubelet[1619]: I1031 01:19:35.989590 1619 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 31 01:19:35.991378 kubelet[1619]: I1031 01:19:35.991330 1619 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Oct 31 01:19:35.992058 kubelet[1619]: I1031 01:19:35.992022 1619 server.go:317] "Adding debug handlers to kubelet server" Oct 31 01:19:35.996455 kubelet[1619]: I1031 01:19:35.995862 1619 factory.go:223] Registration of the systemd container factory successfully Oct 31 01:19:35.996455 kubelet[1619]: I1031 01:19:35.996054 1619 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Oct 31 01:19:35.996455 kubelet[1619]: I1031 01:19:35.996247 1619 volume_manager.go:297] "Starting Kubelet Volume Manager" Oct 31 01:19:35.996672 kubelet[1619]: E1031 01:19:35.996629 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:35.998204 kubelet[1619]: I1031 01:19:35.998000 1619 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Oct 31 01:19:35.998792 kubelet[1619]: I1031 01:19:35.998754 1619 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Oct 31 01:19:35.999118 kubelet[1619]: I1031 01:19:35.999085 1619 reconciler.go:26] "Reconciler: start to sync state" Oct 31 01:19:35.999804 kubelet[1619]: I1031 01:19:35.999751 1619 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 31 01:19:36.000441 kubelet[1619]: I1031 01:19:36.000413 1619 factory.go:223] Registration of the containerd container factory successfully Oct 31 01:19:36.000892 kubelet[1619]: E1031 01:19:36.000862 1619 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 31 01:19:36.007140 kubelet[1619]: E1031 01:19:36.007090 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.131:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Oct 31 01:19:36.007208 kubelet[1619]: E1031 01:19:36.007107 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.131:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.131:6443: connect: connection refused" interval="200ms" Oct 31 01:19:36.007208 kubelet[1619]: E1031 01:19:36.005634 1619 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.131:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.131:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18736eaebb995bae default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-10-31 01:19:35.982750638 +0000 UTC m=+0.536793409,LastTimestamp:2025-10-31 01:19:35.982750638 +0000 UTC m=+0.536793409,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Oct 31 01:19:36.011000 audit[1639]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:36.011000 audit[1639]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff2759a2f0 a2=0 a3=7fff2759a2dc items=0 ppid=1619 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.011000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 31 01:19:36.012000 audit[1640]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:36.012000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf8b08bf0 a2=0 a3=7ffcf8b08bdc items=0 ppid=1619 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.012000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 31 01:19:36.016000 audit[1643]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:36.016000 audit[1643]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcea49a7c0 a2=0 a3=7ffcea49a7ac items=0 ppid=1619 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.016000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 31 01:19:36.018000 audit[1646]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:36.018000 audit[1646]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc7721e160 a2=0 a3=7ffc7721e14c items=0 ppid=1619 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.018000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 31 01:19:36.020130 kubelet[1619]: I1031 01:19:36.019915 1619 cpu_manager.go:221] "Starting CPU manager" policy="none" Oct 31 01:19:36.020130 kubelet[1619]: I1031 01:19:36.019926 1619 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Oct 31 01:19:36.020130 kubelet[1619]: I1031 01:19:36.019944 1619 state_mem.go:36] "Initialized new in-memory state store" Oct 31 01:19:36.097695 kubelet[1619]: E1031 01:19:36.097575 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:36.198572 kubelet[1619]: E1031 01:19:36.198377 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:36.208516 kubelet[1619]: E1031 01:19:36.208472 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.131:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.131:6443: connect: connection refused" interval="400ms" Oct 31 01:19:36.298674 kubelet[1619]: E1031 01:19:36.298586 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:36.399701 kubelet[1619]: E1031 01:19:36.399607 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:36.500654 kubelet[1619]: E1031 01:19:36.500511 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:36.601274 kubelet[1619]: E1031 01:19:36.601205 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:36.610241 kubelet[1619]: E1031 01:19:36.610174 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.131:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.131:6443: connect: connection refused" interval="800ms" Oct 31 01:19:36.701670 kubelet[1619]: E1031 01:19:36.701591 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:36.802513 kubelet[1619]: E1031 01:19:36.802443 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:36.857425 kubelet[1619]: E1031 01:19:36.857373 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.131:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Oct 31 01:19:36.903215 kubelet[1619]: E1031 01:19:36.903157 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:36.920084 kubelet[1619]: E1031 01:19:36.920042 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.131:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Oct 31 01:19:36.969000 audit[1649]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:36.969000 audit[1649]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffdaa88d1b0 a2=0 a3=7ffdaa88d19c items=0 ppid=1619 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.969000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 31 01:19:36.970000 audit[1650]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:36.970000 audit[1650]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc8aa64590 a2=0 a3=7ffc8aa6457c items=0 ppid=1619 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.970000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 31 01:19:36.971564 kubelet[1619]: I1031 01:19:36.970383 1619 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Oct 31 01:19:36.971564 kubelet[1619]: I1031 01:19:36.971458 1619 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Oct 31 01:19:36.971564 kubelet[1619]: I1031 01:19:36.971491 1619 status_manager.go:230] "Starting to sync pod status with apiserver" Oct 31 01:19:36.971564 kubelet[1619]: I1031 01:19:36.971528 1619 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Oct 31 01:19:36.971564 kubelet[1619]: I1031 01:19:36.971543 1619 kubelet.go:2436] "Starting kubelet main sync loop" Oct 31 01:19:36.970000 audit[1651]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1651 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:36.970000 audit[1651]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc5b6089a0 a2=0 a3=7ffc5b60898c items=0 ppid=1619 pid=1651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.970000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 31 01:19:36.971858 kubelet[1619]: E1031 01:19:36.971595 1619 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 31 01:19:36.972000 audit[1654]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1654 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:36.972000 audit[1654]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe83bbcd00 a2=0 a3=7ffe83bbccec items=0 ppid=1619 pid=1654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.972000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 31 01:19:36.972000 audit[1653]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1653 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:36.972000 audit[1653]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff35eed110 a2=0 a3=7fff35eed0fc items=0 ppid=1619 pid=1653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.972000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 31 01:19:36.973000 audit[1655]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1655 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:36.973000 audit[1655]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcb7a89b50 a2=0 a3=7ffcb7a89b3c items=0 ppid=1619 pid=1655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.973000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 31 01:19:36.974194 kubelet[1619]: E1031 01:19:36.974004 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.131:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Oct 31 01:19:36.973000 audit[1656]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1656 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:36.973000 audit[1656]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff0be5b820 a2=0 a3=7fff0be5b80c items=0 ppid=1619 pid=1656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.973000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 31 01:19:36.974000 audit[1657]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1657 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:36.974000 audit[1657]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe2732c5f0 a2=0 a3=7ffe2732c5dc items=0 ppid=1619 pid=1657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:36.974000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 31 01:19:36.996350 kubelet[1619]: I1031 01:19:36.996285 1619 policy_none.go:49] "None policy: Start" Oct 31 01:19:36.996350 kubelet[1619]: I1031 01:19:36.996337 1619 memory_manager.go:186] "Starting memorymanager" policy="None" Oct 31 01:19:36.996350 kubelet[1619]: I1031 01:19:36.996359 1619 state_mem.go:35] "Initializing new in-memory state store" Oct 31 01:19:37.004471 kubelet[1619]: E1031 01:19:37.003745 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:37.004342 systemd[1]: Created slice kubepods.slice. Oct 31 01:19:37.009354 systemd[1]: Created slice kubepods-burstable.slice. Oct 31 01:19:37.011843 systemd[1]: Created slice kubepods-besteffort.slice. Oct 31 01:19:37.017677 kubelet[1619]: E1031 01:19:37.017624 1619 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Oct 31 01:19:37.016000 audit[1619]: AVC avc: denied { mac_admin } for pid=1619 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:37.016000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 01:19:37.016000 audit[1619]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009d9470 a1=c0009df140 a2=c0009d9440 a3=25 items=0 ppid=1 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:37.016000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 01:19:37.018028 kubelet[1619]: E1031 01:19:37.017749 1619 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Oct 31 01:19:37.018028 kubelet[1619]: I1031 01:19:37.017954 1619 eviction_manager.go:189] "Eviction manager: starting control loop" Oct 31 01:19:37.018028 kubelet[1619]: I1031 01:19:37.017978 1619 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Oct 31 01:19:37.018538 kubelet[1619]: I1031 01:19:37.018326 1619 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 31 01:19:37.019168 kubelet[1619]: E1031 01:19:37.019142 1619 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Oct 31 01:19:37.019312 kubelet[1619]: E1031 01:19:37.019291 1619 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 31 01:19:37.106174 kubelet[1619]: I1031 01:19:37.106056 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/947141ec7fa7ae35fe8d06b2bb0c16e5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"947141ec7fa7ae35fe8d06b2bb0c16e5\") " pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:37.106174 kubelet[1619]: I1031 01:19:37.106096 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/947141ec7fa7ae35fe8d06b2bb0c16e5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"947141ec7fa7ae35fe8d06b2bb0c16e5\") " pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:37.106174 kubelet[1619]: I1031 01:19:37.106124 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/947141ec7fa7ae35fe8d06b2bb0c16e5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"947141ec7fa7ae35fe8d06b2bb0c16e5\") " pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:37.120199 kubelet[1619]: I1031 01:19:37.120131 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 01:19:37.120628 kubelet[1619]: E1031 01:19:37.120591 1619 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.131:6443/api/v1/nodes\": dial tcp 10.0.0.131:6443: connect: connection refused" node="localhost" Oct 31 01:19:37.127115 systemd[1]: Created slice kubepods-burstable-pod947141ec7fa7ae35fe8d06b2bb0c16e5.slice. Oct 31 01:19:37.142040 kubelet[1619]: E1031 01:19:37.142003 1619 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 01:19:37.145069 systemd[1]: Created slice kubepods-burstable-pod20c890a246d840d308022312da9174cb.slice. Oct 31 01:19:37.146750 kubelet[1619]: E1031 01:19:37.146718 1619 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 01:19:37.148719 systemd[1]: Created slice kubepods-burstable-podd13d96f639b65e57f439b4396b605564.slice. Oct 31 01:19:37.150158 kubelet[1619]: E1031 01:19:37.150133 1619 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 01:19:37.206665 kubelet[1619]: I1031 01:19:37.206617 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:37.206665 kubelet[1619]: I1031 01:19:37.206670 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:37.206912 kubelet[1619]: I1031 01:19:37.206702 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d13d96f639b65e57f439b4396b605564-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d13d96f639b65e57f439b4396b605564\") " pod="kube-system/kube-scheduler-localhost" Oct 31 01:19:37.206912 kubelet[1619]: I1031 01:19:37.206797 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:37.206912 kubelet[1619]: I1031 01:19:37.206821 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:37.207062 kubelet[1619]: I1031 01:19:37.206909 1619 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:37.249449 kubelet[1619]: E1031 01:19:37.249382 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.131:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Oct 31 01:19:37.323029 kubelet[1619]: I1031 01:19:37.322986 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 01:19:37.323548 kubelet[1619]: E1031 01:19:37.323493 1619 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.131:6443/api/v1/nodes\": dial tcp 10.0.0.131:6443: connect: connection refused" node="localhost" Oct 31 01:19:37.411059 kubelet[1619]: E1031 01:19:37.410901 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.131:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.131:6443: connect: connection refused" interval="1.6s" Oct 31 01:19:37.443494 kubelet[1619]: E1031 01:19:37.443398 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:37.444363 env[1208]: time="2025-10-31T01:19:37.444305915Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:947141ec7fa7ae35fe8d06b2bb0c16e5,Namespace:kube-system,Attempt:0,}" Oct 31 01:19:37.447421 kubelet[1619]: E1031 01:19:37.447377 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:37.447806 env[1208]: time="2025-10-31T01:19:37.447759499Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:20c890a246d840d308022312da9174cb,Namespace:kube-system,Attempt:0,}" Oct 31 01:19:37.451103 kubelet[1619]: E1031 01:19:37.451072 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:37.451512 env[1208]: time="2025-10-31T01:19:37.451471303Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d13d96f639b65e57f439b4396b605564,Namespace:kube-system,Attempt:0,}" Oct 31 01:19:37.725182 kubelet[1619]: I1031 01:19:37.724824 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 01:19:37.725661 kubelet[1619]: E1031 01:19:37.725316 1619 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.131:6443/api/v1/nodes\": dial tcp 10.0.0.131:6443: connect: connection refused" node="localhost" Oct 31 01:19:37.979961 kubelet[1619]: E1031 01:19:37.979829 1619 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.131:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Oct 31 01:19:38.037121 kubelet[1619]: E1031 01:19:38.037057 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.131:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Oct 31 01:19:38.526827 kubelet[1619]: I1031 01:19:38.526789 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 01:19:38.527337 kubelet[1619]: E1031 01:19:38.527290 1619 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.131:6443/api/v1/nodes\": dial tcp 10.0.0.131:6443: connect: connection refused" node="localhost" Oct 31 01:19:38.600106 kubelet[1619]: E1031 01:19:38.600032 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.131:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Oct 31 01:19:38.781855 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1729888530.mount: Deactivated successfully. Oct 31 01:19:38.849279 update_engine[1201]: I1031 01:19:38.849210 1201 update_attempter.cc:509] Updating boot flags... Oct 31 01:19:38.920718 kubelet[1619]: E1031 01:19:38.920667 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.131:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Oct 31 01:19:38.959594 env[1208]: time="2025-10-31T01:19:38.959531148Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.976279 env[1208]: time="2025-10-31T01:19:38.976230964Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.978742 env[1208]: time="2025-10-31T01:19:38.978406039Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.980481 env[1208]: time="2025-10-31T01:19:38.980445637Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.981532 env[1208]: time="2025-10-31T01:19:38.981494456Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.985610 env[1208]: time="2025-10-31T01:19:38.985286389Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.987744 env[1208]: time="2025-10-31T01:19:38.987706544Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.990060 env[1208]: time="2025-10-31T01:19:38.990022398Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.992238 env[1208]: time="2025-10-31T01:19:38.992188992Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.994460 env[1208]: time="2025-10-31T01:19:38.994397377Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:38.998139 env[1208]: time="2025-10-31T01:19:38.996538660Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:39.006457 env[1208]: time="2025-10-31T01:19:39.006402535Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:39.013374 kubelet[1619]: E1031 01:19:39.013335 1619 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.131:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.131:6443: connect: connection refused" interval="3.2s" Oct 31 01:19:39.043852 env[1208]: time="2025-10-31T01:19:39.043554678Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:19:39.043852 env[1208]: time="2025-10-31T01:19:39.043591155Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:19:39.043852 env[1208]: time="2025-10-31T01:19:39.043600627Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:19:39.043852 env[1208]: time="2025-10-31T01:19:39.043553645Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:19:39.043852 env[1208]: time="2025-10-31T01:19:39.043641535Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:19:39.043852 env[1208]: time="2025-10-31T01:19:39.043675265Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:19:39.043852 env[1208]: time="2025-10-31T01:19:39.043773570Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/db97be0b89f069f2fe37e1ce1796726ba6639c7caa21b5054e6771e7de810d73 pid=1682 runtime=io.containerd.runc.v2 Oct 31 01:19:39.044512 env[1208]: time="2025-10-31T01:19:39.044468657Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b8fecc07c57ce57c31579c4a87c27cc90c50885cb2db4bf9e31c6c8221f06ac7 pid=1688 runtime=io.containerd.runc.v2 Oct 31 01:19:39.057423 env[1208]: time="2025-10-31T01:19:39.057342028Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:19:39.057423 env[1208]: time="2025-10-31T01:19:39.057422722Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:19:39.057587 env[1208]: time="2025-10-31T01:19:39.057446578Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:19:39.057656 env[1208]: time="2025-10-31T01:19:39.057614479Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/84a2809820654c573198d9b7ca10d88d374ba80fd7fbb74b7cf22e991a58c644 pid=1714 runtime=io.containerd.runc.v2 Oct 31 01:19:39.072652 systemd[1]: Started cri-containerd-b8fecc07c57ce57c31579c4a87c27cc90c50885cb2db4bf9e31c6c8221f06ac7.scope. Oct 31 01:19:39.153856 systemd[1]: Started cri-containerd-84a2809820654c573198d9b7ca10d88d374ba80fd7fbb74b7cf22e991a58c644.scope. Oct 31 01:19:39.166981 systemd[1]: Started cri-containerd-db97be0b89f069f2fe37e1ce1796726ba6639c7caa21b5054e6771e7de810d73.scope. Oct 31 01:19:39.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.310000 audit: BPF prog-id=61 op=LOAD Oct 31 01:19:39.311000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.311000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1682 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462393762653062383966303639663266653337653163653137393637 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1682 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462393762653062383966303639663266653337653163653137393637 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.312000 audit: BPF prog-id=62 op=LOAD Oct 31 01:19:39.312000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0003ab180 items=0 ppid=1682 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462393762653062383966303639663266653337653163653137393637 Oct 31 01:19:39.313000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.313000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.313000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.313000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.313000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.313000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.313000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.313000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.313000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.313000 audit: BPF prog-id=63 op=LOAD Oct 31 01:19:39.313000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0003ab1c8 items=0 ppid=1682 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462393762653062383966303639663266653337653163653137393637 Oct 31 01:19:39.314000 audit: BPF prog-id=63 op=UNLOAD Oct 31 01:19:39.315000 audit: BPF prog-id=62 op=UNLOAD Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.315000 audit: BPF prog-id=64 op=LOAD Oct 31 01:19:39.315000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0003ab5d8 items=0 ppid=1682 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462393762653062383966303639663266653337653163653137393637 Oct 31 01:19:39.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.335000 audit: BPF prog-id=65 op=LOAD Oct 31 01:19:39.335000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.335000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019dc48 a2=10 a3=1c items=0 ppid=1688 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238666563633037633537636535376333313537396334613837633237 Oct 31 01:19:39.335000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.335000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019d6b0 a2=3c a3=c items=0 ppid=1688 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238666563633037633537636535376333313537396334613837633237 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit: BPF prog-id=66 op=LOAD Oct 31 01:19:39.336000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019d9d8 a2=78 a3=c00030af80 items=0 ppid=1688 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238666563633037633537636535376333313537396334613837633237 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit: BPF prog-id=67 op=LOAD Oct 31 01:19:39.336000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019d770 a2=78 a3=c00030afc8 items=0 ppid=1688 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238666563633037633537636535376333313537396334613837633237 Oct 31 01:19:39.336000 audit: BPF prog-id=67 op=UNLOAD Oct 31 01:19:39.336000 audit: BPF prog-id=66 op=UNLOAD Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.336000 audit: BPF prog-id=68 op=LOAD Oct 31 01:19:39.336000 audit[1713]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019dc30 a2=78 a3=c00030b3d8 items=0 ppid=1688 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238666563633037633537636535376333313537396334613837633237 Oct 31 01:19:39.342413 kubelet[1619]: E1031 01:19:39.342346 1619 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.131:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.131:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.342000 audit: BPF prog-id=69 op=LOAD Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1714 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834613238303938323036353463353733313938643962376361313064 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1714 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834613238303938323036353463353733313938643962376361313064 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit: BPF prog-id=70 op=LOAD Oct 31 01:19:39.343000 audit[1729]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000253de0 items=0 ppid=1714 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834613238303938323036353463353733313938643962376361313064 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit: BPF prog-id=71 op=LOAD Oct 31 01:19:39.343000 audit[1729]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000253e28 items=0 ppid=1714 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834613238303938323036353463353733313938643962376361313064 Oct 31 01:19:39.343000 audit: BPF prog-id=71 op=UNLOAD Oct 31 01:19:39.343000 audit: BPF prog-id=70 op=UNLOAD Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { perfmon } for pid=1729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit[1729]: AVC avc: denied { bpf } for pid=1729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.343000 audit: BPF prog-id=72 op=LOAD Oct 31 01:19:39.343000 audit[1729]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00033a238 items=0 ppid=1714 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834613238303938323036353463353733313938643962376361313064 Oct 31 01:19:39.350454 env[1208]: time="2025-10-31T01:19:39.350421201Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:20c890a246d840d308022312da9174cb,Namespace:kube-system,Attempt:0,} returns sandbox id \"db97be0b89f069f2fe37e1ce1796726ba6639c7caa21b5054e6771e7de810d73\"" Oct 31 01:19:39.351690 kubelet[1619]: E1031 01:19:39.351663 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:39.421820 env[1208]: time="2025-10-31T01:19:39.421775440Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:947141ec7fa7ae35fe8d06b2bb0c16e5,Namespace:kube-system,Attempt:0,} returns sandbox id \"b8fecc07c57ce57c31579c4a87c27cc90c50885cb2db4bf9e31c6c8221f06ac7\"" Oct 31 01:19:39.422373 kubelet[1619]: E1031 01:19:39.422348 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:39.429486 env[1208]: time="2025-10-31T01:19:39.429444440Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d13d96f639b65e57f439b4396b605564,Namespace:kube-system,Attempt:0,} returns sandbox id \"84a2809820654c573198d9b7ca10d88d374ba80fd7fbb74b7cf22e991a58c644\"" Oct 31 01:19:39.430231 kubelet[1619]: E1031 01:19:39.430209 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:39.434213 env[1208]: time="2025-10-31T01:19:39.434179683Z" level=info msg="CreateContainer within sandbox \"db97be0b89f069f2fe37e1ce1796726ba6639c7caa21b5054e6771e7de810d73\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 31 01:19:39.439500 env[1208]: time="2025-10-31T01:19:39.439460327Z" level=info msg="CreateContainer within sandbox \"b8fecc07c57ce57c31579c4a87c27cc90c50885cb2db4bf9e31c6c8221f06ac7\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 31 01:19:39.444103 env[1208]: time="2025-10-31T01:19:39.444053641Z" level=info msg="CreateContainer within sandbox \"84a2809820654c573198d9b7ca10d88d374ba80fd7fbb74b7cf22e991a58c644\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 31 01:19:39.465116 env[1208]: time="2025-10-31T01:19:39.465016696Z" level=info msg="CreateContainer within sandbox \"db97be0b89f069f2fe37e1ce1796726ba6639c7caa21b5054e6771e7de810d73\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"dec5c6774012b697abbb8d716db1983594b07bfa5f473cb47aa1817c9f44ded6\"" Oct 31 01:19:39.466017 env[1208]: time="2025-10-31T01:19:39.465976133Z" level=info msg="StartContainer for \"dec5c6774012b697abbb8d716db1983594b07bfa5f473cb47aa1817c9f44ded6\"" Oct 31 01:19:39.475471 env[1208]: time="2025-10-31T01:19:39.475384361Z" level=info msg="CreateContainer within sandbox \"b8fecc07c57ce57c31579c4a87c27cc90c50885cb2db4bf9e31c6c8221f06ac7\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"4cf9a55cbdd04d85359a44dd93d82e9bc5b9f98a0d97bba46f547b3e002ac8f5\"" Oct 31 01:19:39.476221 env[1208]: time="2025-10-31T01:19:39.476173984Z" level=info msg="StartContainer for \"4cf9a55cbdd04d85359a44dd93d82e9bc5b9f98a0d97bba46f547b3e002ac8f5\"" Oct 31 01:19:39.480684 env[1208]: time="2025-10-31T01:19:39.480642070Z" level=info msg="CreateContainer within sandbox \"84a2809820654c573198d9b7ca10d88d374ba80fd7fbb74b7cf22e991a58c644\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"42619f84ad19fcf68f5271a7195ebf137da4f319f4f650c080392e215eadb3db\"" Oct 31 01:19:39.481574 env[1208]: time="2025-10-31T01:19:39.481531240Z" level=info msg="StartContainer for \"42619f84ad19fcf68f5271a7195ebf137da4f319f4f650c080392e215eadb3db\"" Oct 31 01:19:39.484493 systemd[1]: Started cri-containerd-dec5c6774012b697abbb8d716db1983594b07bfa5f473cb47aa1817c9f44ded6.scope. Oct 31 01:19:39.499205 systemd[1]: Started cri-containerd-4cf9a55cbdd04d85359a44dd93d82e9bc5b9f98a0d97bba46f547b3e002ac8f5.scope. Oct 31 01:19:39.501865 systemd[1]: Started cri-containerd-42619f84ad19fcf68f5271a7195ebf137da4f319f4f650c080392e215eadb3db.scope. Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.502000 audit: BPF prog-id=73 op=LOAD Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633563363737343031326236393761626262386437313664623139 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633563363737343031326236393761626262386437313664623139 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit: BPF prog-id=74 op=LOAD Oct 31 01:19:39.504000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000301fc0 items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633563363737343031326236393761626262386437313664623139 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit: BPF prog-id=75 op=LOAD Oct 31 01:19:39.504000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00037e008 items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633563363737343031326236393761626262386437313664623139 Oct 31 01:19:39.504000 audit: BPF prog-id=75 op=UNLOAD Oct 31 01:19:39.504000 audit: BPF prog-id=74 op=UNLOAD Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.504000 audit: BPF prog-id=76 op=LOAD Oct 31 01:19:39.504000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00037e418 items=0 ppid=1682 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465633563363737343031326236393761626262386437313664623139 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit: BPF prog-id=77 op=LOAD Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1714 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432363139663834616431396663663638663532373161373139356562 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1714 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432363139663834616431396663663638663532373161373139356562 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.516000 audit: BPF prog-id=78 op=LOAD Oct 31 01:19:39.516000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002987f0 items=0 ppid=1714 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432363139663834616431396663663638663532373161373139356562 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit: BPF prog-id=79 op=LOAD Oct 31 01:19:39.517000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000298838 items=0 ppid=1714 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.517000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432363139663834616431396663663638663532373161373139356562 Oct 31 01:19:39.517000 audit: BPF prog-id=79 op=UNLOAD Oct 31 01:19:39.517000 audit: BPF prog-id=78 op=UNLOAD Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit: BPF prog-id=80 op=LOAD Oct 31 01:19:39.517000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000298c48 items=0 ppid=1714 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.517000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432363139663834616431396663663638663532373161373139356562 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.517000 audit: BPF prog-id=81 op=LOAD Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1688 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663961353563626464303464383533353961343464643933643832 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1688 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663961353563626464303464383533353961343464643933643832 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit: BPF prog-id=82 op=LOAD Oct 31 01:19:39.518000 audit[1822]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000221d00 items=0 ppid=1688 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663961353563626464303464383533353961343464643933643832 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit: BPF prog-id=83 op=LOAD Oct 31 01:19:39.518000 audit[1822]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000221d48 items=0 ppid=1688 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663961353563626464303464383533353961343464643933643832 Oct 31 01:19:39.518000 audit: BPF prog-id=83 op=UNLOAD Oct 31 01:19:39.518000 audit: BPF prog-id=82 op=UNLOAD Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { perfmon } for pid=1822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit[1822]: AVC avc: denied { bpf } for pid=1822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:39.518000 audit: BPF prog-id=84 op=LOAD Oct 31 01:19:39.518000 audit[1822]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000416158 items=0 ppid=1688 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:39.518000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463663961353563626464303464383533353961343464643933643832 Oct 31 01:19:39.590797 env[1208]: time="2025-10-31T01:19:39.590617716Z" level=info msg="StartContainer for \"42619f84ad19fcf68f5271a7195ebf137da4f319f4f650c080392e215eadb3db\" returns successfully" Oct 31 01:19:39.596061 env[1208]: time="2025-10-31T01:19:39.591914438Z" level=info msg="StartContainer for \"4cf9a55cbdd04d85359a44dd93d82e9bc5b9f98a0d97bba46f547b3e002ac8f5\" returns successfully" Oct 31 01:19:39.596061 env[1208]: time="2025-10-31T01:19:39.592418089Z" level=info msg="StartContainer for \"dec5c6774012b697abbb8d716db1983594b07bfa5f473cb47aa1817c9f44ded6\" returns successfully" Oct 31 01:19:39.984201 kubelet[1619]: E1031 01:19:39.984051 1619 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 01:19:39.984201 kubelet[1619]: E1031 01:19:39.984201 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:39.986230 kubelet[1619]: E1031 01:19:39.986199 1619 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 01:19:39.986362 kubelet[1619]: E1031 01:19:39.986333 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:39.988164 kubelet[1619]: E1031 01:19:39.988134 1619 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 01:19:39.988264 kubelet[1619]: E1031 01:19:39.988236 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:40.129153 kubelet[1619]: I1031 01:19:40.129104 1619 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 01:19:40.989855 kubelet[1619]: E1031 01:19:40.989652 1619 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 01:19:40.989855 kubelet[1619]: E1031 01:19:40.989787 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:40.990686 kubelet[1619]: E1031 01:19:40.990560 1619 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 01:19:40.990686 kubelet[1619]: E1031 01:19:40.990635 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:41.113255 kernel: kauditd_printk_skb: 557 callbacks suppressed Oct 31 01:19:41.113399 kernel: audit: type=1400 audit(1761873581.103:551): avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6758 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.103000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6758 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.105000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.105000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0005116e0 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:19:41.131615 kernel: audit: type=1400 audit(1761873581.105:552): avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.131664 kernel: audit: type=1300 audit(1761873581.105:552): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0005116e0 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:19:41.105000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:19:41.138832 kernel: audit: type=1327 audit(1761873581.105:552): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:19:41.103000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000496750 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:19:41.147162 kernel: audit: type=1300 audit(1761873581.103:551): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000496750 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:19:41.103000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:19:41.154447 kernel: audit: type=1327 audit(1761873581.103:551): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:19:41.285000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6758 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.301941 kernel: audit: type=1400 audit(1761873581.285:553): avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6758 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.302050 kernel: audit: type=1300 audit(1761873581.285:553): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0084ffc50 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:19:41.285000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0084ffc50 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:19:41.285000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:19:41.311807 kernel: audit: type=1327 audit(1761873581.285:553): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:19:41.285000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6754 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.285000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0040135f0 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:19:41.285000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:19:41.286000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.286000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c0084ffd40 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:19:41.286000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:19:41.293000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.293000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c004de6e20 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:19:41.320826 kernel: audit: type=1400 audit(1761873581.285:554): avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6754 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.293000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:19:41.293000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6758 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.293000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0044d0fc0 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:19:41.293000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:19:41.301000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:41.301000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00358bd20 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:19:41.301000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:19:41.371401 kubelet[1619]: E1031 01:19:41.371266 1619 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{localhost.18736eaebb995bae default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-10-31 01:19:35.982750638 +0000 UTC m=+0.536793409,LastTimestamp:2025-10-31 01:19:35.982750638 +0000 UTC m=+0.536793409,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Oct 31 01:19:41.425174 kubelet[1619]: I1031 01:19:41.425126 1619 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Oct 31 01:19:41.425174 kubelet[1619]: E1031 01:19:41.425171 1619 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Oct 31 01:19:41.434236 kubelet[1619]: E1031 01:19:41.434197 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:41.535314 kubelet[1619]: E1031 01:19:41.535245 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:41.636056 kubelet[1619]: E1031 01:19:41.635926 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:41.736089 kubelet[1619]: E1031 01:19:41.736039 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:41.836783 kubelet[1619]: E1031 01:19:41.836728 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:41.937373 kubelet[1619]: E1031 01:19:41.937224 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.038375 kubelet[1619]: E1031 01:19:42.038331 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.138750 kubelet[1619]: E1031 01:19:42.138691 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.239731 kubelet[1619]: E1031 01:19:42.239602 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.340343 kubelet[1619]: E1031 01:19:42.340293 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.441195 kubelet[1619]: E1031 01:19:42.441140 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.541613 kubelet[1619]: E1031 01:19:42.541566 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.642300 kubelet[1619]: E1031 01:19:42.642248 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.742957 kubelet[1619]: E1031 01:19:42.742903 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.843612 kubelet[1619]: E1031 01:19:42.843494 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:42.944429 kubelet[1619]: E1031 01:19:42.944371 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:43.044870 kubelet[1619]: E1031 01:19:43.044823 1619 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:43.098149 kubelet[1619]: I1031 01:19:43.098005 1619 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 31 01:19:43.110309 kubelet[1619]: I1031 01:19:43.110256 1619 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:43.114357 kubelet[1619]: I1031 01:19:43.114315 1619 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:43.889205 systemd[1]: Reloading. Oct 31 01:19:43.955881 /usr/lib/systemd/system-generators/torcx-generator[1942]: time="2025-10-31T01:19:43Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 31 01:19:43.956397 /usr/lib/systemd/system-generators/torcx-generator[1942]: time="2025-10-31T01:19:43Z" level=info msg="torcx already run" Oct 31 01:19:43.971669 kubelet[1619]: I1031 01:19:43.971636 1619 apiserver.go:52] "Watching apiserver" Oct 31 01:19:43.974277 kubelet[1619]: E1031 01:19:43.974247 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:43.974867 kubelet[1619]: E1031 01:19:43.974830 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:43.975153 kubelet[1619]: E1031 01:19:43.975132 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:43.993175 kubelet[1619]: E1031 01:19:43.993131 1619 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:44.000067 kubelet[1619]: I1031 01:19:44.000015 1619 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Oct 31 01:19:44.228410 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 31 01:19:44.228438 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 31 01:19:44.234000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:44.234000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000482e00 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:19:44.234000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:19:44.235000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:44.235000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:44.235000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d054c0 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:19:44.235000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:19:44.236000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:19:44.236000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d05680 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:19:44.236000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:19:44.235000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b2b7e0 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:19:44.235000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:19:44.253684 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 31 01:19:44.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit: BPF prog-id=85 op=LOAD Oct 31 01:19:44.344000 audit: BPF prog-id=46 op=UNLOAD Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit: BPF prog-id=86 op=LOAD Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.344000 audit: BPF prog-id=87 op=LOAD Oct 31 01:19:44.344000 audit: BPF prog-id=47 op=UNLOAD Oct 31 01:19:44.344000 audit: BPF prog-id=48 op=UNLOAD Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit: BPF prog-id=88 op=LOAD Oct 31 01:19:44.345000 audit: BPF prog-id=81 op=UNLOAD Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.346000 audit: BPF prog-id=89 op=LOAD Oct 31 01:19:44.346000 audit: BPF prog-id=49 op=UNLOAD Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.347000 audit: BPF prog-id=90 op=LOAD Oct 31 01:19:44.347000 audit: BPF prog-id=50 op=UNLOAD Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.349000 audit: BPF prog-id=91 op=LOAD Oct 31 01:19:44.349000 audit: BPF prog-id=61 op=UNLOAD Oct 31 01:19:44.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit: BPF prog-id=92 op=LOAD Oct 31 01:19:44.351000 audit: BPF prog-id=51 op=UNLOAD Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit: BPF prog-id=93 op=LOAD Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.351000 audit: BPF prog-id=94 op=LOAD Oct 31 01:19:44.351000 audit: BPF prog-id=52 op=UNLOAD Oct 31 01:19:44.351000 audit: BPF prog-id=53 op=UNLOAD Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.352000 audit: BPF prog-id=95 op=LOAD Oct 31 01:19:44.352000 audit: BPF prog-id=69 op=UNLOAD Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit: BPF prog-id=96 op=LOAD Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.353000 audit: BPF prog-id=97 op=LOAD Oct 31 01:19:44.353000 audit: BPF prog-id=54 op=UNLOAD Oct 31 01:19:44.353000 audit: BPF prog-id=55 op=UNLOAD Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.354000 audit: BPF prog-id=98 op=LOAD Oct 31 01:19:44.354000 audit: BPF prog-id=65 op=UNLOAD Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.355000 audit: BPF prog-id=99 op=LOAD Oct 31 01:19:44.355000 audit: BPF prog-id=56 op=UNLOAD Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit: BPF prog-id=100 op=LOAD Oct 31 01:19:44.357000 audit: BPF prog-id=57 op=UNLOAD Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit: BPF prog-id=101 op=LOAD Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.357000 audit: BPF prog-id=102 op=LOAD Oct 31 01:19:44.357000 audit: BPF prog-id=58 op=UNLOAD Oct 31 01:19:44.357000 audit: BPF prog-id=59 op=UNLOAD Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.359000 audit: BPF prog-id=103 op=LOAD Oct 31 01:19:44.359000 audit: BPF prog-id=77 op=UNLOAD Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.360000 audit: BPF prog-id=104 op=LOAD Oct 31 01:19:44.360000 audit: BPF prog-id=73 op=UNLOAD Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.362000 audit: BPF prog-id=105 op=LOAD Oct 31 01:19:44.362000 audit: BPF prog-id=60 op=UNLOAD Oct 31 01:19:44.375499 systemd[1]: Stopping kubelet.service... Oct 31 01:19:44.397361 systemd[1]: kubelet.service: Deactivated successfully. Oct 31 01:19:44.397553 systemd[1]: Stopped kubelet.service. Oct 31 01:19:44.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:44.397611 systemd[1]: kubelet.service: Consumed 1.189s CPU time. Oct 31 01:19:44.399179 systemd[1]: Starting kubelet.service... Oct 31 01:19:44.497034 systemd[1]: Started kubelet.service. Oct 31 01:19:44.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:44.533222 kubelet[1989]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 31 01:19:44.533222 kubelet[1989]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Oct 31 01:19:44.533222 kubelet[1989]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 31 01:19:44.533892 kubelet[1989]: I1031 01:19:44.533247 1989 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 31 01:19:44.540683 kubelet[1989]: I1031 01:19:44.540624 1989 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Oct 31 01:19:44.540683 kubelet[1989]: I1031 01:19:44.540655 1989 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 31 01:19:44.540944 kubelet[1989]: I1031 01:19:44.540925 1989 server.go:956] "Client rotation is on, will bootstrap in background" Oct 31 01:19:44.542109 kubelet[1989]: I1031 01:19:44.542081 1989 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Oct 31 01:19:44.544223 kubelet[1989]: I1031 01:19:44.543985 1989 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 31 01:19:44.548907 kubelet[1989]: E1031 01:19:44.548864 1989 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Oct 31 01:19:44.549112 kubelet[1989]: I1031 01:19:44.549074 1989 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Oct 31 01:19:44.554387 kubelet[1989]: I1031 01:19:44.554348 1989 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 31 01:19:44.554716 kubelet[1989]: I1031 01:19:44.554684 1989 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 31 01:19:44.554931 kubelet[1989]: I1031 01:19:44.554717 1989 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Oct 31 01:19:44.555049 kubelet[1989]: I1031 01:19:44.554936 1989 topology_manager.go:138] "Creating topology manager with none policy" Oct 31 01:19:44.555049 kubelet[1989]: I1031 01:19:44.554949 1989 container_manager_linux.go:303] "Creating device plugin manager" Oct 31 01:19:44.555049 kubelet[1989]: I1031 01:19:44.554999 1989 state_mem.go:36] "Initialized new in-memory state store" Oct 31 01:19:44.555191 kubelet[1989]: I1031 01:19:44.555154 1989 kubelet.go:480] "Attempting to sync node with API server" Oct 31 01:19:44.555191 kubelet[1989]: I1031 01:19:44.555170 1989 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 31 01:19:44.555262 kubelet[1989]: I1031 01:19:44.555195 1989 kubelet.go:386] "Adding apiserver pod source" Oct 31 01:19:44.555262 kubelet[1989]: I1031 01:19:44.555209 1989 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 31 01:19:44.560320 kubelet[1989]: I1031 01:19:44.560291 1989 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 31 01:19:44.560942 kubelet[1989]: I1031 01:19:44.560892 1989 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Oct 31 01:19:44.563564 kubelet[1989]: I1031 01:19:44.563549 1989 watchdog_linux.go:99] "Systemd watchdog is not enabled" Oct 31 01:19:44.563683 kubelet[1989]: I1031 01:19:44.563621 1989 server.go:1289] "Started kubelet" Oct 31 01:19:44.564005 kubelet[1989]: I1031 01:19:44.563887 1989 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Oct 31 01:19:44.564356 kubelet[1989]: I1031 01:19:44.564284 1989 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Oct 31 01:19:44.565116 kubelet[1989]: I1031 01:19:44.565090 1989 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 31 01:19:44.566078 kubelet[1989]: I1031 01:19:44.566060 1989 server.go:317] "Adding debug handlers to kubelet server" Oct 31 01:19:44.565000 audit[1989]: AVC avc: denied { mac_admin } for pid=1989 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.565000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 01:19:44.565000 audit[1989]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bfea50 a1=c00092fd40 a2=c000bfea20 a3=25 items=0 ppid=1 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:44.565000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 01:19:44.566959 kubelet[1989]: I1031 01:19:44.566932 1989 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Oct 31 01:19:44.566000 audit[1989]: AVC avc: denied { mac_admin } for pid=1989 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.566000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 01:19:44.566000 audit[1989]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000963a80 a1=c00092fd58 a2=c000bfeae0 a3=25 items=0 ppid=1 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:44.566000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 01:19:44.567421 kubelet[1989]: I1031 01:19:44.567398 1989 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Oct 31 01:19:44.567546 kubelet[1989]: I1031 01:19:44.567527 1989 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 31 01:19:44.568027 kubelet[1989]: I1031 01:19:44.568004 1989 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Oct 31 01:19:44.572670 kubelet[1989]: E1031 01:19:44.570033 1989 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 01:19:44.572670 kubelet[1989]: I1031 01:19:44.570084 1989 volume_manager.go:297] "Starting Kubelet Volume Manager" Oct 31 01:19:44.572670 kubelet[1989]: I1031 01:19:44.570345 1989 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Oct 31 01:19:44.572670 kubelet[1989]: I1031 01:19:44.570457 1989 reconciler.go:26] "Reconciler: start to sync state" Oct 31 01:19:44.572670 kubelet[1989]: E1031 01:19:44.570911 1989 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 31 01:19:44.572670 kubelet[1989]: I1031 01:19:44.571100 1989 factory.go:223] Registration of the systemd container factory successfully Oct 31 01:19:44.572670 kubelet[1989]: I1031 01:19:44.571202 1989 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Oct 31 01:19:44.574983 kubelet[1989]: I1031 01:19:44.574957 1989 factory.go:223] Registration of the containerd container factory successfully Oct 31 01:19:44.604887 kubelet[1989]: I1031 01:19:44.604826 1989 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Oct 31 01:19:44.606496 kubelet[1989]: I1031 01:19:44.606474 1989 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Oct 31 01:19:44.606634 kubelet[1989]: I1031 01:19:44.606605 1989 status_manager.go:230] "Starting to sync pod status with apiserver" Oct 31 01:19:44.606742 kubelet[1989]: I1031 01:19:44.606720 1989 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Oct 31 01:19:44.606853 kubelet[1989]: I1031 01:19:44.606836 1989 kubelet.go:2436] "Starting kubelet main sync loop" Oct 31 01:19:44.607028 kubelet[1989]: E1031 01:19:44.607001 1989 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 31 01:19:44.618879 kubelet[1989]: I1031 01:19:44.618844 1989 cpu_manager.go:221] "Starting CPU manager" policy="none" Oct 31 01:19:44.618879 kubelet[1989]: I1031 01:19:44.618865 1989 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Oct 31 01:19:44.618879 kubelet[1989]: I1031 01:19:44.618891 1989 state_mem.go:36] "Initialized new in-memory state store" Oct 31 01:19:44.619098 kubelet[1989]: I1031 01:19:44.619058 1989 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 31 01:19:44.619098 kubelet[1989]: I1031 01:19:44.619075 1989 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 31 01:19:44.619098 kubelet[1989]: I1031 01:19:44.619097 1989 policy_none.go:49] "None policy: Start" Oct 31 01:19:44.619193 kubelet[1989]: I1031 01:19:44.619109 1989 memory_manager.go:186] "Starting memorymanager" policy="None" Oct 31 01:19:44.619193 kubelet[1989]: I1031 01:19:44.619121 1989 state_mem.go:35] "Initializing new in-memory state store" Oct 31 01:19:44.619285 kubelet[1989]: I1031 01:19:44.619231 1989 state_mem.go:75] "Updated machine memory state" Oct 31 01:19:44.622734 kubelet[1989]: E1031 01:19:44.622699 1989 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Oct 31 01:19:44.621000 audit[1989]: AVC avc: denied { mac_admin } for pid=1989 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:44.621000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 01:19:44.621000 audit[1989]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000561170 a1=c000a5e678 a2=c000561140 a3=25 items=0 ppid=1 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:44.621000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 01:19:44.623086 kubelet[1989]: E1031 01:19:44.622839 1989 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Oct 31 01:19:44.623086 kubelet[1989]: I1031 01:19:44.623013 1989 eviction_manager.go:189] "Eviction manager: starting control loop" Oct 31 01:19:44.623086 kubelet[1989]: I1031 01:19:44.623028 1989 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Oct 31 01:19:44.623331 kubelet[1989]: I1031 01:19:44.623226 1989 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 31 01:19:44.625232 kubelet[1989]: E1031 01:19:44.624483 1989 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Oct 31 01:19:44.708576 kubelet[1989]: I1031 01:19:44.708512 1989 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 31 01:19:44.708830 kubelet[1989]: I1031 01:19:44.708610 1989 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:44.708830 kubelet[1989]: I1031 01:19:44.708512 1989 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:44.726598 kubelet[1989]: I1031 01:19:44.726565 1989 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 01:19:44.772800 kubelet[1989]: I1031 01:19:44.772650 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d13d96f639b65e57f439b4396b605564-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d13d96f639b65e57f439b4396b605564\") " pod="kube-system/kube-scheduler-localhost" Oct 31 01:19:44.772800 kubelet[1989]: I1031 01:19:44.772736 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/947141ec7fa7ae35fe8d06b2bb0c16e5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"947141ec7fa7ae35fe8d06b2bb0c16e5\") " pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:44.773089 kubelet[1989]: I1031 01:19:44.772848 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/947141ec7fa7ae35fe8d06b2bb0c16e5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"947141ec7fa7ae35fe8d06b2bb0c16e5\") " pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:44.773089 kubelet[1989]: I1031 01:19:44.772910 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:44.773089 kubelet[1989]: I1031 01:19:44.772933 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:44.773089 kubelet[1989]: I1031 01:19:44.772951 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:44.773089 kubelet[1989]: I1031 01:19:44.772971 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:44.773283 kubelet[1989]: I1031 01:19:44.772993 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/947141ec7fa7ae35fe8d06b2bb0c16e5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"947141ec7fa7ae35fe8d06b2bb0c16e5\") " pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:44.773283 kubelet[1989]: I1031 01:19:44.773009 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/20c890a246d840d308022312da9174cb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"20c890a246d840d308022312da9174cb\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:44.860459 kubelet[1989]: E1031 01:19:44.860397 1989 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 31 01:19:44.861026 kubelet[1989]: E1031 01:19:44.860990 1989 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 31 01:19:44.861082 kubelet[1989]: E1031 01:19:44.861036 1989 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:44.862274 kubelet[1989]: I1031 01:19:44.862238 1989 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Oct 31 01:19:44.862334 kubelet[1989]: I1031 01:19:44.862312 1989 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Oct 31 01:19:45.161259 kubelet[1989]: E1031 01:19:45.161138 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:45.161519 kubelet[1989]: E1031 01:19:45.161180 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:45.161603 kubelet[1989]: E1031 01:19:45.161376 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:45.556075 kubelet[1989]: I1031 01:19:45.556023 1989 apiserver.go:52] "Watching apiserver" Oct 31 01:19:45.570514 kubelet[1989]: I1031 01:19:45.570469 1989 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Oct 31 01:19:45.615987 kubelet[1989]: E1031 01:19:45.615936 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:45.616163 kubelet[1989]: I1031 01:19:45.616093 1989 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:45.616568 kubelet[1989]: E1031 01:19:45.616535 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:45.627839 kubelet[1989]: E1031 01:19:45.626817 1989 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 31 01:19:45.627839 kubelet[1989]: E1031 01:19:45.627041 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:45.641336 kubelet[1989]: I1031 01:19:45.641251 1989 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.641225562 podStartE2EDuration="2.641225562s" podCreationTimestamp="2025-10-31 01:19:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 01:19:45.641214949 +0000 UTC m=+1.138301175" watchObservedRunningTime="2025-10-31 01:19:45.641225562 +0000 UTC m=+1.138311798" Oct 31 01:19:45.655916 kubelet[1989]: I1031 01:19:45.655849 1989 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.655829709 podStartE2EDuration="2.655829709s" podCreationTimestamp="2025-10-31 01:19:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 01:19:45.648069005 +0000 UTC m=+1.145155241" watchObservedRunningTime="2025-10-31 01:19:45.655829709 +0000 UTC m=+1.152915935" Oct 31 01:19:45.664340 kubelet[1989]: I1031 01:19:45.664264 1989 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.66424485 podStartE2EDuration="2.66424485s" podCreationTimestamp="2025-10-31 01:19:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 01:19:45.656022334 +0000 UTC m=+1.153108560" watchObservedRunningTime="2025-10-31 01:19:45.66424485 +0000 UTC m=+1.161331086" Oct 31 01:19:46.088000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520971 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 31 01:19:46.088000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e57980 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:19:46.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:19:46.617312 kubelet[1989]: E1031 01:19:46.617269 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:46.617758 kubelet[1989]: E1031 01:19:46.617565 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:48.397778 kubelet[1989]: E1031 01:19:48.397710 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:48.903785 kubelet[1989]: I1031 01:19:48.903727 1989 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 31 01:19:48.904186 env[1208]: time="2025-10-31T01:19:48.904145561Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 31 01:19:48.904468 kubelet[1989]: I1031 01:19:48.904437 1989 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 31 01:19:49.760254 systemd[1]: Created slice kubepods-besteffort-podbaa8f1f0_a10b_4ff1_bb5e_6cacdab1d8ce.slice. Oct 31 01:19:49.805509 kubelet[1989]: I1031 01:19:49.805429 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce-kube-proxy\") pod \"kube-proxy-rk5w5\" (UID: \"baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce\") " pod="kube-system/kube-proxy-rk5w5" Oct 31 01:19:49.805509 kubelet[1989]: I1031 01:19:49.805483 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce-xtables-lock\") pod \"kube-proxy-rk5w5\" (UID: \"baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce\") " pod="kube-system/kube-proxy-rk5w5" Oct 31 01:19:49.805509 kubelet[1989]: I1031 01:19:49.805495 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce-lib-modules\") pod \"kube-proxy-rk5w5\" (UID: \"baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce\") " pod="kube-system/kube-proxy-rk5w5" Oct 31 01:19:49.805509 kubelet[1989]: I1031 01:19:49.805510 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-skxmg\" (UniqueName: \"kubernetes.io/projected/baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce-kube-api-access-skxmg\") pod \"kube-proxy-rk5w5\" (UID: \"baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce\") " pod="kube-system/kube-proxy-rk5w5" Oct 31 01:19:49.911206 kubelet[1989]: I1031 01:19:49.911162 1989 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Oct 31 01:19:50.068346 kubelet[1989]: E1031 01:19:50.068282 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:50.069601 env[1208]: time="2025-10-31T01:19:50.069162290Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rk5w5,Uid:baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce,Namespace:kube-system,Attempt:0,}" Oct 31 01:19:50.076896 systemd[1]: Created slice kubepods-besteffort-podf2d02fc8_3188_494a_a425_5882df0110c1.slice. Oct 31 01:19:50.085944 env[1208]: time="2025-10-31T01:19:50.085845737Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:19:50.085944 env[1208]: time="2025-10-31T01:19:50.085892029Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:19:50.085944 env[1208]: time="2025-10-31T01:19:50.085903002Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:19:50.086164 env[1208]: time="2025-10-31T01:19:50.086103981Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/57da8318289e1540391ed96e578baab972edf8d9c3620d98619d990531337055 pid=2051 runtime=io.containerd.runc.v2 Oct 31 01:19:50.101638 systemd[1]: run-containerd-runc-k8s.io-57da8318289e1540391ed96e578baab972edf8d9c3620d98619d990531337055-runc.wBVTCj.mount: Deactivated successfully. Oct 31 01:19:50.106428 systemd[1]: Started cri-containerd-57da8318289e1540391ed96e578baab972edf8d9c3620d98619d990531337055.scope. Oct 31 01:19:50.108500 kubelet[1989]: I1031 01:19:50.108470 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f2d02fc8-3188-494a-a425-5882df0110c1-var-lib-calico\") pod \"tigera-operator-7dcd859c48-p5xwp\" (UID: \"f2d02fc8-3188-494a-a425-5882df0110c1\") " pod="tigera-operator/tigera-operator-7dcd859c48-p5xwp" Oct 31 01:19:50.108608 kubelet[1989]: I1031 01:19:50.108521 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fccbz\" (UniqueName: \"kubernetes.io/projected/f2d02fc8-3188-494a-a425-5882df0110c1-kube-api-access-fccbz\") pod \"tigera-operator-7dcd859c48-p5xwp\" (UID: \"f2d02fc8-3188-494a-a425-5882df0110c1\") " pod="tigera-operator/tigera-operator-7dcd859c48-p5xwp" Oct 31 01:19:50.123067 kernel: kauditd_printk_skb: 287 callbacks suppressed Oct 31 01:19:50.123182 kernel: audit: type=1400 audit(1761873590.115:813): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.123210 kernel: audit: type=1400 audit(1761873590.115:814): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132702 kernel: audit: type=1400 audit(1761873590.115:815): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132785 kernel: audit: type=1400 audit(1761873590.115:816): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.142627 kernel: audit: type=1400 audit(1761873590.115:817): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.142720 kernel: audit: type=1400 audit(1761873590.115:818): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.147531 kernel: audit: type=1400 audit(1761873590.115:819): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.158140 kernel: audit: type=1400 audit(1761873590.115:820): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.158199 kernel: audit: type=1400 audit(1761873590.115:821): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.167965 kernel: audit: type=1400 audit(1761873590.122:822): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit: BPF prog-id=106 op=LOAD Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2051 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537646138333138323839653135343033393165643936653537386261 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2051 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537646138333138323839653135343033393165643936653537386261 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.122000 audit: BPF prog-id=107 op=LOAD Oct 31 01:19:50.122000 audit[2061]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00035dff0 items=0 ppid=2051 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537646138333138323839653135343033393165643936653537386261 Oct 31 01:19:50.127000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.127000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.127000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.127000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.127000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.127000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.127000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.127000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.127000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.127000 audit: BPF prog-id=108 op=LOAD Oct 31 01:19:50.127000 audit[2061]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003c2038 items=0 ppid=2051 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537646138333138323839653135343033393165643936653537386261 Oct 31 01:19:50.132000 audit: BPF prog-id=108 op=UNLOAD Oct 31 01:19:50.132000 audit: BPF prog-id=107 op=UNLOAD Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { perfmon } for pid=2061 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit[2061]: AVC avc: denied { bpf } for pid=2061 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.132000 audit: BPF prog-id=109 op=LOAD Oct 31 01:19:50.132000 audit[2061]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003c2448 items=0 ppid=2051 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537646138333138323839653135343033393165643936653537386261 Oct 31 01:19:50.174666 env[1208]: time="2025-10-31T01:19:50.174582722Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rk5w5,Uid:baa8f1f0-a10b-4ff1-bb5e-6cacdab1d8ce,Namespace:kube-system,Attempt:0,} returns sandbox id \"57da8318289e1540391ed96e578baab972edf8d9c3620d98619d990531337055\"" Oct 31 01:19:50.175570 kubelet[1989]: E1031 01:19:50.175535 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:50.181105 env[1208]: time="2025-10-31T01:19:50.181060359Z" level=info msg="CreateContainer within sandbox \"57da8318289e1540391ed96e578baab972edf8d9c3620d98619d990531337055\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 31 01:19:50.197054 env[1208]: time="2025-10-31T01:19:50.196974777Z" level=info msg="CreateContainer within sandbox \"57da8318289e1540391ed96e578baab972edf8d9c3620d98619d990531337055\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"b58b20830486c3e72e287ca8aab2bf2e82143002b946d3d1998dbae9260f8bc7\"" Oct 31 01:19:50.197578 env[1208]: time="2025-10-31T01:19:50.197541184Z" level=info msg="StartContainer for \"b58b20830486c3e72e287ca8aab2bf2e82143002b946d3d1998dbae9260f8bc7\"" Oct 31 01:19:50.218668 systemd[1]: Started cri-containerd-b58b20830486c3e72e287ca8aab2bf2e82143002b946d3d1998dbae9260f8bc7.scope. Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f45b5266688 items=0 ppid=2051 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235386232303833303438366333653732653238376361386161623262 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit: BPF prog-id=110 op=LOAD Oct 31 01:19:50.234000 audit[2090]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000212808 items=0 ppid=2051 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235386232303833303438366333653732653238376361386161623262 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit: BPF prog-id=111 op=LOAD Oct 31 01:19:50.234000 audit[2090]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000212858 items=0 ppid=2051 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235386232303833303438366333653732653238376361386161623262 Oct 31 01:19:50.234000 audit: BPF prog-id=111 op=UNLOAD Oct 31 01:19:50.234000 audit: BPF prog-id=110 op=UNLOAD Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { perfmon } for pid=2090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit[2090]: AVC avc: denied { bpf } for pid=2090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.234000 audit: BPF prog-id=112 op=LOAD Oct 31 01:19:50.234000 audit[2090]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002128e8 items=0 ppid=2051 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235386232303833303438366333653732653238376361386161623262 Oct 31 01:19:50.253840 kubelet[1989]: E1031 01:19:50.253798 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:50.297237 env[1208]: time="2025-10-31T01:19:50.297153632Z" level=info msg="StartContainer for \"b58b20830486c3e72e287ca8aab2bf2e82143002b946d3d1998dbae9260f8bc7\" returns successfully" Oct 31 01:19:50.355000 audit[2154]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.355000 audit[2154]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe84dd8b70 a2=0 a3=7ffe84dd8b5c items=0 ppid=2102 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.355000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 31 01:19:50.356000 audit[2155]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.356000 audit[2155]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1b5e9020 a2=0 a3=7ffe1b5e900c items=0 ppid=2102 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.356000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 31 01:19:50.357000 audit[2157]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.357000 audit[2157]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd31a2870 a2=0 a3=7fffd31a285c items=0 ppid=2102 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.357000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 31 01:19:50.358000 audit[2159]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.358000 audit[2159]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffde6aeca70 a2=0 a3=7ffde6aeca5c items=0 ppid=2102 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.358000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 31 01:19:50.361000 audit[2161]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.361000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4b7e3870 a2=0 a3=7fff4b7e385c items=0 ppid=2102 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.361000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 31 01:19:50.362000 audit[2163]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.362000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdee744fb0 a2=0 a3=7ffdee744f9c items=0 ppid=2102 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.362000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 31 01:19:50.380715 env[1208]: time="2025-10-31T01:19:50.380674855Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-p5xwp,Uid:f2d02fc8-3188-494a-a425-5882df0110c1,Namespace:tigera-operator,Attempt:0,}" Oct 31 01:19:50.397748 env[1208]: time="2025-10-31T01:19:50.397669462Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:19:50.397748 env[1208]: time="2025-10-31T01:19:50.397714430Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:19:50.397748 env[1208]: time="2025-10-31T01:19:50.397727408Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:19:50.398016 env[1208]: time="2025-10-31T01:19:50.397974709Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3ebd0cda3ae1b68b28126fbf364d2ceb8be009eca65af6894fce7de2d010a7c5 pid=2171 runtime=io.containerd.runc.v2 Oct 31 01:19:50.409418 systemd[1]: Started cri-containerd-3ebd0cda3ae1b68b28126fbf364d2ceb8be009eca65af6894fce7de2d010a7c5.scope. Oct 31 01:19:50.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit: BPF prog-id=113 op=LOAD Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365626430636461336165316236386232383132366662663336346432 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365626430636461336165316236386232383132366662663336346432 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit: BPF prog-id=114 op=LOAD Oct 31 01:19:50.421000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001e7a20 items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365626430636461336165316236386232383132366662663336346432 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit: BPF prog-id=115 op=LOAD Oct 31 01:19:50.421000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001e7a68 items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365626430636461336165316236386232383132366662663336346432 Oct 31 01:19:50.421000 audit: BPF prog-id=115 op=UNLOAD Oct 31 01:19:50.421000 audit: BPF prog-id=114 op=UNLOAD Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { perfmon } for pid=2180 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit[2180]: AVC avc: denied { bpf } for pid=2180 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:50.421000 audit: BPF prog-id=116 op=LOAD Oct 31 01:19:50.421000 audit[2180]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001e7e78 items=0 ppid=2171 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365626430636461336165316236386232383132366662663336346432 Oct 31 01:19:50.449122 env[1208]: time="2025-10-31T01:19:50.448167521Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-p5xwp,Uid:f2d02fc8-3188-494a-a425-5882df0110c1,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"3ebd0cda3ae1b68b28126fbf364d2ceb8be009eca65af6894fce7de2d010a7c5\"" Oct 31 01:19:50.451346 env[1208]: time="2025-10-31T01:19:50.451317190Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Oct 31 01:19:50.460000 audit[2205]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.460000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc9c8fdc30 a2=0 a3=7ffc9c8fdc1c items=0 ppid=2102 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.460000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 31 01:19:50.462000 audit[2207]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.462000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffeb9029b60 a2=0 a3=7ffeb9029b4c items=0 ppid=2102 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.462000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 31 01:19:50.465000 audit[2210]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.465000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff256ca1a0 a2=0 a3=7fff256ca18c items=0 ppid=2102 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.465000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 31 01:19:50.466000 audit[2211]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.466000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb214e3d0 a2=0 a3=7ffeb214e3bc items=0 ppid=2102 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.466000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 31 01:19:50.468000 audit[2213]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.468000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff6d45af70 a2=0 a3=7fff6d45af5c items=0 ppid=2102 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.468000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 31 01:19:50.469000 audit[2214]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.469000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc774d380 a2=0 a3=7ffdc774d36c items=0 ppid=2102 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.469000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 31 01:19:50.471000 audit[2216]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.471000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe9f355190 a2=0 a3=7ffe9f35517c items=0 ppid=2102 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.471000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 31 01:19:50.474000 audit[2219]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.474000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffea389ef10 a2=0 a3=7ffea389eefc items=0 ppid=2102 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.474000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 31 01:19:50.475000 audit[2220]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.475000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc3d4b7a20 a2=0 a3=7ffc3d4b7a0c items=0 ppid=2102 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.475000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 31 01:19:50.477000 audit[2222]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.477000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdc83679a0 a2=0 a3=7ffdc836798c items=0 ppid=2102 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.477000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 31 01:19:50.478000 audit[2223]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.478000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe0eedca70 a2=0 a3=7ffe0eedca5c items=0 ppid=2102 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.478000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 31 01:19:50.481000 audit[2225]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.481000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff8faa8fe0 a2=0 a3=7fff8faa8fcc items=0 ppid=2102 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.481000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 31 01:19:50.484000 audit[2228]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.484000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff4732d780 a2=0 a3=7fff4732d76c items=0 ppid=2102 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.484000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 31 01:19:50.487000 audit[2231]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.487000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd3fb63730 a2=0 a3=7ffd3fb6371c items=0 ppid=2102 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.487000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 31 01:19:50.488000 audit[2232]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.488000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffc8d7cc70 a2=0 a3=7fffc8d7cc5c items=0 ppid=2102 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.488000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 31 01:19:50.490000 audit[2234]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.490000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc05c54a20 a2=0 a3=7ffc05c54a0c items=0 ppid=2102 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.490000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 31 01:19:50.493000 audit[2237]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.493000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd4bb7cc80 a2=0 a3=7ffd4bb7cc6c items=0 ppid=2102 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.493000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 31 01:19:50.494000 audit[2238]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.494000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc57c0590 a2=0 a3=7ffcc57c057c items=0 ppid=2102 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.494000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 31 01:19:50.496000 audit[2240]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 01:19:50.496000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc2637e7b0 a2=0 a3=7ffc2637e79c items=0 ppid=2102 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.496000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 31 01:19:50.517000 audit[2246]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:19:50.517000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcaeab4f30 a2=0 a3=7ffcaeab4f1c items=0 ppid=2102 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.517000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:19:50.526000 audit[2246]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:19:50.526000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffcaeab4f30 a2=0 a3=7ffcaeab4f1c items=0 ppid=2102 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.526000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:19:50.527000 audit[2251]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.527000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffeb39c6cf0 a2=0 a3=7ffeb39c6cdc items=0 ppid=2102 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.527000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 31 01:19:50.529000 audit[2253]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.529000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc488a95d0 a2=0 a3=7ffc488a95bc items=0 ppid=2102 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.529000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 31 01:19:50.532000 audit[2256]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.532000 audit[2256]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe316faa80 a2=0 a3=7ffe316faa6c items=0 ppid=2102 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.532000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 31 01:19:50.533000 audit[2257]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.533000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe292b05b0 a2=0 a3=7ffe292b059c items=0 ppid=2102 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.533000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 31 01:19:50.535000 audit[2259]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2259 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.535000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe7d5e7550 a2=0 a3=7ffe7d5e753c items=0 ppid=2102 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.535000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 31 01:19:50.536000 audit[2260]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.536000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdbc00b580 a2=0 a3=7ffdbc00b56c items=0 ppid=2102 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.536000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 31 01:19:50.539000 audit[2262]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.539000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc46cbe7e0 a2=0 a3=7ffc46cbe7cc items=0 ppid=2102 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.539000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 31 01:19:50.542000 audit[2265]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.542000 audit[2265]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe5521e800 a2=0 a3=7ffe5521e7ec items=0 ppid=2102 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.542000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 31 01:19:50.543000 audit[2266]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.543000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe6c1d05a0 a2=0 a3=7ffe6c1d058c items=0 ppid=2102 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.543000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 31 01:19:50.545000 audit[2268]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.545000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff19d14bb0 a2=0 a3=7fff19d14b9c items=0 ppid=2102 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.545000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 31 01:19:50.546000 audit[2269]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.546000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdac3e66e0 a2=0 a3=7ffdac3e66cc items=0 ppid=2102 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.546000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 31 01:19:50.548000 audit[2271]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2271 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.548000 audit[2271]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc144878c0 a2=0 a3=7ffc144878ac items=0 ppid=2102 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.548000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 31 01:19:50.551000 audit[2274]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2274 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.551000 audit[2274]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcff638ea0 a2=0 a3=7ffcff638e8c items=0 ppid=2102 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.551000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 31 01:19:50.555000 audit[2277]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.555000 audit[2277]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc9227b600 a2=0 a3=7ffc9227b5ec items=0 ppid=2102 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 31 01:19:50.555000 audit[2278]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.555000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc26c69eb0 a2=0 a3=7ffc26c69e9c items=0 ppid=2102 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 31 01:19:50.557000 audit[2280]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.557000 audit[2280]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff90211c50 a2=0 a3=7fff90211c3c items=0 ppid=2102 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.557000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 31 01:19:50.560000 audit[2283]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2283 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.560000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fffb1871f90 a2=0 a3=7fffb1871f7c items=0 ppid=2102 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.560000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 31 01:19:50.561000 audit[2284]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.561000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd93e5f4a0 a2=0 a3=7ffd93e5f48c items=0 ppid=2102 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.561000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 31 01:19:50.563000 audit[2286]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.563000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe622dd550 a2=0 a3=7ffe622dd53c items=0 ppid=2102 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.563000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 31 01:19:50.564000 audit[2287]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.564000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe3eae7ce0 a2=0 a3=7ffe3eae7ccc items=0 ppid=2102 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.564000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 31 01:19:50.566000 audit[2289]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.566000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd16d0b6e0 a2=0 a3=7ffd16d0b6cc items=0 ppid=2102 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.566000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 31 01:19:50.569000 audit[2292]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 01:19:50.569000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffb210fd60 a2=0 a3=7fffb210fd4c items=0 ppid=2102 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.569000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 31 01:19:50.572000 audit[2294]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 31 01:19:50.572000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7fffc697a270 a2=0 a3=7fffc697a25c items=0 ppid=2102 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.572000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:19:50.572000 audit[2294]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 31 01:19:50.572000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fffc697a270 a2=0 a3=7fffc697a25c items=0 ppid=2102 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:50.572000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:19:50.624625 kubelet[1989]: E1031 01:19:50.624474 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:50.624846 kubelet[1989]: E1031 01:19:50.624749 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:50.645037 kubelet[1989]: I1031 01:19:50.644971 1989 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-rk5w5" podStartSLOduration=1.644950653 podStartE2EDuration="1.644950653s" podCreationTimestamp="2025-10-31 01:19:49 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 01:19:50.644754325 +0000 UTC m=+6.141840581" watchObservedRunningTime="2025-10-31 01:19:50.644950653 +0000 UTC m=+6.142036889" Oct 31 01:19:50.781229 kubelet[1989]: E1031 01:19:50.781186 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:51.626732 kubelet[1989]: E1031 01:19:51.626675 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:51.940327 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3700696047.mount: Deactivated successfully. Oct 31 01:19:53.054544 env[1208]: time="2025-10-31T01:19:53.054486259Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:53.056363 env[1208]: time="2025-10-31T01:19:53.056320894Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:53.058011 env[1208]: time="2025-10-31T01:19:53.057988058Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:53.059413 env[1208]: time="2025-10-31T01:19:53.059375801Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:19:53.059976 env[1208]: time="2025-10-31T01:19:53.059937228Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:f2c1be207523e593db82e3b8cf356a12f3ad8d1aad2225f8114b2cf9d6486cf1\"" Oct 31 01:19:53.064470 env[1208]: time="2025-10-31T01:19:53.064439737Z" level=info msg="CreateContainer within sandbox \"3ebd0cda3ae1b68b28126fbf364d2ceb8be009eca65af6894fce7de2d010a7c5\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 31 01:19:53.076697 env[1208]: time="2025-10-31T01:19:53.076649797Z" level=info msg="CreateContainer within sandbox \"3ebd0cda3ae1b68b28126fbf364d2ceb8be009eca65af6894fce7de2d010a7c5\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"3a98ccd5f218a8abfc7c55dc99b69e9156b5c28b42019dc6f0b90c2716a77866\"" Oct 31 01:19:53.077297 env[1208]: time="2025-10-31T01:19:53.077271965Z" level=info msg="StartContainer for \"3a98ccd5f218a8abfc7c55dc99b69e9156b5c28b42019dc6f0b90c2716a77866\"" Oct 31 01:19:53.094857 systemd[1]: Started cri-containerd-3a98ccd5f218a8abfc7c55dc99b69e9156b5c28b42019dc6f0b90c2716a77866.scope. Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.107000 audit: BPF prog-id=117 op=LOAD Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2171 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:53.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361393863636435663231386138616266633763353564633939623639 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2171 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:53.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361393863636435663231386138616266633763353564633939623639 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit: BPF prog-id=118 op=LOAD Oct 31 01:19:53.108000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001d6c40 items=0 ppid=2171 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:53.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361393863636435663231386138616266633763353564633939623639 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit: BPF prog-id=119 op=LOAD Oct 31 01:19:53.108000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001d6c88 items=0 ppid=2171 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:53.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361393863636435663231386138616266633763353564633939623639 Oct 31 01:19:53.108000 audit: BPF prog-id=119 op=UNLOAD Oct 31 01:19:53.108000 audit: BPF prog-id=118 op=UNLOAD Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:19:53.108000 audit: BPF prog-id=120 op=LOAD Oct 31 01:19:53.108000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001d7098 items=0 ppid=2171 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:53.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361393863636435663231386138616266633763353564633939623639 Oct 31 01:19:53.193678 env[1208]: time="2025-10-31T01:19:53.193584517Z" level=info msg="StartContainer for \"3a98ccd5f218a8abfc7c55dc99b69e9156b5c28b42019dc6f0b90c2716a77866\" returns successfully" Oct 31 01:19:58.403347 kubelet[1989]: E1031 01:19:58.403293 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:58.411975 kubelet[1989]: I1031 01:19:58.411729 1989 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-p5xwp" podStartSLOduration=5.800842793 podStartE2EDuration="8.41169727s" podCreationTimestamp="2025-10-31 01:19:50 +0000 UTC" firstStartedPulling="2025-10-31 01:19:50.449987226 +0000 UTC m=+5.947073452" lastFinishedPulling="2025-10-31 01:19:53.060841693 +0000 UTC m=+8.557927929" observedRunningTime="2025-10-31 01:19:53.638341934 +0000 UTC m=+9.135428170" watchObservedRunningTime="2025-10-31 01:19:58.41169727 +0000 UTC m=+13.908783506" Oct 31 01:19:58.623391 sudo[1344]: pam_unix(sudo:session): session closed for user root Oct 31 01:19:58.622000 audit[1344]: USER_END pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:58.631130 kernel: kauditd_printk_skb: 357 callbacks suppressed Oct 31 01:19:58.631209 kernel: audit: type=1106 audit(1761873598.622:924): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:58.627013 sshd[1341]: pam_unix(sshd:session): session closed for user core Oct 31 01:19:58.622000 audit[1344]: CRED_DISP pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:58.637414 kernel: audit: type=1104 audit(1761873598.622:925): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 01:19:58.638592 kubelet[1989]: E1031 01:19:58.638560 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:19:58.636000 audit[1341]: USER_END pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:58.646787 kernel: audit: type=1106 audit(1761873598.636:926): pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:58.647173 systemd[1]: sshd@6-10.0.0.131:22-10.0.0.1:48928.service: Deactivated successfully. Oct 31 01:19:58.647982 systemd[1]: session-7.scope: Deactivated successfully. Oct 31 01:19:58.648106 systemd[1]: session-7.scope: Consumed 5.627s CPU time. Oct 31 01:19:58.649138 systemd-logind[1196]: Session 7 logged out. Waiting for processes to exit. Oct 31 01:19:58.650154 systemd-logind[1196]: Removed session 7. Oct 31 01:19:58.637000 audit[1341]: CRED_DISP pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:58.659470 kernel: audit: type=1104 audit(1761873598.637:927): pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:19:58.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.131:22-10.0.0.1:48928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:58.665791 kernel: audit: type=1131 audit(1761873598.646:928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.131:22-10.0.0.1:48928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:19:59.079000 audit[2390]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2390 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:19:59.093341 kernel: audit: type=1325 audit(1761873599.079:929): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2390 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:19:59.093400 kernel: audit: type=1300 audit(1761873599.079:929): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff9f09b0a0 a2=0 a3=7fff9f09b08c items=0 ppid=2102 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:59.079000 audit[2390]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff9f09b0a0 a2=0 a3=7fff9f09b08c items=0 ppid=2102 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:59.079000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:19:59.100828 kernel: audit: type=1327 audit(1761873599.079:929): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:19:59.100000 audit[2390]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2390 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:19:59.105787 kernel: audit: type=1325 audit(1761873599.100:930): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2390 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:19:59.100000 audit[2390]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff9f09b0a0 a2=0 a3=0 items=0 ppid=2102 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:59.100000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:19:59.114810 kernel: audit: type=1300 audit(1761873599.100:930): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff9f09b0a0 a2=0 a3=0 items=0 ppid=2102 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:59.123000 audit[2392]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:19:59.123000 audit[2392]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeb3f6b180 a2=0 a3=7ffeb3f6b16c items=0 ppid=2102 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:59.123000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:19:59.129000 audit[2392]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:19:59.129000 audit[2392]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeb3f6b180 a2=0 a3=0 items=0 ppid=2102 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:19:59.129000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:00.815000 audit[2395]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:00.815000 audit[2395]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffdebbde950 a2=0 a3=7ffdebbde93c items=0 ppid=2102 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:00.815000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:00.821000 audit[2395]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:00.821000 audit[2395]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdebbde950 a2=0 a3=0 items=0 ppid=2102 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:00.821000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:01.831000 audit[2397]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:01.831000 audit[2397]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd18aecb70 a2=0 a3=7ffd18aecb5c items=0 ppid=2102 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:01.831000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:01.840000 audit[2397]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:01.840000 audit[2397]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd18aecb70 a2=0 a3=0 items=0 ppid=2102 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:01.840000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:03.355000 audit[2399]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:03.355000 audit[2399]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd402d5190 a2=0 a3=7ffd402d517c items=0 ppid=2102 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.355000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:03.360000 audit[2399]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:03.360000 audit[2399]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd402d5190 a2=0 a3=0 items=0 ppid=2102 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.360000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:03.375000 audit[2401]: NETFILTER_CFG table=filter:99 family=2 entries=22 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:03.375000 audit[2401]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffad5b2860 a2=0 a3=7fffad5b284c items=0 ppid=2102 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.375000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:03.382000 audit[2401]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:03.382000 audit[2401]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffad5b2860 a2=0 a3=0 items=0 ppid=2102 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.382000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:03.385121 systemd[1]: Created slice kubepods-besteffort-podc56a88a5_182c_464d_8ce1_31b00d7febec.slice. Oct 31 01:20:03.493075 kubelet[1989]: I1031 01:20:03.493003 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c56a88a5-182c-464d-8ce1-31b00d7febec-tigera-ca-bundle\") pod \"calico-typha-8688967d44-zjtht\" (UID: \"c56a88a5-182c-464d-8ce1-31b00d7febec\") " pod="calico-system/calico-typha-8688967d44-zjtht" Oct 31 01:20:03.493075 kubelet[1989]: I1031 01:20:03.493043 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/c56a88a5-182c-464d-8ce1-31b00d7febec-typha-certs\") pod \"calico-typha-8688967d44-zjtht\" (UID: \"c56a88a5-182c-464d-8ce1-31b00d7febec\") " pod="calico-system/calico-typha-8688967d44-zjtht" Oct 31 01:20:03.493075 kubelet[1989]: I1031 01:20:03.493060 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fgn97\" (UniqueName: \"kubernetes.io/projected/c56a88a5-182c-464d-8ce1-31b00d7febec-kube-api-access-fgn97\") pod \"calico-typha-8688967d44-zjtht\" (UID: \"c56a88a5-182c-464d-8ce1-31b00d7febec\") " pod="calico-system/calico-typha-8688967d44-zjtht" Oct 31 01:20:03.565667 systemd[1]: Created slice kubepods-besteffort-pod578005fa_2dc6_4c4c_9adf_5b9685baf143.slice. Oct 31 01:20:03.593989 kubelet[1989]: I1031 01:20:03.593934 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/578005fa-2dc6-4c4c-9adf-5b9685baf143-flexvol-driver-host\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594293 kubelet[1989]: I1031 01:20:03.594255 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/578005fa-2dc6-4c4c-9adf-5b9685baf143-cni-net-dir\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594484 kubelet[1989]: I1031 01:20:03.594369 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/578005fa-2dc6-4c4c-9adf-5b9685baf143-xtables-lock\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594484 kubelet[1989]: I1031 01:20:03.594396 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/578005fa-2dc6-4c4c-9adf-5b9685baf143-policysync\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594484 kubelet[1989]: I1031 01:20:03.594470 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/578005fa-2dc6-4c4c-9adf-5b9685baf143-var-run-calico\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594574 kubelet[1989]: I1031 01:20:03.594494 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/578005fa-2dc6-4c4c-9adf-5b9685baf143-cni-log-dir\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594574 kubelet[1989]: I1031 01:20:03.594516 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/578005fa-2dc6-4c4c-9adf-5b9685baf143-var-lib-calico\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594574 kubelet[1989]: I1031 01:20:03.594539 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/578005fa-2dc6-4c4c-9adf-5b9685baf143-cni-bin-dir\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594574 kubelet[1989]: I1031 01:20:03.594567 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/578005fa-2dc6-4c4c-9adf-5b9685baf143-node-certs\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594670 kubelet[1989]: I1031 01:20:03.594592 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-98lcd\" (UniqueName: \"kubernetes.io/projected/578005fa-2dc6-4c4c-9adf-5b9685baf143-kube-api-access-98lcd\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594670 kubelet[1989]: I1031 01:20:03.594614 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/578005fa-2dc6-4c4c-9adf-5b9685baf143-lib-modules\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.594670 kubelet[1989]: I1031 01:20:03.594636 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/578005fa-2dc6-4c4c-9adf-5b9685baf143-tigera-ca-bundle\") pod \"calico-node-mg6zb\" (UID: \"578005fa-2dc6-4c4c-9adf-5b9685baf143\") " pod="calico-system/calico-node-mg6zb" Oct 31 01:20:03.690515 kubelet[1989]: E1031 01:20:03.690370 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:03.691324 env[1208]: time="2025-10-31T01:20:03.691257773Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-8688967d44-zjtht,Uid:c56a88a5-182c-464d-8ce1-31b00d7febec,Namespace:calico-system,Attempt:0,}" Oct 31 01:20:03.696063 kubelet[1989]: E1031 01:20:03.696035 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.696063 kubelet[1989]: W1031 01:20:03.696056 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.696188 kubelet[1989]: E1031 01:20:03.696079 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.703185 kubelet[1989]: E1031 01:20:03.703163 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.703334 kubelet[1989]: W1031 01:20:03.703287 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.703334 kubelet[1989]: E1031 01:20:03.703314 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.706133 kubelet[1989]: E1031 01:20:03.706102 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.706133 kubelet[1989]: W1031 01:20:03.706119 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.706133 kubelet[1989]: E1031 01:20:03.706129 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.711737 env[1208]: time="2025-10-31T01:20:03.711643808Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:03.711737 env[1208]: time="2025-10-31T01:20:03.711693000Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:03.711737 env[1208]: time="2025-10-31T01:20:03.711702971Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:03.712143 env[1208]: time="2025-10-31T01:20:03.712043025Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/677117abb16c15eac1c1cf9c616b61a41d879da81d5e8bb78dd4b829472fad1d pid=2416 runtime=io.containerd.runc.v2 Oct 31 01:20:03.723971 systemd[1]: Started cri-containerd-677117abb16c15eac1c1cf9c616b61a41d879da81d5e8bb78dd4b829472fad1d.scope. Oct 31 01:20:03.740830 kernel: kauditd_printk_skb: 31 callbacks suppressed Oct 31 01:20:03.740954 kernel: audit: type=1400 audit(1761873603.737:941): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750974 kernel: audit: type=1400 audit(1761873603.737:942): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.756467 kernel: audit: type=1400 audit(1761873603.737:943): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.762332 kernel: audit: type=1400 audit(1761873603.737:944): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767866 kernel: audit: type=1400 audit(1761873603.737:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.773283 kernel: audit: type=1400 audit(1761873603.737:946): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.778502 kernel: audit: type=1400 audit(1761873603.737:947): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.778572 kernel: audit: type=1400 audit(1761873603.737:948): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.788844 kernel: audit: type=1400 audit(1761873603.737:949): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.790025 kubelet[1989]: E1031 01:20:03.789955 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:03.794196 kernel: audit: type=1400 audit(1761873603.750:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit: BPF prog-id=121 op=LOAD Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2416 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637373131376162623136633135656163316331636639633631366236 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2416 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637373131376162623136633135656163316331636639633631366236 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.750000 audit: BPF prog-id=122 op=LOAD Oct 31 01:20:03.750000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028cae0 items=0 ppid=2416 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637373131376162623136633135656163316331636639633631366236 Oct 31 01:20:03.767000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.767000 audit: BPF prog-id=123 op=LOAD Oct 31 01:20:03.767000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028cb28 items=0 ppid=2416 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637373131376162623136633135656163316331636639633631366236 Oct 31 01:20:03.772000 audit: BPF prog-id=123 op=UNLOAD Oct 31 01:20:03.772000 audit: BPF prog-id=122 op=UNLOAD Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.772000 audit: BPF prog-id=124 op=LOAD Oct 31 01:20:03.772000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00028cf38 items=0 ppid=2416 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637373131376162623136633135656163316331636639633631366236 Oct 31 01:20:03.825070 env[1208]: time="2025-10-31T01:20:03.825015826Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-8688967d44-zjtht,Uid:c56a88a5-182c-464d-8ce1-31b00d7febec,Namespace:calico-system,Attempt:0,} returns sandbox id \"677117abb16c15eac1c1cf9c616b61a41d879da81d5e8bb78dd4b829472fad1d\"" Oct 31 01:20:03.825880 kubelet[1989]: E1031 01:20:03.825859 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:03.826796 env[1208]: time="2025-10-31T01:20:03.826757639Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Oct 31 01:20:03.868385 kubelet[1989]: E1031 01:20:03.868066 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:03.868994 env[1208]: time="2025-10-31T01:20:03.868961777Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mg6zb,Uid:578005fa-2dc6-4c4c-9adf-5b9685baf143,Namespace:calico-system,Attempt:0,}" Oct 31 01:20:03.877680 kubelet[1989]: E1031 01:20:03.877644 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.877680 kubelet[1989]: W1031 01:20:03.877673 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.877840 kubelet[1989]: E1031 01:20:03.877701 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.878042 kubelet[1989]: E1031 01:20:03.878000 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.878042 kubelet[1989]: W1031 01:20:03.878013 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.878042 kubelet[1989]: E1031 01:20:03.878022 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.878271 kubelet[1989]: E1031 01:20:03.878239 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.878271 kubelet[1989]: W1031 01:20:03.878247 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.878271 kubelet[1989]: E1031 01:20:03.878257 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.878521 kubelet[1989]: E1031 01:20:03.878493 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.878521 kubelet[1989]: W1031 01:20:03.878504 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.878521 kubelet[1989]: E1031 01:20:03.878515 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.878722 kubelet[1989]: E1031 01:20:03.878708 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.878722 kubelet[1989]: W1031 01:20:03.878718 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.878839 kubelet[1989]: E1031 01:20:03.878727 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.878909 kubelet[1989]: E1031 01:20:03.878894 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.878909 kubelet[1989]: W1031 01:20:03.878903 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.878993 kubelet[1989]: E1031 01:20:03.878912 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.879073 kubelet[1989]: E1031 01:20:03.879062 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.879073 kubelet[1989]: W1031 01:20:03.879072 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.879127 kubelet[1989]: E1031 01:20:03.879081 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.879268 kubelet[1989]: E1031 01:20:03.879248 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.879268 kubelet[1989]: W1031 01:20:03.879263 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.879356 kubelet[1989]: E1031 01:20:03.879275 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.879559 kubelet[1989]: E1031 01:20:03.879532 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.879559 kubelet[1989]: W1031 01:20:03.879547 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.879559 kubelet[1989]: E1031 01:20:03.879558 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.879777 kubelet[1989]: E1031 01:20:03.879752 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.879777 kubelet[1989]: W1031 01:20:03.879775 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.879833 kubelet[1989]: E1031 01:20:03.879785 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.879991 kubelet[1989]: E1031 01:20:03.879968 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.880020 kubelet[1989]: W1031 01:20:03.879991 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.880020 kubelet[1989]: E1031 01:20:03.880002 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.880205 kubelet[1989]: E1031 01:20:03.880187 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.880205 kubelet[1989]: W1031 01:20:03.880201 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.880284 kubelet[1989]: E1031 01:20:03.880212 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.880454 kubelet[1989]: E1031 01:20:03.880440 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.880454 kubelet[1989]: W1031 01:20:03.880450 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.880454 kubelet[1989]: E1031 01:20:03.880458 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.880656 kubelet[1989]: E1031 01:20:03.880637 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.880656 kubelet[1989]: W1031 01:20:03.880652 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.880656 kubelet[1989]: E1031 01:20:03.880659 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.880945 kubelet[1989]: E1031 01:20:03.880930 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.880945 kubelet[1989]: W1031 01:20:03.880939 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.880945 kubelet[1989]: E1031 01:20:03.880946 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.881117 kubelet[1989]: E1031 01:20:03.881103 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.881151 kubelet[1989]: W1031 01:20:03.881117 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.881151 kubelet[1989]: E1031 01:20:03.881126 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.881666 kubelet[1989]: E1031 01:20:03.881637 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.881666 kubelet[1989]: W1031 01:20:03.881648 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.881666 kubelet[1989]: E1031 01:20:03.881657 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.881895 kubelet[1989]: E1031 01:20:03.881849 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.881895 kubelet[1989]: W1031 01:20:03.881859 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.881895 kubelet[1989]: E1031 01:20:03.881866 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.882153 kubelet[1989]: E1031 01:20:03.882003 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.882153 kubelet[1989]: W1031 01:20:03.882010 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.882153 kubelet[1989]: E1031 01:20:03.882017 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.882828 kubelet[1989]: E1031 01:20:03.882810 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.882828 kubelet[1989]: W1031 01:20:03.882823 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.882828 kubelet[1989]: E1031 01:20:03.882832 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.888404 env[1208]: time="2025-10-31T01:20:03.888180892Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:03.888404 env[1208]: time="2025-10-31T01:20:03.888225505Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:03.888404 env[1208]: time="2025-10-31T01:20:03.888236257Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:03.888540 env[1208]: time="2025-10-31T01:20:03.888424788Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ce9e719a616c1ee8c04e2473b2a4b9640e51a63fdd90145079ba471b6809786f pid=2476 runtime=io.containerd.runc.v2 Oct 31 01:20:03.897070 kubelet[1989]: E1031 01:20:03.896875 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.897990 kubelet[1989]: W1031 01:20:03.897459 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.897990 kubelet[1989]: E1031 01:20:03.897506 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.897990 kubelet[1989]: I1031 01:20:03.897569 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/a128bb1b-4c94-45fa-831f-8217c16a0f14-socket-dir\") pod \"csi-node-driver-n2thp\" (UID: \"a128bb1b-4c94-45fa-831f-8217c16a0f14\") " pod="calico-system/csi-node-driver-n2thp" Oct 31 01:20:03.899216 kubelet[1989]: E1031 01:20:03.899039 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.899216 kubelet[1989]: W1031 01:20:03.899061 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.899216 kubelet[1989]: E1031 01:20:03.899085 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.899216 kubelet[1989]: I1031 01:20:03.899112 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/a128bb1b-4c94-45fa-831f-8217c16a0f14-varrun\") pod \"csi-node-driver-n2thp\" (UID: \"a128bb1b-4c94-45fa-831f-8217c16a0f14\") " pod="calico-system/csi-node-driver-n2thp" Oct 31 01:20:03.899440 systemd[1]: Started cri-containerd-ce9e719a616c1ee8c04e2473b2a4b9640e51a63fdd90145079ba471b6809786f.scope. Oct 31 01:20:03.900078 kubelet[1989]: E1031 01:20:03.899446 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.900078 kubelet[1989]: W1031 01:20:03.899471 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.900078 kubelet[1989]: E1031 01:20:03.899497 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.900078 kubelet[1989]: I1031 01:20:03.899532 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/a128bb1b-4c94-45fa-831f-8217c16a0f14-kubelet-dir\") pod \"csi-node-driver-n2thp\" (UID: \"a128bb1b-4c94-45fa-831f-8217c16a0f14\") " pod="calico-system/csi-node-driver-n2thp" Oct 31 01:20:03.901614 kubelet[1989]: E1031 01:20:03.901586 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.901692 kubelet[1989]: W1031 01:20:03.901617 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.901692 kubelet[1989]: E1031 01:20:03.901641 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.901935 kubelet[1989]: I1031 01:20:03.901858 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cmktl\" (UniqueName: \"kubernetes.io/projected/a128bb1b-4c94-45fa-831f-8217c16a0f14-kube-api-access-cmktl\") pod \"csi-node-driver-n2thp\" (UID: \"a128bb1b-4c94-45fa-831f-8217c16a0f14\") " pod="calico-system/csi-node-driver-n2thp" Oct 31 01:20:03.903019 kubelet[1989]: E1031 01:20:03.902987 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.903019 kubelet[1989]: W1031 01:20:03.903009 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.903019 kubelet[1989]: E1031 01:20:03.903020 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.903230 kubelet[1989]: E1031 01:20:03.903170 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.903230 kubelet[1989]: W1031 01:20:03.903178 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.903230 kubelet[1989]: E1031 01:20:03.903187 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.903784 kubelet[1989]: E1031 01:20:03.903431 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.903784 kubelet[1989]: W1031 01:20:03.903443 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.903784 kubelet[1989]: E1031 01:20:03.903452 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.904312 kubelet[1989]: E1031 01:20:03.904293 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.904382 kubelet[1989]: W1031 01:20:03.904362 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.904382 kubelet[1989]: E1031 01:20:03.904373 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.904607 kubelet[1989]: E1031 01:20:03.904582 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.904607 kubelet[1989]: W1031 01:20:03.904593 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.904703 kubelet[1989]: E1031 01:20:03.904611 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.904703 kubelet[1989]: I1031 01:20:03.904674 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/a128bb1b-4c94-45fa-831f-8217c16a0f14-registration-dir\") pod \"csi-node-driver-n2thp\" (UID: \"a128bb1b-4c94-45fa-831f-8217c16a0f14\") " pod="calico-system/csi-node-driver-n2thp" Oct 31 01:20:03.904843 kubelet[1989]: E1031 01:20:03.904823 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.904843 kubelet[1989]: W1031 01:20:03.904834 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.904843 kubelet[1989]: E1031 01:20:03.904843 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.905015 kubelet[1989]: E1031 01:20:03.904997 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.905015 kubelet[1989]: W1031 01:20:03.905006 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.905015 kubelet[1989]: E1031 01:20:03.905016 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.905178 kubelet[1989]: E1031 01:20:03.905160 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.905178 kubelet[1989]: W1031 01:20:03.905170 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.905276 kubelet[1989]: E1031 01:20:03.905183 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.905347 kubelet[1989]: E1031 01:20:03.905326 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.905347 kubelet[1989]: W1031 01:20:03.905336 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.905347 kubelet[1989]: E1031 01:20:03.905343 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.905519 kubelet[1989]: E1031 01:20:03.905496 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.905519 kubelet[1989]: W1031 01:20:03.905508 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.905519 kubelet[1989]: E1031 01:20:03.905515 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.905665 kubelet[1989]: E1031 01:20:03.905651 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:03.905665 kubelet[1989]: W1031 01:20:03.905657 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:03.905665 kubelet[1989]: E1031 01:20:03.905664 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.914000 audit: BPF prog-id=125 op=LOAD Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2476 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396537313961363136633165653863303465323437336232613462 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2476 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396537313961363136633165653863303465323437336232613462 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit: BPF prog-id=126 op=LOAD Oct 31 01:20:03.915000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002787b0 items=0 ppid=2476 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396537313961363136633165653863303465323437336232613462 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit: BPF prog-id=127 op=LOAD Oct 31 01:20:03.915000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002787f8 items=0 ppid=2476 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396537313961363136633165653863303465323437336232613462 Oct 31 01:20:03.915000 audit: BPF prog-id=127 op=UNLOAD Oct 31 01:20:03.915000 audit: BPF prog-id=126 op=UNLOAD Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:03.915000 audit: BPF prog-id=128 op=LOAD Oct 31 01:20:03.915000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000278c08 items=0 ppid=2476 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:03.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396537313961363136633165653863303465323437336232613462 Oct 31 01:20:03.926676 env[1208]: time="2025-10-31T01:20:03.926626948Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mg6zb,Uid:578005fa-2dc6-4c4c-9adf-5b9685baf143,Namespace:calico-system,Attempt:0,} returns sandbox id \"ce9e719a616c1ee8c04e2473b2a4b9640e51a63fdd90145079ba471b6809786f\"" Oct 31 01:20:03.927232 kubelet[1989]: E1031 01:20:03.927208 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:04.005856 kubelet[1989]: E1031 01:20:04.005721 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.005856 kubelet[1989]: W1031 01:20:04.005753 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.005856 kubelet[1989]: E1031 01:20:04.005803 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.006071 kubelet[1989]: E1031 01:20:04.006003 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.006071 kubelet[1989]: W1031 01:20:04.006012 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.006071 kubelet[1989]: E1031 01:20:04.006021 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.006353 kubelet[1989]: E1031 01:20:04.006334 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.006353 kubelet[1989]: W1031 01:20:04.006350 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.006491 kubelet[1989]: E1031 01:20:04.006378 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.006664 kubelet[1989]: E1031 01:20:04.006637 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.006664 kubelet[1989]: W1031 01:20:04.006648 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.006664 kubelet[1989]: E1031 01:20:04.006656 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.006870 kubelet[1989]: E1031 01:20:04.006855 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.006911 kubelet[1989]: W1031 01:20:04.006872 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.006911 kubelet[1989]: E1031 01:20:04.006881 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.007034 kubelet[1989]: E1031 01:20:04.007020 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.007034 kubelet[1989]: W1031 01:20:04.007030 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.007120 kubelet[1989]: E1031 01:20:04.007038 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.007202 kubelet[1989]: E1031 01:20:04.007186 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.007202 kubelet[1989]: W1031 01:20:04.007199 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.007287 kubelet[1989]: E1031 01:20:04.007211 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.007475 kubelet[1989]: E1031 01:20:04.007460 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.007475 kubelet[1989]: W1031 01:20:04.007471 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.007589 kubelet[1989]: E1031 01:20:04.007481 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.007705 kubelet[1989]: E1031 01:20:04.007681 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.007705 kubelet[1989]: W1031 01:20:04.007701 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.007832 kubelet[1989]: E1031 01:20:04.007720 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.007949 kubelet[1989]: E1031 01:20:04.007930 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.007949 kubelet[1989]: W1031 01:20:04.007942 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.007949 kubelet[1989]: E1031 01:20:04.007950 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.008181 kubelet[1989]: E1031 01:20:04.008164 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.008181 kubelet[1989]: W1031 01:20:04.008176 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.008319 kubelet[1989]: E1031 01:20:04.008185 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.008406 kubelet[1989]: E1031 01:20:04.008391 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.008406 kubelet[1989]: W1031 01:20:04.008403 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.008487 kubelet[1989]: E1031 01:20:04.008423 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.008586 kubelet[1989]: E1031 01:20:04.008576 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.008586 kubelet[1989]: W1031 01:20:04.008584 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.008707 kubelet[1989]: E1031 01:20:04.008594 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.008820 kubelet[1989]: E1031 01:20:04.008806 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.008820 kubelet[1989]: W1031 01:20:04.008818 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.008907 kubelet[1989]: E1031 01:20:04.008827 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.009304 kubelet[1989]: E1031 01:20:04.009287 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.009304 kubelet[1989]: W1031 01:20:04.009298 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.009304 kubelet[1989]: E1031 01:20:04.009307 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.009462 kubelet[1989]: E1031 01:20:04.009447 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.009498 kubelet[1989]: W1031 01:20:04.009462 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.009498 kubelet[1989]: E1031 01:20:04.009471 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.009892 kubelet[1989]: E1031 01:20:04.009872 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.009892 kubelet[1989]: W1031 01:20:04.009884 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.009892 kubelet[1989]: E1031 01:20:04.009892 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.010157 kubelet[1989]: E1031 01:20:04.010131 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.010157 kubelet[1989]: W1031 01:20:04.010142 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.010157 kubelet[1989]: E1031 01:20:04.010151 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.010331 kubelet[1989]: E1031 01:20:04.010315 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.010331 kubelet[1989]: W1031 01:20:04.010324 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.010446 kubelet[1989]: E1031 01:20:04.010403 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.010688 kubelet[1989]: E1031 01:20:04.010657 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.010688 kubelet[1989]: W1031 01:20:04.010676 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.010821 kubelet[1989]: E1031 01:20:04.010696 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.011015 kubelet[1989]: E1031 01:20:04.010978 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.011015 kubelet[1989]: W1031 01:20:04.010990 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.011015 kubelet[1989]: E1031 01:20:04.010998 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.011152 kubelet[1989]: E1031 01:20:04.011135 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.011152 kubelet[1989]: W1031 01:20:04.011151 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.011215 kubelet[1989]: E1031 01:20:04.011158 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.011357 kubelet[1989]: E1031 01:20:04.011341 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.011357 kubelet[1989]: W1031 01:20:04.011350 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.011357 kubelet[1989]: E1031 01:20:04.011357 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.011511 kubelet[1989]: E1031 01:20:04.011498 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.011511 kubelet[1989]: W1031 01:20:04.011507 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.011576 kubelet[1989]: E1031 01:20:04.011514 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.011671 kubelet[1989]: E1031 01:20:04.011656 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.011671 kubelet[1989]: W1031 01:20:04.011665 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.011671 kubelet[1989]: E1031 01:20:04.011672 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.019582 kubelet[1989]: E1031 01:20:04.019565 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:04.019582 kubelet[1989]: W1031 01:20:04.019576 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:04.019582 kubelet[1989]: E1031 01:20:04.019585 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:04.398000 audit[2551]: NETFILTER_CFG table=filter:101 family=2 entries=22 op=nft_register_rule pid=2551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:04.398000 audit[2551]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff97ac9a80 a2=0 a3=7fff97ac9a6c items=0 ppid=2102 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:04.398000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:04.406000 audit[2551]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=2551 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:04.406000 audit[2551]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff97ac9a80 a2=0 a3=0 items=0 ppid=2102 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:04.406000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:05.608325 kubelet[1989]: E1031 01:20:05.608273 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:05.618226 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount766151649.mount: Deactivated successfully. Oct 31 01:20:06.564249 env[1208]: time="2025-10-31T01:20:06.564169183Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:06.566354 env[1208]: time="2025-10-31T01:20:06.566312756Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:06.567800 env[1208]: time="2025-10-31T01:20:06.567774616Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:06.569323 env[1208]: time="2025-10-31T01:20:06.569297291Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:06.569782 env[1208]: time="2025-10-31T01:20:06.569743339Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:aa1490366a77160b4cc8f9af82281ab7201ffda0882871f860e1eb1c4f825958\"" Oct 31 01:20:06.572543 env[1208]: time="2025-10-31T01:20:06.572512190Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Oct 31 01:20:06.586440 env[1208]: time="2025-10-31T01:20:06.586395103Z" level=info msg="CreateContainer within sandbox \"677117abb16c15eac1c1cf9c616b61a41d879da81d5e8bb78dd4b829472fad1d\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 31 01:20:06.835575 env[1208]: time="2025-10-31T01:20:06.835434995Z" level=info msg="CreateContainer within sandbox \"677117abb16c15eac1c1cf9c616b61a41d879da81d5e8bb78dd4b829472fad1d\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"a9afc8535090e350758844a210883ee02383544e927a07e8dd80282cc432e32a\"" Oct 31 01:20:06.836487 env[1208]: time="2025-10-31T01:20:06.836447279Z" level=info msg="StartContainer for \"a9afc8535090e350758844a210883ee02383544e927a07e8dd80282cc432e32a\"" Oct 31 01:20:06.858086 systemd[1]: run-containerd-runc-k8s.io-a9afc8535090e350758844a210883ee02383544e927a07e8dd80282cc432e32a-runc.fA1zz7.mount: Deactivated successfully. Oct 31 01:20:06.863638 systemd[1]: Started cri-containerd-a9afc8535090e350758844a210883ee02383544e927a07e8dd80282cc432e32a.scope. Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.874000 audit: BPF prog-id=129 op=LOAD Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2416 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616663383533353039306533353037353838343461323130383833 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2416 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616663383533353039306533353037353838343461323130383833 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit: BPF prog-id=130 op=LOAD Oct 31 01:20:06.875000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002ade60 items=0 ppid=2416 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616663383533353039306533353037353838343461323130383833 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit: BPF prog-id=131 op=LOAD Oct 31 01:20:06.875000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002adea8 items=0 ppid=2416 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616663383533353039306533353037353838343461323130383833 Oct 31 01:20:06.875000 audit: BPF prog-id=131 op=UNLOAD Oct 31 01:20:06.875000 audit: BPF prog-id=130 op=UNLOAD Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { perfmon } for pid=2563 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit[2563]: AVC avc: denied { bpf } for pid=2563 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:06.875000 audit: BPF prog-id=132 op=LOAD Oct 31 01:20:06.875000 audit[2563]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002fc2b8 items=0 ppid=2416 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:06.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139616663383533353039306533353037353838343461323130383833 Oct 31 01:20:06.924631 env[1208]: time="2025-10-31T01:20:06.924574516Z" level=info msg="StartContainer for \"a9afc8535090e350758844a210883ee02383544e927a07e8dd80282cc432e32a\" returns successfully" Oct 31 01:20:07.608343 kubelet[1989]: E1031 01:20:07.608267 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:07.656832 kubelet[1989]: E1031 01:20:07.656758 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:07.672008 kubelet[1989]: I1031 01:20:07.671935 1989 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-8688967d44-zjtht" podStartSLOduration=1.926158136 podStartE2EDuration="4.671919875s" podCreationTimestamp="2025-10-31 01:20:03 +0000 UTC" firstStartedPulling="2025-10-31 01:20:03.826548656 +0000 UTC m=+19.323634892" lastFinishedPulling="2025-10-31 01:20:06.572310404 +0000 UTC m=+22.069396631" observedRunningTime="2025-10-31 01:20:07.671908331 +0000 UTC m=+23.168994557" watchObservedRunningTime="2025-10-31 01:20:07.671919875 +0000 UTC m=+23.169006121" Oct 31 01:20:07.708117 kubelet[1989]: E1031 01:20:07.708076 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.708117 kubelet[1989]: W1031 01:20:07.708099 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.708117 kubelet[1989]: E1031 01:20:07.708124 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.708459 kubelet[1989]: E1031 01:20:07.708319 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.708459 kubelet[1989]: W1031 01:20:07.708330 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.708459 kubelet[1989]: E1031 01:20:07.708339 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.708627 kubelet[1989]: E1031 01:20:07.708608 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.708627 kubelet[1989]: W1031 01:20:07.708620 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.708717 kubelet[1989]: E1031 01:20:07.708630 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.708913 kubelet[1989]: E1031 01:20:07.708883 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.708913 kubelet[1989]: W1031 01:20:07.708898 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.708913 kubelet[1989]: E1031 01:20:07.708908 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.709146 kubelet[1989]: E1031 01:20:07.709128 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.709146 kubelet[1989]: W1031 01:20:07.709140 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.709231 kubelet[1989]: E1031 01:20:07.709149 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.709340 kubelet[1989]: E1031 01:20:07.709322 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.709340 kubelet[1989]: W1031 01:20:07.709334 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.709433 kubelet[1989]: E1031 01:20:07.709343 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.709560 kubelet[1989]: E1031 01:20:07.709540 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.709560 kubelet[1989]: W1031 01:20:07.709552 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.709560 kubelet[1989]: E1031 01:20:07.709561 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.709740 kubelet[1989]: E1031 01:20:07.709723 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.709740 kubelet[1989]: W1031 01:20:07.709735 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.709853 kubelet[1989]: E1031 01:20:07.709744 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.709978 kubelet[1989]: E1031 01:20:07.709961 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.709978 kubelet[1989]: W1031 01:20:07.709972 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.710090 kubelet[1989]: E1031 01:20:07.709981 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.710227 kubelet[1989]: E1031 01:20:07.710207 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.710227 kubelet[1989]: W1031 01:20:07.710221 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.710321 kubelet[1989]: E1031 01:20:07.710232 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.710472 kubelet[1989]: E1031 01:20:07.710448 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.710472 kubelet[1989]: W1031 01:20:07.710468 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.710586 kubelet[1989]: E1031 01:20:07.710479 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.710890 kubelet[1989]: E1031 01:20:07.710841 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.710890 kubelet[1989]: W1031 01:20:07.710873 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.711019 kubelet[1989]: E1031 01:20:07.710910 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.711231 kubelet[1989]: E1031 01:20:07.711215 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.711231 kubelet[1989]: W1031 01:20:07.711227 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.711323 kubelet[1989]: E1031 01:20:07.711237 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.711460 kubelet[1989]: E1031 01:20:07.711442 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.711460 kubelet[1989]: W1031 01:20:07.711456 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.711550 kubelet[1989]: E1031 01:20:07.711465 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.711685 kubelet[1989]: E1031 01:20:07.711670 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.711685 kubelet[1989]: W1031 01:20:07.711681 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.711960 kubelet[1989]: E1031 01:20:07.711691 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.737204 kubelet[1989]: E1031 01:20:07.737158 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.737204 kubelet[1989]: W1031 01:20:07.737174 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.737204 kubelet[1989]: E1031 01:20:07.737185 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.737480 kubelet[1989]: E1031 01:20:07.737404 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.737480 kubelet[1989]: W1031 01:20:07.737427 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.737480 kubelet[1989]: E1031 01:20:07.737456 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.737819 kubelet[1989]: E1031 01:20:07.737798 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.737819 kubelet[1989]: W1031 01:20:07.737813 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.737819 kubelet[1989]: E1031 01:20:07.737823 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.738117 kubelet[1989]: E1031 01:20:07.738088 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.738117 kubelet[1989]: W1031 01:20:07.738117 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.738310 kubelet[1989]: E1031 01:20:07.738132 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.738377 kubelet[1989]: E1031 01:20:07.738364 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.738407 kubelet[1989]: W1031 01:20:07.738376 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.738407 kubelet[1989]: E1031 01:20:07.738386 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.738565 kubelet[1989]: E1031 01:20:07.738556 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.738595 kubelet[1989]: W1031 01:20:07.738565 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.738595 kubelet[1989]: E1031 01:20:07.738572 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.738778 kubelet[1989]: E1031 01:20:07.738747 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.738778 kubelet[1989]: W1031 01:20:07.738756 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.738860 kubelet[1989]: E1031 01:20:07.738782 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.739007 kubelet[1989]: E1031 01:20:07.738971 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.739007 kubelet[1989]: W1031 01:20:07.738982 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.739007 kubelet[1989]: E1031 01:20:07.738991 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.739218 kubelet[1989]: E1031 01:20:07.739205 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.739218 kubelet[1989]: W1031 01:20:07.739213 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.739309 kubelet[1989]: E1031 01:20:07.739221 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.739437 kubelet[1989]: E1031 01:20:07.739418 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.739437 kubelet[1989]: W1031 01:20:07.739435 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.739518 kubelet[1989]: E1031 01:20:07.739450 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.739684 kubelet[1989]: E1031 01:20:07.739665 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.739684 kubelet[1989]: W1031 01:20:07.739680 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.739777 kubelet[1989]: E1031 01:20:07.739692 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.739957 kubelet[1989]: E1031 01:20:07.739941 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.740015 kubelet[1989]: W1031 01:20:07.739956 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.740015 kubelet[1989]: E1031 01:20:07.739969 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.740280 kubelet[1989]: E1031 01:20:07.740260 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.740280 kubelet[1989]: W1031 01:20:07.740274 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.740350 kubelet[1989]: E1031 01:20:07.740285 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.740485 kubelet[1989]: E1031 01:20:07.740467 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.740485 kubelet[1989]: W1031 01:20:07.740483 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.740541 kubelet[1989]: E1031 01:20:07.740495 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.740705 kubelet[1989]: E1031 01:20:07.740689 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.740731 kubelet[1989]: W1031 01:20:07.740704 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.740731 kubelet[1989]: E1031 01:20:07.740716 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.740961 kubelet[1989]: E1031 01:20:07.740946 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.740990 kubelet[1989]: W1031 01:20:07.740961 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.740990 kubelet[1989]: E1031 01:20:07.740973 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.741261 kubelet[1989]: E1031 01:20:07.741240 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.741261 kubelet[1989]: W1031 01:20:07.741254 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.741309 kubelet[1989]: E1031 01:20:07.741263 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:07.741474 kubelet[1989]: E1031 01:20:07.741465 1989 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 01:20:07.741498 kubelet[1989]: W1031 01:20:07.741473 1989 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 01:20:07.741498 kubelet[1989]: E1031 01:20:07.741481 1989 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 01:20:08.169496 env[1208]: time="2025-10-31T01:20:08.169442406Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:08.171237 env[1208]: time="2025-10-31T01:20:08.171195000Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:08.172647 env[1208]: time="2025-10-31T01:20:08.172610312Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:08.174080 env[1208]: time="2025-10-31T01:20:08.174035484Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:08.174661 env[1208]: time="2025-10-31T01:20:08.174636547Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:570719e9c34097019014ae2ad94edf4e523bc6892e77fb1c64c23e5b7f390fe5\"" Oct 31 01:20:08.179880 env[1208]: time="2025-10-31T01:20:08.179834365Z" level=info msg="CreateContainer within sandbox \"ce9e719a616c1ee8c04e2473b2a4b9640e51a63fdd90145079ba471b6809786f\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 31 01:20:08.199282 env[1208]: time="2025-10-31T01:20:08.199213653Z" level=info msg="CreateContainer within sandbox \"ce9e719a616c1ee8c04e2473b2a4b9640e51a63fdd90145079ba471b6809786f\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"f1c393ec290243415379cb8753df3587a3922ba93989f57d9328fd907cf94e53\"" Oct 31 01:20:08.199877 env[1208]: time="2025-10-31T01:20:08.199854007Z" level=info msg="StartContainer for \"f1c393ec290243415379cb8753df3587a3922ba93989f57d9328fd907cf94e53\"" Oct 31 01:20:08.219882 systemd[1]: Started cri-containerd-f1c393ec290243415379cb8753df3587a3922ba93989f57d9328fd907cf94e53.scope. Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f061be69f58 items=0 ppid=2476 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:08.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631633339336563323930323433343135333739636238373533646633 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit: BPF prog-id=133 op=LOAD Oct 31 01:20:08.232000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002d8aa8 items=0 ppid=2476 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:08.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631633339336563323930323433343135333739636238373533646633 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit: BPF prog-id=134 op=LOAD Oct 31 01:20:08.232000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002d8af8 items=0 ppid=2476 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:08.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631633339336563323930323433343135333739636238373533646633 Oct 31 01:20:08.232000 audit: BPF prog-id=134 op=UNLOAD Oct 31 01:20:08.232000 audit: BPF prog-id=133 op=UNLOAD Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:08.232000 audit: BPF prog-id=135 op=LOAD Oct 31 01:20:08.232000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002d8b88 items=0 ppid=2476 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:08.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631633339336563323930323433343135333739636238373533646633 Oct 31 01:20:08.248044 env[1208]: time="2025-10-31T01:20:08.247982486Z" level=info msg="StartContainer for \"f1c393ec290243415379cb8753df3587a3922ba93989f57d9328fd907cf94e53\" returns successfully" Oct 31 01:20:08.257277 systemd[1]: cri-containerd-f1c393ec290243415379cb8753df3587a3922ba93989f57d9328fd907cf94e53.scope: Deactivated successfully. Oct 31 01:20:08.262000 audit: BPF prog-id=135 op=UNLOAD Oct 31 01:20:08.275999 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f1c393ec290243415379cb8753df3587a3922ba93989f57d9328fd907cf94e53-rootfs.mount: Deactivated successfully. Oct 31 01:20:08.313734 env[1208]: time="2025-10-31T01:20:08.313673738Z" level=info msg="shim disconnected" id=f1c393ec290243415379cb8753df3587a3922ba93989f57d9328fd907cf94e53 Oct 31 01:20:08.313734 env[1208]: time="2025-10-31T01:20:08.313727819Z" level=warning msg="cleaning up after shim disconnected" id=f1c393ec290243415379cb8753df3587a3922ba93989f57d9328fd907cf94e53 namespace=k8s.io Oct 31 01:20:08.313734 env[1208]: time="2025-10-31T01:20:08.313737779Z" level=info msg="cleaning up dead shim" Oct 31 01:20:08.320490 env[1208]: time="2025-10-31T01:20:08.320455083Z" level=warning msg="cleanup warnings time=\"2025-10-31T01:20:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2674 runtime=io.containerd.runc.v2\n" Oct 31 01:20:08.659259 kubelet[1989]: I1031 01:20:08.659217 1989 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Oct 31 01:20:08.659792 kubelet[1989]: E1031 01:20:08.659490 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:08.659845 kubelet[1989]: E1031 01:20:08.659756 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:08.660383 env[1208]: time="2025-10-31T01:20:08.660333456Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Oct 31 01:20:09.607602 kubelet[1989]: E1031 01:20:09.607529 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:11.608643 kubelet[1989]: E1031 01:20:11.608515 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:13.594631 env[1208]: time="2025-10-31T01:20:13.594530757Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:13.608641 kubelet[1989]: E1031 01:20:13.608516 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:13.619361 env[1208]: time="2025-10-31T01:20:13.619271283Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:13.649332 env[1208]: time="2025-10-31T01:20:13.649291888Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:13.702138 env[1208]: time="2025-10-31T01:20:13.702061629Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:13.702994 env[1208]: time="2025-10-31T01:20:13.702961850Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:24e1e7377c738d4080eb462a29e2c6756d383d8d25ad87b7f49165581f20c3cd\"" Oct 31 01:20:13.751355 env[1208]: time="2025-10-31T01:20:13.751288095Z" level=info msg="CreateContainer within sandbox \"ce9e719a616c1ee8c04e2473b2a4b9640e51a63fdd90145079ba471b6809786f\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 31 01:20:14.013831 env[1208]: time="2025-10-31T01:20:14.013603576Z" level=info msg="CreateContainer within sandbox \"ce9e719a616c1ee8c04e2473b2a4b9640e51a63fdd90145079ba471b6809786f\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"8f9ace31ac70f7136401746e25e0634f1eb02d1a6da86fc4e4260c6a12e7653f\"" Oct 31 01:20:14.014400 env[1208]: time="2025-10-31T01:20:14.014364341Z" level=info msg="StartContainer for \"8f9ace31ac70f7136401746e25e0634f1eb02d1a6da86fc4e4260c6a12e7653f\"" Oct 31 01:20:14.044090 systemd[1]: Started cri-containerd-8f9ace31ac70f7136401746e25e0634f1eb02d1a6da86fc4e4260c6a12e7653f.scope. Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.091283 kernel: kauditd_printk_skb: 211 callbacks suppressed Oct 31 01:20:14.091367 kernel: audit: type=1400 audit(1761873614.088:1004): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f1b8c8afab8 items=0 ppid=2476 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:14.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866396163653331616337306637313336343031373436653235653036 Oct 31 01:20:14.120492 kernel: audit: type=1300 audit(1761873614.088:1004): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f1b8c8afab8 items=0 ppid=2476 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:14.120554 kernel: audit: type=1327 audit(1761873614.088:1004): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866396163653331616337306637313336343031373436653235653036 Oct 31 01:20:14.120591 kernel: audit: type=1400 audit(1761873614.088:1005): avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.126192 kernel: audit: type=1400 audit(1761873614.088:1005): avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.132548 kernel: audit: type=1400 audit(1761873614.088:1005): avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.144053 kernel: audit: type=1400 audit(1761873614.088:1005): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.149731 kernel: audit: type=1400 audit(1761873614.088:1005): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.161050 kernel: audit: type=1400 audit(1761873614.088:1005): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.161161 kernel: audit: type=1400 audit(1761873614.088:1005): avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.088000 audit: BPF prog-id=136 op=LOAD Oct 31 01:20:14.088000 audit[2698]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a4ff8 items=0 ppid=2476 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:14.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866396163653331616337306637313336343031373436653235653036 Oct 31 01:20:14.090000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.090000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.090000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.090000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.090000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.090000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.090000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.090000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.090000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.090000 audit: BPF prog-id=137 op=LOAD Oct 31 01:20:14.090000 audit[2698]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000a5048 items=0 ppid=2476 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:14.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866396163653331616337306637313336343031373436653235653036 Oct 31 01:20:14.097000 audit: BPF prog-id=137 op=UNLOAD Oct 31 01:20:14.097000 audit: BPF prog-id=136 op=UNLOAD Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { perfmon } for pid=2698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit[2698]: AVC avc: denied { bpf } for pid=2698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:14.097000 audit: BPF prog-id=138 op=LOAD Oct 31 01:20:14.097000 audit[2698]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000a50d8 items=0 ppid=2476 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:14.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866396163653331616337306637313336343031373436653235653036 Oct 31 01:20:14.383963 env[1208]: time="2025-10-31T01:20:14.383885923Z" level=info msg="StartContainer for \"8f9ace31ac70f7136401746e25e0634f1eb02d1a6da86fc4e4260c6a12e7653f\" returns successfully" Oct 31 01:20:14.678676 kubelet[1989]: E1031 01:20:14.678327 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:15.239996 systemd[1]: cri-containerd-8f9ace31ac70f7136401746e25e0634f1eb02d1a6da86fc4e4260c6a12e7653f.scope: Deactivated successfully. Oct 31 01:20:15.245000 audit: BPF prog-id=138 op=UNLOAD Oct 31 01:20:15.258122 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8f9ace31ac70f7136401746e25e0634f1eb02d1a6da86fc4e4260c6a12e7653f-rootfs.mount: Deactivated successfully. Oct 31 01:20:15.262522 env[1208]: time="2025-10-31T01:20:15.262463196Z" level=info msg="shim disconnected" id=8f9ace31ac70f7136401746e25e0634f1eb02d1a6da86fc4e4260c6a12e7653f Oct 31 01:20:15.262832 env[1208]: time="2025-10-31T01:20:15.262531095Z" level=warning msg="cleaning up after shim disconnected" id=8f9ace31ac70f7136401746e25e0634f1eb02d1a6da86fc4e4260c6a12e7653f namespace=k8s.io Oct 31 01:20:15.262832 env[1208]: time="2025-10-31T01:20:15.262540363Z" level=info msg="cleaning up dead shim" Oct 31 01:20:15.268625 env[1208]: time="2025-10-31T01:20:15.268572789Z" level=warning msg="cleanup warnings time=\"2025-10-31T01:20:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2738 runtime=io.containerd.runc.v2\n" Oct 31 01:20:15.310752 kubelet[1989]: I1031 01:20:15.310705 1989 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Oct 31 01:20:15.344557 systemd[1]: Created slice kubepods-burstable-pod708d30cb_c2ce_44d9_bd45_12e83b63bbbb.slice. Oct 31 01:20:15.362902 systemd[1]: Created slice kubepods-besteffort-podebe1f224_5028_4feb_8a17_10f3e8933d4e.slice. Oct 31 01:20:15.370029 systemd[1]: Created slice kubepods-besteffort-pod1096d6b0_357c_45fe_aab1_ad0c209c60ed.slice. Oct 31 01:20:15.375240 systemd[1]: Created slice kubepods-besteffort-podb3fede59_787e_43f4_aace_2a04c63127ad.slice. Oct 31 01:20:15.380642 systemd[1]: Created slice kubepods-besteffort-pod96c6df11_8032_440a_8e58_7100d98f2294.slice. Oct 31 01:20:15.386046 systemd[1]: Created slice kubepods-burstable-podf8b91bc0_a415_4d83_bda1_171bfb939454.slice. Oct 31 01:20:15.387893 kubelet[1989]: I1031 01:20:15.387854 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ebe1f224-5028-4feb-8a17-10f3e8933d4e-goldmane-ca-bundle\") pod \"goldmane-666569f655-bc87q\" (UID: \"ebe1f224-5028-4feb-8a17-10f3e8933d4e\") " pod="calico-system/goldmane-666569f655-bc87q" Oct 31 01:20:15.388008 kubelet[1989]: I1031 01:20:15.387908 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-848hr\" (UniqueName: \"kubernetes.io/projected/6254973b-926c-41f6-bffb-e73e5b8fa8f8-kube-api-access-848hr\") pod \"calico-kube-controllers-69d4f95648-mnwp9\" (UID: \"6254973b-926c-41f6-bffb-e73e5b8fa8f8\") " pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" Oct 31 01:20:15.388008 kubelet[1989]: I1031 01:20:15.387952 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-glzfr\" (UniqueName: \"kubernetes.io/projected/708d30cb-c2ce-44d9-bd45-12e83b63bbbb-kube-api-access-glzfr\") pod \"coredns-674b8bbfcf-lcq29\" (UID: \"708d30cb-c2ce-44d9-bd45-12e83b63bbbb\") " pod="kube-system/coredns-674b8bbfcf-lcq29" Oct 31 01:20:15.388129 kubelet[1989]: I1031 01:20:15.387973 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/ebe1f224-5028-4feb-8a17-10f3e8933d4e-config\") pod \"goldmane-666569f655-bc87q\" (UID: \"ebe1f224-5028-4feb-8a17-10f3e8933d4e\") " pod="calico-system/goldmane-666569f655-bc87q" Oct 31 01:20:15.388192 kubelet[1989]: I1031 01:20:15.388126 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/f8b91bc0-a415-4d83-bda1-171bfb939454-config-volume\") pod \"coredns-674b8bbfcf-gfplj\" (UID: \"f8b91bc0-a415-4d83-bda1-171bfb939454\") " pod="kube-system/coredns-674b8bbfcf-gfplj" Oct 31 01:20:15.388192 kubelet[1989]: I1031 01:20:15.388157 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1096d6b0-357c-45fe-aab1-ad0c209c60ed-calico-apiserver-certs\") pod \"calico-apiserver-77d46fd4d5-5bw5f\" (UID: \"1096d6b0-357c-45fe-aab1-ad0c209c60ed\") " pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" Oct 31 01:20:15.388192 kubelet[1989]: I1031 01:20:15.388179 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/96c6df11-8032-440a-8e58-7100d98f2294-whisker-backend-key-pair\") pod \"whisker-574b6cc847-ccvtr\" (UID: \"96c6df11-8032-440a-8e58-7100d98f2294\") " pod="calico-system/whisker-574b6cc847-ccvtr" Oct 31 01:20:15.388314 kubelet[1989]: I1031 01:20:15.388197 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/96c6df11-8032-440a-8e58-7100d98f2294-whisker-ca-bundle\") pod \"whisker-574b6cc847-ccvtr\" (UID: \"96c6df11-8032-440a-8e58-7100d98f2294\") " pod="calico-system/whisker-574b6cc847-ccvtr" Oct 31 01:20:15.388314 kubelet[1989]: I1031 01:20:15.388216 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n4jn6\" (UniqueName: \"kubernetes.io/projected/96c6df11-8032-440a-8e58-7100d98f2294-kube-api-access-n4jn6\") pod \"whisker-574b6cc847-ccvtr\" (UID: \"96c6df11-8032-440a-8e58-7100d98f2294\") " pod="calico-system/whisker-574b6cc847-ccvtr" Oct 31 01:20:15.388314 kubelet[1989]: I1031 01:20:15.388240 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2t8cj\" (UniqueName: \"kubernetes.io/projected/ebe1f224-5028-4feb-8a17-10f3e8933d4e-kube-api-access-2t8cj\") pod \"goldmane-666569f655-bc87q\" (UID: \"ebe1f224-5028-4feb-8a17-10f3e8933d4e\") " pod="calico-system/goldmane-666569f655-bc87q" Oct 31 01:20:15.388314 kubelet[1989]: I1031 01:20:15.388265 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/ebe1f224-5028-4feb-8a17-10f3e8933d4e-goldmane-key-pair\") pod \"goldmane-666569f655-bc87q\" (UID: \"ebe1f224-5028-4feb-8a17-10f3e8933d4e\") " pod="calico-system/goldmane-666569f655-bc87q" Oct 31 01:20:15.388463 kubelet[1989]: I1031 01:20:15.388298 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ccmp2\" (UniqueName: \"kubernetes.io/projected/b3fede59-787e-43f4-aace-2a04c63127ad-kube-api-access-ccmp2\") pod \"calico-apiserver-77d46fd4d5-d7tbw\" (UID: \"b3fede59-787e-43f4-aace-2a04c63127ad\") " pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" Oct 31 01:20:15.388463 kubelet[1989]: I1031 01:20:15.388371 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/708d30cb-c2ce-44d9-bd45-12e83b63bbbb-config-volume\") pod \"coredns-674b8bbfcf-lcq29\" (UID: \"708d30cb-c2ce-44d9-bd45-12e83b63bbbb\") " pod="kube-system/coredns-674b8bbfcf-lcq29" Oct 31 01:20:15.388463 kubelet[1989]: I1031 01:20:15.388395 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/b3fede59-787e-43f4-aace-2a04c63127ad-calico-apiserver-certs\") pod \"calico-apiserver-77d46fd4d5-d7tbw\" (UID: \"b3fede59-787e-43f4-aace-2a04c63127ad\") " pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" Oct 31 01:20:15.388463 kubelet[1989]: I1031 01:20:15.388439 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t7qnj\" (UniqueName: \"kubernetes.io/projected/f8b91bc0-a415-4d83-bda1-171bfb939454-kube-api-access-t7qnj\") pod \"coredns-674b8bbfcf-gfplj\" (UID: \"f8b91bc0-a415-4d83-bda1-171bfb939454\") " pod="kube-system/coredns-674b8bbfcf-gfplj" Oct 31 01:20:15.388463 kubelet[1989]: I1031 01:20:15.388461 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sjqpl\" (UniqueName: \"kubernetes.io/projected/1096d6b0-357c-45fe-aab1-ad0c209c60ed-kube-api-access-sjqpl\") pod \"calico-apiserver-77d46fd4d5-5bw5f\" (UID: \"1096d6b0-357c-45fe-aab1-ad0c209c60ed\") " pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" Oct 31 01:20:15.388652 kubelet[1989]: I1031 01:20:15.388481 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6254973b-926c-41f6-bffb-e73e5b8fa8f8-tigera-ca-bundle\") pod \"calico-kube-controllers-69d4f95648-mnwp9\" (UID: \"6254973b-926c-41f6-bffb-e73e5b8fa8f8\") " pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" Oct 31 01:20:15.393072 systemd[1]: Created slice kubepods-besteffort-pod6254973b_926c_41f6_bffb_e73e5b8fa8f8.slice. Oct 31 01:20:15.621568 systemd[1]: Created slice kubepods-besteffort-poda128bb1b_4c94_45fa_831f_8217c16a0f14.slice. Oct 31 01:20:15.628752 env[1208]: time="2025-10-31T01:20:15.628685603Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n2thp,Uid:a128bb1b-4c94-45fa-831f-8217c16a0f14,Namespace:calico-system,Attempt:0,}" Oct 31 01:20:15.661367 kubelet[1989]: E1031 01:20:15.661300 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:15.662165 env[1208]: time="2025-10-31T01:20:15.662092937Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-lcq29,Uid:708d30cb-c2ce-44d9-bd45-12e83b63bbbb,Namespace:kube-system,Attempt:0,}" Oct 31 01:20:15.669124 env[1208]: time="2025-10-31T01:20:15.668029548Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-bc87q,Uid:ebe1f224-5028-4feb-8a17-10f3e8933d4e,Namespace:calico-system,Attempt:0,}" Oct 31 01:20:15.676600 env[1208]: time="2025-10-31T01:20:15.675718255Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77d46fd4d5-5bw5f,Uid:1096d6b0-357c-45fe-aab1-ad0c209c60ed,Namespace:calico-apiserver,Attempt:0,}" Oct 31 01:20:15.684034 env[1208]: time="2025-10-31T01:20:15.683825941Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77d46fd4d5-d7tbw,Uid:b3fede59-787e-43f4-aace-2a04c63127ad,Namespace:calico-apiserver,Attempt:0,}" Oct 31 01:20:15.684306 env[1208]: time="2025-10-31T01:20:15.684245071Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-574b6cc847-ccvtr,Uid:96c6df11-8032-440a-8e58-7100d98f2294,Namespace:calico-system,Attempt:0,}" Oct 31 01:20:15.689124 kubelet[1989]: E1031 01:20:15.689041 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:15.689713 env[1208]: time="2025-10-31T01:20:15.689666618Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gfplj,Uid:f8b91bc0-a415-4d83-bda1-171bfb939454,Namespace:kube-system,Attempt:0,}" Oct 31 01:20:15.695047 kubelet[1989]: E1031 01:20:15.694459 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:15.696182 env[1208]: time="2025-10-31T01:20:15.696134087Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Oct 31 01:20:15.696439 env[1208]: time="2025-10-31T01:20:15.696385256Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d4f95648-mnwp9,Uid:6254973b-926c-41f6-bffb-e73e5b8fa8f8,Namespace:calico-system,Attempt:0,}" Oct 31 01:20:15.894009 env[1208]: time="2025-10-31T01:20:15.893803155Z" level=error msg="Failed to destroy network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:15.895673 env[1208]: time="2025-10-31T01:20:15.895601823Z" level=error msg="encountered an error cleaning up failed sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:15.895894 env[1208]: time="2025-10-31T01:20:15.895705444Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n2thp,Uid:a128bb1b-4c94-45fa-831f-8217c16a0f14,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:15.896246 kubelet[1989]: E1031 01:20:15.896133 1989 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:15.896385 kubelet[1989]: E1031 01:20:15.896246 1989 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-n2thp" Oct 31 01:20:15.896385 kubelet[1989]: E1031 01:20:15.896289 1989 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-n2thp" Oct 31 01:20:15.896467 kubelet[1989]: E1031 01:20:15.896361 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-n2thp_calico-system(a128bb1b-4c94-45fa-831f-8217c16a0f14)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-n2thp_calico-system(a128bb1b-4c94-45fa-831f-8217c16a0f14)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:16.101510 env[1208]: time="2025-10-31T01:20:16.101399586Z" level=error msg="Failed to destroy network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.102022 env[1208]: time="2025-10-31T01:20:16.101971374Z" level=error msg="encountered an error cleaning up failed sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.102092 env[1208]: time="2025-10-31T01:20:16.102051516Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gfplj,Uid:f8b91bc0-a415-4d83-bda1-171bfb939454,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.102394 kubelet[1989]: E1031 01:20:16.102336 1989 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.102483 kubelet[1989]: E1031 01:20:16.102428 1989 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-gfplj" Oct 31 01:20:16.102483 kubelet[1989]: E1031 01:20:16.102463 1989 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-gfplj" Oct 31 01:20:16.102607 kubelet[1989]: E1031 01:20:16.102541 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-gfplj_kube-system(f8b91bc0-a415-4d83-bda1-171bfb939454)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-gfplj_kube-system(f8b91bc0-a415-4d83-bda1-171bfb939454)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-gfplj" podUID="f8b91bc0-a415-4d83-bda1-171bfb939454" Oct 31 01:20:16.103058 env[1208]: time="2025-10-31T01:20:16.103003074Z" level=error msg="Failed to destroy network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.103640 env[1208]: time="2025-10-31T01:20:16.103591487Z" level=error msg="encountered an error cleaning up failed sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.103708 env[1208]: time="2025-10-31T01:20:16.103663492Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-bc87q,Uid:ebe1f224-5028-4feb-8a17-10f3e8933d4e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.104076 kubelet[1989]: E1031 01:20:16.104034 1989 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.104159 kubelet[1989]: E1031 01:20:16.104133 1989 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-bc87q" Oct 31 01:20:16.104238 kubelet[1989]: E1031 01:20:16.104197 1989 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-bc87q" Oct 31 01:20:16.104420 kubelet[1989]: E1031 01:20:16.104344 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-bc87q_calico-system(ebe1f224-5028-4feb-8a17-10f3e8933d4e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-bc87q_calico-system(ebe1f224-5028-4feb-8a17-10f3e8933d4e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-bc87q" podUID="ebe1f224-5028-4feb-8a17-10f3e8933d4e" Oct 31 01:20:16.106074 env[1208]: time="2025-10-31T01:20:16.106005197Z" level=error msg="Failed to destroy network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.106643 env[1208]: time="2025-10-31T01:20:16.106594421Z" level=error msg="encountered an error cleaning up failed sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.106716 env[1208]: time="2025-10-31T01:20:16.106661917Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77d46fd4d5-5bw5f,Uid:1096d6b0-357c-45fe-aab1-ad0c209c60ed,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.106949 kubelet[1989]: E1031 01:20:16.106902 1989 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.107022 kubelet[1989]: E1031 01:20:16.106970 1989 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" Oct 31 01:20:16.107022 kubelet[1989]: E1031 01:20:16.107011 1989 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" Oct 31 01:20:16.107116 kubelet[1989]: E1031 01:20:16.107069 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-77d46fd4d5-5bw5f_calico-apiserver(1096d6b0-357c-45fe-aab1-ad0c209c60ed)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-77d46fd4d5-5bw5f_calico-apiserver(1096d6b0-357c-45fe-aab1-ad0c209c60ed)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" podUID="1096d6b0-357c-45fe-aab1-ad0c209c60ed" Oct 31 01:20:16.124121 env[1208]: time="2025-10-31T01:20:16.124035776Z" level=error msg="Failed to destroy network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.125444 env[1208]: time="2025-10-31T01:20:16.125381503Z" level=error msg="encountered an error cleaning up failed sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.125683 env[1208]: time="2025-10-31T01:20:16.125459271Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-574b6cc847-ccvtr,Uid:96c6df11-8032-440a-8e58-7100d98f2294,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.127115 kubelet[1989]: E1031 01:20:16.125863 1989 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.127115 kubelet[1989]: E1031 01:20:16.125981 1989 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-574b6cc847-ccvtr" Oct 31 01:20:16.127115 kubelet[1989]: E1031 01:20:16.126006 1989 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-574b6cc847-ccvtr" Oct 31 01:20:16.127278 kubelet[1989]: E1031 01:20:16.126062 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-574b6cc847-ccvtr_calico-system(96c6df11-8032-440a-8e58-7100d98f2294)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-574b6cc847-ccvtr_calico-system(96c6df11-8032-440a-8e58-7100d98f2294)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-574b6cc847-ccvtr" podUID="96c6df11-8032-440a-8e58-7100d98f2294" Oct 31 01:20:16.140720 env[1208]: time="2025-10-31T01:20:16.140353416Z" level=error msg="Failed to destroy network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.141103 env[1208]: time="2025-10-31T01:20:16.141047503Z" level=error msg="encountered an error cleaning up failed sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.141410 env[1208]: time="2025-10-31T01:20:16.141364565Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d4f95648-mnwp9,Uid:6254973b-926c-41f6-bffb-e73e5b8fa8f8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.141659 env[1208]: time="2025-10-31T01:20:16.141531152Z" level=error msg="Failed to destroy network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.141919 kubelet[1989]: E1031 01:20:16.141862 1989 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.142034 kubelet[1989]: E1031 01:20:16.141952 1989 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" Oct 31 01:20:16.142034 kubelet[1989]: E1031 01:20:16.142017 1989 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" Oct 31 01:20:16.142121 env[1208]: time="2025-10-31T01:20:16.142004622Z" level=error msg="encountered an error cleaning up failed sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.142121 env[1208]: time="2025-10-31T01:20:16.142070024Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77d46fd4d5-d7tbw,Uid:b3fede59-787e-43f4-aace-2a04c63127ad,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.142242 kubelet[1989]: E1031 01:20:16.142097 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-69d4f95648-mnwp9_calico-system(6254973b-926c-41f6-bffb-e73e5b8fa8f8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-69d4f95648-mnwp9_calico-system(6254973b-926c-41f6-bffb-e73e5b8fa8f8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" podUID="6254973b-926c-41f6-bffb-e73e5b8fa8f8" Oct 31 01:20:16.142778 kubelet[1989]: E1031 01:20:16.142520 1989 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.142778 kubelet[1989]: E1031 01:20:16.142604 1989 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" Oct 31 01:20:16.142778 kubelet[1989]: E1031 01:20:16.142640 1989 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" Oct 31 01:20:16.142939 kubelet[1989]: E1031 01:20:16.142705 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-77d46fd4d5-d7tbw_calico-apiserver(b3fede59-787e-43f4-aace-2a04c63127ad)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-77d46fd4d5-d7tbw_calico-apiserver(b3fede59-787e-43f4-aace-2a04c63127ad)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" podUID="b3fede59-787e-43f4-aace-2a04c63127ad" Oct 31 01:20:16.143883 env[1208]: time="2025-10-31T01:20:16.143808196Z" level=error msg="Failed to destroy network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.144484 env[1208]: time="2025-10-31T01:20:16.144292116Z" level=error msg="encountered an error cleaning up failed sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.144484 env[1208]: time="2025-10-31T01:20:16.144356717Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-lcq29,Uid:708d30cb-c2ce-44d9-bd45-12e83b63bbbb,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.146105 kubelet[1989]: E1031 01:20:16.146034 1989 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.146105 kubelet[1989]: E1031 01:20:16.146111 1989 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-lcq29" Oct 31 01:20:16.146640 kubelet[1989]: E1031 01:20:16.146150 1989 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-lcq29" Oct 31 01:20:16.146640 kubelet[1989]: E1031 01:20:16.146223 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-lcq29_kube-system(708d30cb-c2ce-44d9-bd45-12e83b63bbbb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-lcq29_kube-system(708d30cb-c2ce-44d9-bd45-12e83b63bbbb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-lcq29" podUID="708d30cb-c2ce-44d9-bd45-12e83b63bbbb" Oct 31 01:20:16.702282 kubelet[1989]: I1031 01:20:16.701221 1989 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:16.704377 env[1208]: time="2025-10-31T01:20:16.704310859Z" level=info msg="StopPodSandbox for \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\"" Oct 31 01:20:16.707183 kubelet[1989]: I1031 01:20:16.707102 1989 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:16.708111 env[1208]: time="2025-10-31T01:20:16.708029563Z" level=info msg="StopPodSandbox for \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\"" Oct 31 01:20:16.711282 kubelet[1989]: I1031 01:20:16.709829 1989 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:16.712020 env[1208]: time="2025-10-31T01:20:16.711971810Z" level=info msg="StopPodSandbox for \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\"" Oct 31 01:20:16.714583 kubelet[1989]: I1031 01:20:16.713052 1989 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:16.714732 env[1208]: time="2025-10-31T01:20:16.713757447Z" level=info msg="StopPodSandbox for \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\"" Oct 31 01:20:16.715542 kubelet[1989]: I1031 01:20:16.715494 1989 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:16.716466 env[1208]: time="2025-10-31T01:20:16.716371203Z" level=info msg="StopPodSandbox for \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\"" Oct 31 01:20:16.717145 kubelet[1989]: I1031 01:20:16.717106 1989 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:16.721585 kubelet[1989]: I1031 01:20:16.720783 1989 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:16.722251 env[1208]: time="2025-10-31T01:20:16.719246118Z" level=info msg="StopPodSandbox for \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\"" Oct 31 01:20:16.725454 env[1208]: time="2025-10-31T01:20:16.723386406Z" level=info msg="StopPodSandbox for \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\"" Oct 31 01:20:16.738323 kubelet[1989]: I1031 01:20:16.738280 1989 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:16.739110 env[1208]: time="2025-10-31T01:20:16.739058688Z" level=info msg="StopPodSandbox for \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\"" Oct 31 01:20:16.843497 env[1208]: time="2025-10-31T01:20:16.843394062Z" level=error msg="StopPodSandbox for \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\" failed" error="failed to destroy network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.844554 kubelet[1989]: E1031 01:20:16.844256 1989 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:16.844554 kubelet[1989]: E1031 01:20:16.844355 1989 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758"} Oct 31 01:20:16.844554 kubelet[1989]: E1031 01:20:16.844465 1989 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b3fede59-787e-43f4-aace-2a04c63127ad\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 01:20:16.844554 kubelet[1989]: E1031 01:20:16.844511 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b3fede59-787e-43f4-aace-2a04c63127ad\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" podUID="b3fede59-787e-43f4-aace-2a04c63127ad" Oct 31 01:20:16.865136 env[1208]: time="2025-10-31T01:20:16.865043674Z" level=error msg="StopPodSandbox for \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\" failed" error="failed to destroy network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.865956 kubelet[1989]: E1031 01:20:16.865701 1989 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:16.865956 kubelet[1989]: E1031 01:20:16.865803 1989 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571"} Oct 31 01:20:16.865956 kubelet[1989]: E1031 01:20:16.865851 1989 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"96c6df11-8032-440a-8e58-7100d98f2294\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 01:20:16.865956 kubelet[1989]: E1031 01:20:16.865884 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"96c6df11-8032-440a-8e58-7100d98f2294\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-574b6cc847-ccvtr" podUID="96c6df11-8032-440a-8e58-7100d98f2294" Oct 31 01:20:16.879073 env[1208]: time="2025-10-31T01:20:16.878962894Z" level=error msg="StopPodSandbox for \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\" failed" error="failed to destroy network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.879427 kubelet[1989]: E1031 01:20:16.879357 1989 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:16.879534 kubelet[1989]: E1031 01:20:16.879445 1989 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b"} Oct 31 01:20:16.879534 kubelet[1989]: E1031 01:20:16.879492 1989 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1096d6b0-357c-45fe-aab1-ad0c209c60ed\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 01:20:16.879684 kubelet[1989]: E1031 01:20:16.879532 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1096d6b0-357c-45fe-aab1-ad0c209c60ed\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" podUID="1096d6b0-357c-45fe-aab1-ad0c209c60ed" Oct 31 01:20:16.879842 env[1208]: time="2025-10-31T01:20:16.879795993Z" level=error msg="StopPodSandbox for \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\" failed" error="failed to destroy network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.879999 kubelet[1989]: E1031 01:20:16.879943 1989 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:16.879999 kubelet[1989]: E1031 01:20:16.879999 1989 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34"} Oct 31 01:20:16.880127 kubelet[1989]: E1031 01:20:16.880026 1989 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"708d30cb-c2ce-44d9-bd45-12e83b63bbbb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 01:20:16.880127 kubelet[1989]: E1031 01:20:16.880066 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"708d30cb-c2ce-44d9-bd45-12e83b63bbbb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-lcq29" podUID="708d30cb-c2ce-44d9-bd45-12e83b63bbbb" Oct 31 01:20:16.882699 env[1208]: time="2025-10-31T01:20:16.882629694Z" level=error msg="StopPodSandbox for \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\" failed" error="failed to destroy network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.882923 env[1208]: time="2025-10-31T01:20:16.882660215Z" level=error msg="StopPodSandbox for \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\" failed" error="failed to destroy network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.883170 kubelet[1989]: E1031 01:20:16.882952 1989 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:16.883170 kubelet[1989]: E1031 01:20:16.883016 1989 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c"} Oct 31 01:20:16.883170 kubelet[1989]: E1031 01:20:16.883060 1989 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ebe1f224-5028-4feb-8a17-10f3e8933d4e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 01:20:16.883170 kubelet[1989]: E1031 01:20:16.883093 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ebe1f224-5028-4feb-8a17-10f3e8933d4e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-bc87q" podUID="ebe1f224-5028-4feb-8a17-10f3e8933d4e" Oct 31 01:20:16.883435 kubelet[1989]: E1031 01:20:16.883246 1989 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:16.883435 kubelet[1989]: E1031 01:20:16.883276 1989 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e"} Oct 31 01:20:16.883435 kubelet[1989]: E1031 01:20:16.883320 1989 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6254973b-926c-41f6-bffb-e73e5b8fa8f8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 01:20:16.883435 kubelet[1989]: E1031 01:20:16.883351 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6254973b-926c-41f6-bffb-e73e5b8fa8f8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" podUID="6254973b-926c-41f6-bffb-e73e5b8fa8f8" Oct 31 01:20:16.894348 env[1208]: time="2025-10-31T01:20:16.894250628Z" level=error msg="StopPodSandbox for \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\" failed" error="failed to destroy network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.894693 env[1208]: time="2025-10-31T01:20:16.894613342Z" level=error msg="StopPodSandbox for \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\" failed" error="failed to destroy network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 01:20:16.894909 kubelet[1989]: E1031 01:20:16.894809 1989 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:16.895011 kubelet[1989]: E1031 01:20:16.894953 1989 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a"} Oct 31 01:20:16.895092 kubelet[1989]: E1031 01:20:16.895052 1989 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a128bb1b-4c94-45fa-831f-8217c16a0f14\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 01:20:16.895235 kubelet[1989]: E1031 01:20:16.895133 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a128bb1b-4c94-45fa-831f-8217c16a0f14\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:16.895422 kubelet[1989]: E1031 01:20:16.895339 1989 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:16.895422 kubelet[1989]: E1031 01:20:16.895394 1989 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad"} Oct 31 01:20:16.895593 kubelet[1989]: E1031 01:20:16.895433 1989 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f8b91bc0-a415-4d83-bda1-171bfb939454\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 01:20:16.895593 kubelet[1989]: E1031 01:20:16.895458 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f8b91bc0-a415-4d83-bda1-171bfb939454\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-gfplj" podUID="f8b91bc0-a415-4d83-bda1-171bfb939454" Oct 31 01:20:21.943410 systemd[1]: Started sshd@7-10.0.0.131:22-10.0.0.1:47120.service. Oct 31 01:20:21.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.131:22-10.0.0.1:47120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:21.945177 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 31 01:20:21.945255 kernel: audit: type=1130 audit(1761873621.942:1011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.131:22-10.0.0.1:47120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:21.998000 audit[3169]: USER_ACCT pid=3169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.006453 sshd[3169]: Accepted publickey for core from 10.0.0.1 port 47120 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:22.012953 kernel: audit: type=1101 audit(1761873621.998:1012): pid=3169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.013009 kernel: audit: type=1103 audit(1761873622.005:1013): pid=3169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.005000 audit[3169]: CRED_ACQ pid=3169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.007002 sshd[3169]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:22.012209 systemd[1]: Started session-8.scope. Oct 31 01:20:22.012675 systemd-logind[1196]: New session 8 of user core. Oct 31 01:20:22.017352 kernel: audit: type=1006 audit(1761873622.005:1014): pid=3169 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 31 01:20:22.017414 kernel: audit: type=1300 audit(1761873622.005:1014): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcadfb4c00 a2=3 a3=0 items=0 ppid=1 pid=3169 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:22.005000 audit[3169]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcadfb4c00 a2=3 a3=0 items=0 ppid=1 pid=3169 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:22.005000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:22.026417 kernel: audit: type=1327 audit(1761873622.005:1014): proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:22.026461 kernel: audit: type=1105 audit(1761873622.016:1015): pid=3169 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.016000 audit[3169]: USER_START pid=3169 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.033620 kernel: audit: type=1103 audit(1761873622.018:1016): pid=3171 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.018000 audit[3171]: CRED_ACQ pid=3171 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.145005 sshd[3169]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:22.145000 audit[3169]: USER_END pid=3169 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.147343 systemd[1]: sshd@7-10.0.0.131:22-10.0.0.1:47120.service: Deactivated successfully. Oct 31 01:20:22.148041 systemd[1]: session-8.scope: Deactivated successfully. Oct 31 01:20:22.149472 systemd-logind[1196]: Session 8 logged out. Waiting for processes to exit. Oct 31 01:20:22.150311 systemd-logind[1196]: Removed session 8. Oct 31 01:20:22.145000 audit[3169]: CRED_DISP pid=3169 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.159716 kernel: audit: type=1106 audit(1761873622.145:1017): pid=3169 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.159814 kernel: audit: type=1104 audit(1761873622.145:1018): pid=3169 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:22.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.131:22-10.0.0.1:47120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:24.370574 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3152458949.mount: Deactivated successfully. Oct 31 01:20:25.435260 env[1208]: time="2025-10-31T01:20:25.433779474Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:25.441342 env[1208]: time="2025-10-31T01:20:25.440171421Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:25.446809 env[1208]: time="2025-10-31T01:20:25.444912852Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:25.451479 env[1208]: time="2025-10-31T01:20:25.450078285Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 01:20:25.452659 env[1208]: time="2025-10-31T01:20:25.452582689Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:833e8e11d9dc187377eab6f31e275114a6b0f8f0afc3bf578a2a00507e85afc9\"" Oct 31 01:20:25.478964 env[1208]: time="2025-10-31T01:20:25.478873133Z" level=info msg="CreateContainer within sandbox \"ce9e719a616c1ee8c04e2473b2a4b9640e51a63fdd90145079ba471b6809786f\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 31 01:20:25.514000 env[1208]: time="2025-10-31T01:20:25.513916921Z" level=info msg="CreateContainer within sandbox \"ce9e719a616c1ee8c04e2473b2a4b9640e51a63fdd90145079ba471b6809786f\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"4934465256b33de97a97ae06dce78bc887f89e275fbc0ce919562a2bb2458f47\"" Oct 31 01:20:25.514990 env[1208]: time="2025-10-31T01:20:25.514945358Z" level=info msg="StartContainer for \"4934465256b33de97a97ae06dce78bc887f89e275fbc0ce919562a2bb2458f47\"" Oct 31 01:20:25.550155 systemd[1]: Started cri-containerd-4934465256b33de97a97ae06dce78bc887f89e275fbc0ce919562a2bb2458f47.scope. Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7fbc2556b6a8 items=0 ppid=2476 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:25.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333434363532353662333364653937613937616530366463653738 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.575000 audit: BPF prog-id=139 op=LOAD Oct 31 01:20:25.575000 audit[3193]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002f3c58 items=0 ppid=2476 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:25.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333434363532353662333364653937613937616530366463653738 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit: BPF prog-id=140 op=LOAD Oct 31 01:20:25.576000 audit[3193]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002f3ca8 items=0 ppid=2476 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:25.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333434363532353662333364653937613937616530366463653738 Oct 31 01:20:25.576000 audit: BPF prog-id=140 op=UNLOAD Oct 31 01:20:25.576000 audit: BPF prog-id=139 op=UNLOAD Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { perfmon } for pid=3193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit[3193]: AVC avc: denied { bpf } for pid=3193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:25.576000 audit: BPF prog-id=141 op=LOAD Oct 31 01:20:25.576000 audit[3193]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002f3d38 items=0 ppid=2476 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:25.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333434363532353662333364653937613937616530366463653738 Oct 31 01:20:25.741416 env[1208]: time="2025-10-31T01:20:25.741195234Z" level=info msg="StartContainer for \"4934465256b33de97a97ae06dce78bc887f89e275fbc0ce919562a2bb2458f47\" returns successfully" Oct 31 01:20:25.773818 kubelet[1989]: E1031 01:20:25.773757 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:25.828267 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 31 01:20:25.828517 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 31 01:20:25.835041 kubelet[1989]: I1031 01:20:25.834740 1989 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-mg6zb" podStartSLOduration=1.308515442 podStartE2EDuration="22.833507954s" podCreationTimestamp="2025-10-31 01:20:03 +0000 UTC" firstStartedPulling="2025-10-31 01:20:03.928867904 +0000 UTC m=+19.425954131" lastFinishedPulling="2025-10-31 01:20:25.453860407 +0000 UTC m=+40.950946643" observedRunningTime="2025-10-31 01:20:25.82193911 +0000 UTC m=+41.319025357" watchObservedRunningTime="2025-10-31 01:20:25.833507954 +0000 UTC m=+41.330594190" Oct 31 01:20:26.366978 env[1208]: time="2025-10-31T01:20:26.366894739Z" level=info msg="StopPodSandbox for \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\"" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.509 [INFO][3273] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.510 [INFO][3273] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" iface="eth0" netns="/var/run/netns/cni-d398bf16-2477-9953-697b-7de73a07648e" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.510 [INFO][3273] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" iface="eth0" netns="/var/run/netns/cni-d398bf16-2477-9953-697b-7de73a07648e" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.511 [INFO][3273] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" iface="eth0" netns="/var/run/netns/cni-d398bf16-2477-9953-697b-7de73a07648e" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.511 [INFO][3273] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.511 [INFO][3273] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.627 [INFO][3282] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" HandleID="k8s-pod-network.b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Workload="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.628 [INFO][3282] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.628 [INFO][3282] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.644 [WARNING][3282] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" HandleID="k8s-pod-network.b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Workload="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.644 [INFO][3282] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" HandleID="k8s-pod-network.b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Workload="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.653 [INFO][3282] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:26.665262 env[1208]: 2025-10-31 01:20:26.656 [INFO][3273] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:26.671265 systemd[1]: run-netns-cni\x2dd398bf16\x2d2477\x2d9953\x2d697b\x2d7de73a07648e.mount: Deactivated successfully. Oct 31 01:20:26.681105 env[1208]: time="2025-10-31T01:20:26.681037703Z" level=info msg="TearDown network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\" successfully" Oct 31 01:20:26.681105 env[1208]: time="2025-10-31T01:20:26.681094888Z" level=info msg="StopPodSandbox for \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\" returns successfully" Oct 31 01:20:26.779731 kubelet[1989]: E1031 01:20:26.779683 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:26.783611 kubelet[1989]: I1031 01:20:26.783561 1989 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/96c6df11-8032-440a-8e58-7100d98f2294-whisker-ca-bundle\") pod \"96c6df11-8032-440a-8e58-7100d98f2294\" (UID: \"96c6df11-8032-440a-8e58-7100d98f2294\") " Oct 31 01:20:26.783809 kubelet[1989]: I1031 01:20:26.783649 1989 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/96c6df11-8032-440a-8e58-7100d98f2294-whisker-backend-key-pair\") pod \"96c6df11-8032-440a-8e58-7100d98f2294\" (UID: \"96c6df11-8032-440a-8e58-7100d98f2294\") " Oct 31 01:20:26.783809 kubelet[1989]: I1031 01:20:26.783692 1989 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-n4jn6\" (UniqueName: \"kubernetes.io/projected/96c6df11-8032-440a-8e58-7100d98f2294-kube-api-access-n4jn6\") pod \"96c6df11-8032-440a-8e58-7100d98f2294\" (UID: \"96c6df11-8032-440a-8e58-7100d98f2294\") " Oct 31 01:20:26.786638 kubelet[1989]: I1031 01:20:26.785073 1989 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/96c6df11-8032-440a-8e58-7100d98f2294-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "96c6df11-8032-440a-8e58-7100d98f2294" (UID: "96c6df11-8032-440a-8e58-7100d98f2294"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Oct 31 01:20:26.797870 systemd[1]: var-lib-kubelet-pods-96c6df11\x2d8032\x2d440a\x2d8e58\x2d7100d98f2294-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dn4jn6.mount: Deactivated successfully. Oct 31 01:20:26.797997 systemd[1]: var-lib-kubelet-pods-96c6df11\x2d8032\x2d440a\x2d8e58\x2d7100d98f2294-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Oct 31 01:20:26.802175 kubelet[1989]: I1031 01:20:26.802036 1989 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/96c6df11-8032-440a-8e58-7100d98f2294-kube-api-access-n4jn6" (OuterVolumeSpecName: "kube-api-access-n4jn6") pod "96c6df11-8032-440a-8e58-7100d98f2294" (UID: "96c6df11-8032-440a-8e58-7100d98f2294"). InnerVolumeSpecName "kube-api-access-n4jn6". PluginName "kubernetes.io/projected", VolumeGIDValue "" Oct 31 01:20:26.802436 kubelet[1989]: I1031 01:20:26.802398 1989 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/96c6df11-8032-440a-8e58-7100d98f2294-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "96c6df11-8032-440a-8e58-7100d98f2294" (UID: "96c6df11-8032-440a-8e58-7100d98f2294"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Oct 31 01:20:26.884748 kubelet[1989]: I1031 01:20:26.884669 1989 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/96c6df11-8032-440a-8e58-7100d98f2294-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Oct 31 01:20:26.884748 kubelet[1989]: I1031 01:20:26.884726 1989 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/96c6df11-8032-440a-8e58-7100d98f2294-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Oct 31 01:20:26.884748 kubelet[1989]: I1031 01:20:26.884741 1989 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-n4jn6\" (UniqueName: \"kubernetes.io/projected/96c6df11-8032-440a-8e58-7100d98f2294-kube-api-access-n4jn6\") on node \"localhost\" DevicePath \"\"" Oct 31 01:20:27.084978 systemd[1]: Removed slice kubepods-besteffort-pod96c6df11_8032_440a_8e58_7100d98f2294.slice. Oct 31 01:20:27.159918 systemd[1]: Started sshd@8-10.0.0.131:22-10.0.0.1:39142.service. Oct 31 01:20:27.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.131:22-10.0.0.1:39142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:27.161909 kernel: kauditd_printk_skb: 44 callbacks suppressed Oct 31 01:20:27.161989 kernel: audit: type=1130 audit(1761873627.159:1026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.131:22-10.0.0.1:39142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:27.269000 audit[3325]: USER_ACCT pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.282387 sshd[3325]: Accepted publickey for core from 10.0.0.1 port 39142 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:27.282796 kernel: audit: type=1101 audit(1761873627.269:1027): pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.283000 audit[3325]: CRED_ACQ pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.288787 sshd[3325]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:27.294873 kernel: audit: type=1103 audit(1761873627.283:1028): pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.298073 systemd[1]: Started session-9.scope. Oct 31 01:20:27.300007 systemd-logind[1196]: New session 9 of user core. Oct 31 01:20:27.301542 kernel: audit: type=1006 audit(1761873627.283:1029): pid=3325 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 31 01:20:27.301628 kernel: audit: type=1300 audit(1761873627.283:1029): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd68276fa0 a2=3 a3=0 items=0 ppid=1 pid=3325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.283000 audit[3325]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd68276fa0 a2=3 a3=0 items=0 ppid=1 pid=3325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.283000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:27.324506 kernel: audit: type=1327 audit(1761873627.283:1029): proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:27.306000 audit[3325]: USER_START pid=3325 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.332718 systemd[1]: Created slice kubepods-besteffort-pod1507a89d_ba39_4386_b53c_44b9ad26c13e.slice. Oct 31 01:20:27.359213 kernel: audit: type=1105 audit(1761873627.306:1030): pid=3325 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.359400 kernel: audit: type=1103 audit(1761873627.306:1031): pid=3327 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.306000 audit[3327]: CRED_ACQ pid=3327 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.391433 kubelet[1989]: I1031 01:20:27.389735 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1507a89d-ba39-4386-b53c-44b9ad26c13e-whisker-backend-key-pair\") pod \"whisker-7df6677f99-4629b\" (UID: \"1507a89d-ba39-4386-b53c-44b9ad26c13e\") " pod="calico-system/whisker-7df6677f99-4629b" Oct 31 01:20:27.391433 kubelet[1989]: I1031 01:20:27.389847 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1507a89d-ba39-4386-b53c-44b9ad26c13e-whisker-ca-bundle\") pod \"whisker-7df6677f99-4629b\" (UID: \"1507a89d-ba39-4386-b53c-44b9ad26c13e\") " pod="calico-system/whisker-7df6677f99-4629b" Oct 31 01:20:27.391433 kubelet[1989]: I1031 01:20:27.389871 1989 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4fcxz\" (UniqueName: \"kubernetes.io/projected/1507a89d-ba39-4386-b53c-44b9ad26c13e-kube-api-access-4fcxz\") pod \"whisker-7df6677f99-4629b\" (UID: \"1507a89d-ba39-4386-b53c-44b9ad26c13e\") " pod="calico-system/whisker-7df6677f99-4629b" Oct 31 01:20:27.613822 env[1208]: time="2025-10-31T01:20:27.609324744Z" level=info msg="StopPodSandbox for \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\"" Oct 31 01:20:27.614242 env[1208]: time="2025-10-31T01:20:27.614196045Z" level=info msg="StopPodSandbox for \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\"" Oct 31 01:20:27.653000 audit[3418]: AVC avc: denied { write } for pid=3418 comm="tee" name="fd" dev="proc" ino=24204 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 01:20:27.653000 audit[3418]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffad09b7ea a2=241 a3=1b6 items=1 ppid=3347 pid=3418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.678541 kernel: audit: type=1400 audit(1761873627.653:1032): avc: denied { write } for pid=3418 comm="tee" name="fd" dev="proc" ino=24204 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 01:20:27.678866 kernel: audit: type=1300 audit(1761873627.653:1032): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffad09b7ea a2=241 a3=1b6 items=1 ppid=3347 pid=3418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.653000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 31 01:20:27.653000 audit: PATH item=0 name="/dev/fd/63" inode=25010 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:20:27.653000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 01:20:27.653000 audit[3420]: AVC avc: denied { write } for pid=3420 comm="tee" name="fd" dev="proc" ino=25017 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 01:20:27.653000 audit[3420]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd95bf47e9 a2=241 a3=1b6 items=1 ppid=3366 pid=3420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.653000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 31 01:20:27.653000 audit: PATH item=0 name="/dev/fd/63" inode=25011 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:20:27.653000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 01:20:27.683000 audit[3429]: AVC avc: denied { write } for pid=3429 comm="tee" name="fd" dev="proc" ino=24211 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 01:20:27.683000 audit[3429]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff2508e7eb a2=241 a3=1b6 items=1 ppid=3349 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.683000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 31 01:20:27.683000 audit: PATH item=0 name="/dev/fd/63" inode=25019 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:20:27.683000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 01:20:27.697000 audit[3426]: AVC avc: denied { write } for pid=3426 comm="tee" name="fd" dev="proc" ino=25031 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 01:20:27.697000 audit[3426]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcc2d707da a2=241 a3=1b6 items=1 ppid=3355 pid=3426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.697000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 31 01:20:27.697000 audit: PATH item=0 name="/dev/fd/63" inode=25014 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:20:27.697000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 01:20:27.701991 sshd[3325]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:27.703000 audit[3325]: USER_END pid=3325 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.703000 audit[3325]: CRED_DISP pid=3325 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:27.706180 systemd[1]: sshd@8-10.0.0.131:22-10.0.0.1:39142.service: Deactivated successfully. Oct 31 01:20:27.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.131:22-10.0.0.1:39142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:27.707410 systemd[1]: session-9.scope: Deactivated successfully. Oct 31 01:20:27.709203 systemd-logind[1196]: Session 9 logged out. Waiting for processes to exit. Oct 31 01:20:27.710389 systemd-logind[1196]: Removed session 9. Oct 31 01:20:27.734000 audit[3447]: AVC avc: denied { write } for pid=3447 comm="tee" name="fd" dev="proc" ino=26886 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 01:20:27.734000 audit[3447]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe4cb3d7d9 a2=241 a3=1b6 items=1 ppid=3351 pid=3447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.734000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 31 01:20:27.734000 audit: PATH item=0 name="/dev/fd/63" inode=24213 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:20:27.734000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 01:20:27.738000 audit[3461]: AVC avc: denied { write } for pid=3461 comm="tee" name="fd" dev="proc" ino=25854 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 01:20:27.738000 audit[3461]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffc9dc37e9 a2=241 a3=1b6 items=1 ppid=3354 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.738000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 31 01:20:27.738000 audit: PATH item=0 name="/dev/fd/63" inode=25042 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:20:27.738000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 01:20:27.748000 audit[3465]: AVC avc: denied { write } for pid=3465 comm="tee" name="fd" dev="proc" ino=25860 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 01:20:27.748000 audit[3465]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff40a4e7e9 a2=241 a3=1b6 items=1 ppid=3353 pid=3465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:27.748000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 31 01:20:27.748000 audit: PATH item=0 name="/dev/fd/63" inode=24216 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 01:20:27.748000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 01:20:27.783392 kubelet[1989]: E1031 01:20:27.783077 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:27.838374 systemd[1]: run-containerd-runc-k8s.io-4934465256b33de97a97ae06dce78bc887f89e275fbc0ce919562a2bb2458f47-runc.iKr6Pm.mount: Deactivated successfully. Oct 31 01:20:27.940497 env[1208]: time="2025-10-31T01:20:27.938900568Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7df6677f99-4629b,Uid:1507a89d-ba39-4386-b53c-44b9ad26c13e,Namespace:calico-system,Attempt:0,}" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.887 [INFO][3384] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.887 [INFO][3384] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" iface="eth0" netns="/var/run/netns/cni-1b1bcc68-e0d3-6f59-fa6c-d9d73b87a364" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.887 [INFO][3384] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" iface="eth0" netns="/var/run/netns/cni-1b1bcc68-e0d3-6f59-fa6c-d9d73b87a364" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.887 [INFO][3384] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" iface="eth0" netns="/var/run/netns/cni-1b1bcc68-e0d3-6f59-fa6c-d9d73b87a364" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.888 [INFO][3384] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.888 [INFO][3384] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.940 [INFO][3492] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" HandleID="k8s-pod-network.861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.945 [INFO][3492] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.946 [INFO][3492] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.971 [WARNING][3492] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" HandleID="k8s-pod-network.861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.972 [INFO][3492] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" HandleID="k8s-pod-network.861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.976 [INFO][3492] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:27.994033 env[1208]: 2025-10-31 01:20:27.983 [INFO][3384] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:27.997073 systemd[1]: run-netns-cni\x2d1b1bcc68\x2de0d3\x2d6f59\x2dfa6c\x2dd9d73b87a364.mount: Deactivated successfully. Oct 31 01:20:28.003884 env[1208]: time="2025-10-31T01:20:28.003816997Z" level=info msg="TearDown network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\" successfully" Oct 31 01:20:28.004939 env[1208]: time="2025-10-31T01:20:28.004869530Z" level=info msg="StopPodSandbox for \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\" returns successfully" Oct 31 01:20:28.006495 env[1208]: time="2025-10-31T01:20:28.005893193Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77d46fd4d5-d7tbw,Uid:b3fede59-787e-43f4-aace-2a04c63127ad,Namespace:calico-apiserver,Attempt:1,}" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:27.892 [INFO][3404] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:27.892 [INFO][3404] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" iface="eth0" netns="/var/run/netns/cni-973aa60d-6faa-d144-298b-8f31901c01f2" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:27.893 [INFO][3404] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" iface="eth0" netns="/var/run/netns/cni-973aa60d-6faa-d144-298b-8f31901c01f2" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:27.893 [INFO][3404] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" iface="eth0" netns="/var/run/netns/cni-973aa60d-6faa-d144-298b-8f31901c01f2" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:27.893 [INFO][3404] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:27.893 [INFO][3404] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:27.949 [INFO][3494] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" HandleID="k8s-pod-network.59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:27.950 [INFO][3494] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:27.978 [INFO][3494] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:28.011 [WARNING][3494] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" HandleID="k8s-pod-network.59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:28.011 [INFO][3494] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" HandleID="k8s-pod-network.59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:28.020 [INFO][3494] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:28.029384 env[1208]: 2025-10-31 01:20:28.023 [INFO][3404] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:28.035081 env[1208]: time="2025-10-31T01:20:28.030478643Z" level=info msg="TearDown network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\" successfully" Oct 31 01:20:28.035081 env[1208]: time="2025-10-31T01:20:28.034086372Z" level=info msg="StopPodSandbox for \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\" returns successfully" Oct 31 01:20:28.036183 kubelet[1989]: E1031 01:20:28.036117 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:28.039240 env[1208]: time="2025-10-31T01:20:28.039175853Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-lcq29,Uid:708d30cb-c2ce-44d9-bd45-12e83b63bbbb,Namespace:kube-system,Attempt:1,}" Oct 31 01:20:28.373986 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 31 01:20:28.374151 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8303efac7b8: link becomes ready Oct 31 01:20:28.374964 systemd-networkd[1020]: cali8303efac7b8: Link UP Oct 31 01:20:28.376042 systemd-networkd[1020]: cali8303efac7b8: Gained carrier Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.103 [INFO][3514] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.159 [INFO][3514] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--7df6677f99--4629b-eth0 whisker-7df6677f99- calico-system 1507a89d-ba39-4386-b53c-44b9ad26c13e 1025 0 2025-10-31 01:20:27 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7df6677f99 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-7df6677f99-4629b eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali8303efac7b8 [] [] }} ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Namespace="calico-system" Pod="whisker-7df6677f99-4629b" WorkloadEndpoint="localhost-k8s-whisker--7df6677f99--4629b-" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.159 [INFO][3514] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Namespace="calico-system" Pod="whisker-7df6677f99-4629b" WorkloadEndpoint="localhost-k8s-whisker--7df6677f99--4629b-eth0" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.206 [INFO][3528] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" HandleID="k8s-pod-network.5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Workload="localhost-k8s-whisker--7df6677f99--4629b-eth0" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.206 [INFO][3528] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" HandleID="k8s-pod-network.5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Workload="localhost-k8s-whisker--7df6677f99--4629b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9290), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-7df6677f99-4629b", "timestamp":"2025-10-31 01:20:28.206520591 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.206 [INFO][3528] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.206 [INFO][3528] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.206 [INFO][3528] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.252 [INFO][3528] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" host="localhost" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.272 [INFO][3528] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.284 [INFO][3528] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.289 [INFO][3528] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.298 [INFO][3528] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.298 [INFO][3528] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" host="localhost" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.302 [INFO][3528] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080 Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.316 [INFO][3528] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" host="localhost" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.329 [INFO][3528] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" host="localhost" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.329 [INFO][3528] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" host="localhost" Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.329 [INFO][3528] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:28.424105 env[1208]: 2025-10-31 01:20:28.329 [INFO][3528] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" HandleID="k8s-pod-network.5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Workload="localhost-k8s-whisker--7df6677f99--4629b-eth0" Oct 31 01:20:28.426274 env[1208]: 2025-10-31 01:20:28.338 [INFO][3514] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Namespace="calico-system" Pod="whisker-7df6677f99-4629b" WorkloadEndpoint="localhost-k8s-whisker--7df6677f99--4629b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7df6677f99--4629b-eth0", GenerateName:"whisker-7df6677f99-", Namespace:"calico-system", SelfLink:"", UID:"1507a89d-ba39-4386-b53c-44b9ad26c13e", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7df6677f99", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-7df6677f99-4629b", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali8303efac7b8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:28.426274 env[1208]: 2025-10-31 01:20:28.338 [INFO][3514] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Namespace="calico-system" Pod="whisker-7df6677f99-4629b" WorkloadEndpoint="localhost-k8s-whisker--7df6677f99--4629b-eth0" Oct 31 01:20:28.426274 env[1208]: 2025-10-31 01:20:28.338 [INFO][3514] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8303efac7b8 ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Namespace="calico-system" Pod="whisker-7df6677f99-4629b" WorkloadEndpoint="localhost-k8s-whisker--7df6677f99--4629b-eth0" Oct 31 01:20:28.426274 env[1208]: 2025-10-31 01:20:28.376 [INFO][3514] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Namespace="calico-system" Pod="whisker-7df6677f99-4629b" WorkloadEndpoint="localhost-k8s-whisker--7df6677f99--4629b-eth0" Oct 31 01:20:28.426274 env[1208]: 2025-10-31 01:20:28.379 [INFO][3514] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Namespace="calico-system" Pod="whisker-7df6677f99-4629b" WorkloadEndpoint="localhost-k8s-whisker--7df6677f99--4629b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7df6677f99--4629b-eth0", GenerateName:"whisker-7df6677f99-", Namespace:"calico-system", SelfLink:"", UID:"1507a89d-ba39-4386-b53c-44b9ad26c13e", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7df6677f99", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080", Pod:"whisker-7df6677f99-4629b", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali8303efac7b8", MAC:"56:f3:d3:82:6a:3d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:28.426274 env[1208]: 2025-10-31 01:20:28.415 [INFO][3514] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080" Namespace="calico-system" Pod="whisker-7df6677f99-4629b" WorkloadEndpoint="localhost-k8s-whisker--7df6677f99--4629b-eth0" Oct 31 01:20:28.490940 env[1208]: time="2025-10-31T01:20:28.490813879Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:28.491264 env[1208]: time="2025-10-31T01:20:28.491216517Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:28.491421 env[1208]: time="2025-10-31T01:20:28.491365316Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:28.496130 kubelet[1989]: I1031 01:20:28.495457 1989 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Oct 31 01:20:28.496130 kubelet[1989]: E1031 01:20:28.495874 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:28.496453 env[1208]: time="2025-10-31T01:20:28.493656092Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080 pid=3591 runtime=io.containerd.runc.v2 Oct 31 01:20:28.520738 systemd[1]: run-netns-cni\x2d973aa60d\x2d6faa\x2dd144\x2d298b\x2d8f31901c01f2.mount: Deactivated successfully. Oct 31 01:20:28.536184 systemd[1]: Started cri-containerd-5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080.scope. Oct 31 01:20:28.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.559000 audit: BPF prog-id=142 op=LOAD Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3591 pid=3605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561323865663832373336303034653036633966383064653136633761 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3591 pid=3605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561323865663832373336303034653036633966383064653136633761 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.560000 audit: BPF prog-id=143 op=LOAD Oct 31 01:20:28.560000 audit[3605]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000357ff0 items=0 ppid=3591 pid=3605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561323865663832373336303034653036633966383064653136633761 Oct 31 01:20:28.562000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.562000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.562000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.562000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.562000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.562000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.562000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.562000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.562000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.562000 audit: BPF prog-id=144 op=LOAD Oct 31 01:20:28.562000 audit[3605]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003d8038 items=0 ppid=3591 pid=3605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561323865663832373336303034653036633966383064653136633761 Oct 31 01:20:28.563000 audit: BPF prog-id=144 op=UNLOAD Oct 31 01:20:28.563000 audit: BPF prog-id=143 op=UNLOAD Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { perfmon } for pid=3605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit[3605]: AVC avc: denied { bpf } for pid=3605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.563000 audit: BPF prog-id=145 op=LOAD Oct 31 01:20:28.563000 audit[3605]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d8448 items=0 ppid=3591 pid=3605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561323865663832373336303034653036633966383064653136633761 Oct 31 01:20:28.566293 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 01:20:28.581000 audit[3623]: NETFILTER_CFG table=filter:103 family=2 entries=21 op=nft_register_rule pid=3623 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:28.581000 audit[3623]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffca6456470 a2=0 a3=7ffca645645c items=0 ppid=2102 pid=3623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.581000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:28.593000 audit[3623]: NETFILTER_CFG table=nat:104 family=2 entries=19 op=nft_register_chain pid=3623 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:28.593000 audit[3623]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffca6456470 a2=0 a3=7ffca645645c items=0 ppid=2102 pid=3623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.593000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:28.612527 env[1208]: time="2025-10-31T01:20:28.612445818Z" level=info msg="StopPodSandbox for \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\"" Oct 31 01:20:28.616963 kubelet[1989]: I1031 01:20:28.616680 1989 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="96c6df11-8032-440a-8e58-7100d98f2294" path="/var/lib/kubelet/pods/96c6df11-8032-440a-8e58-7100d98f2294/volumes" Oct 31 01:20:28.617670 env[1208]: time="2025-10-31T01:20:28.613097424Z" level=info msg="StopPodSandbox for \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\"" Oct 31 01:20:28.630386 env[1208]: time="2025-10-31T01:20:28.630231833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7df6677f99-4629b,Uid:1507a89d-ba39-4386-b53c-44b9ad26c13e,Namespace:calico-system,Attempt:0,} returns sandbox id \"5a28ef82736004e06c9f80de16c7ab82ba19a8f4430adf173d0aabde80602080\"" Oct 31 01:20:28.637209 env[1208]: time="2025-10-31T01:20:28.637150235Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 31 01:20:28.701458 systemd-networkd[1020]: calia0ead0e36bc: Link UP Oct 31 01:20:28.704845 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia0ead0e36bc: link becomes ready Oct 31 01:20:28.706144 systemd-networkd[1020]: calia0ead0e36bc: Gained carrier Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.334 [INFO][3538] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.390 [INFO][3538] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0 calico-apiserver-77d46fd4d5- calico-apiserver b3fede59-787e-43f4-aace-2a04c63127ad 1030 0 2025-10-31 01:19:59 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:77d46fd4d5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-77d46fd4d5-d7tbw eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calia0ead0e36bc [] [] }} ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-d7tbw" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.391 [INFO][3538] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-d7tbw" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.480 [INFO][3566] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" HandleID="k8s-pod-network.09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.480 [INFO][3566] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" HandleID="k8s-pod-network.09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00030f910), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-77d46fd4d5-d7tbw", "timestamp":"2025-10-31 01:20:28.48002887 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.480 [INFO][3566] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.481 [INFO][3566] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.481 [INFO][3566] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.507 [INFO][3566] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" host="localhost" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.594 [INFO][3566] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.626 [INFO][3566] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.640 [INFO][3566] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.646 [INFO][3566] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.646 [INFO][3566] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" host="localhost" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.653 [INFO][3566] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.670 [INFO][3566] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" host="localhost" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.680 [INFO][3566] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" host="localhost" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.681 [INFO][3566] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" host="localhost" Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.681 [INFO][3566] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:28.736283 env[1208]: 2025-10-31 01:20:28.681 [INFO][3566] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" HandleID="k8s-pod-network.09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:28.737309 env[1208]: 2025-10-31 01:20:28.689 [INFO][3538] cni-plugin/k8s.go 418: Populated endpoint ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-d7tbw" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0", GenerateName:"calico-apiserver-77d46fd4d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"b3fede59-787e-43f4-aace-2a04c63127ad", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77d46fd4d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-77d46fd4d5-d7tbw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia0ead0e36bc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:28.737309 env[1208]: 2025-10-31 01:20:28.689 [INFO][3538] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-d7tbw" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:28.737309 env[1208]: 2025-10-31 01:20:28.689 [INFO][3538] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia0ead0e36bc ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-d7tbw" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:28.737309 env[1208]: 2025-10-31 01:20:28.707 [INFO][3538] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-d7tbw" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:28.737309 env[1208]: 2025-10-31 01:20:28.708 [INFO][3538] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-d7tbw" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0", GenerateName:"calico-apiserver-77d46fd4d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"b3fede59-787e-43f4-aace-2a04c63127ad", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77d46fd4d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e", Pod:"calico-apiserver-77d46fd4d5-d7tbw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia0ead0e36bc", MAC:"a6:1d:ea:bf:f1:b9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:28.737309 env[1208]: 2025-10-31 01:20:28.732 [INFO][3538] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-d7tbw" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:28.771933 env[1208]: time="2025-10-31T01:20:28.771619199Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:28.771933 env[1208]: time="2025-10-31T01:20:28.771682075Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:28.771933 env[1208]: time="2025-10-31T01:20:28.771695623Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:28.772214 env[1208]: time="2025-10-31T01:20:28.771989633Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e pid=3706 runtime=io.containerd.runc.v2 Oct 31 01:20:28.788364 kubelet[1989]: E1031 01:20:28.787890 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:28.813711 systemd[1]: Started cri-containerd-09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e.scope. Oct 31 01:20:28.844274 systemd-networkd[1020]: cali567bad985dd: Link UP Oct 31 01:20:28.849304 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali567bad985dd: link becomes ready Oct 31 01:20:28.848601 systemd-networkd[1020]: cali567bad985dd: Gained carrier Oct 31 01:20:28.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.851000 audit: BPF prog-id=146 op=LOAD Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.719 [INFO][3659] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.719 [INFO][3659] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" iface="eth0" netns="/var/run/netns/cni-4c8a7925-73b3-67aa-f9bb-289fb4a72a18" Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.719 [INFO][3659] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" iface="eth0" netns="/var/run/netns/cni-4c8a7925-73b3-67aa-f9bb-289fb4a72a18" Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.720 [INFO][3659] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" iface="eth0" netns="/var/run/netns/cni-4c8a7925-73b3-67aa-f9bb-289fb4a72a18" Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.720 [INFO][3659] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.720 [INFO][3659] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.760 [INFO][3676] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" HandleID="k8s-pod-network.dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.761 [INFO][3676] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.823 [INFO][3676] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.837 [WARNING][3676] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" HandleID="k8s-pod-network.dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.837 [INFO][3676] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" HandleID="k8s-pod-network.dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.842 [INFO][3676] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:28.853730 env[1208]: 2025-10-31 01:20:28.851 [INFO][3659] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3706 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393337333631643965363864386433633139363563356166323764 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3706 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393337333631643965363864386433633139363563356166323764 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.852000 audit: BPF prog-id=147 op=LOAD Oct 31 01:20:28.852000 audit[3717]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a97f0 items=0 ppid=3706 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393337333631643965363864386433633139363563356166323764 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit: BPF prog-id=148 op=LOAD Oct 31 01:20:28.853000 audit[3717]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a9838 items=0 ppid=3706 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393337333631643965363864386433633139363563356166323764 Oct 31 01:20:28.853000 audit: BPF prog-id=148 op=UNLOAD Oct 31 01:20:28.853000 audit: BPF prog-id=147 op=UNLOAD Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { perfmon } for pid=3717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit[3717]: AVC avc: denied { bpf } for pid=3717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:28.853000 audit: BPF prog-id=149 op=LOAD Oct 31 01:20:28.853000 audit[3717]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a9c48 items=0 ppid=3706 pid=3717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:28.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039393337333631643965363864386433633139363563356166323764 Oct 31 01:20:28.855906 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 01:20:28.857839 env[1208]: time="2025-10-31T01:20:28.857786369Z" level=info msg="TearDown network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\" successfully" Oct 31 01:20:28.857969 env[1208]: time="2025-10-31T01:20:28.857943013Z" level=info msg="StopPodSandbox for \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\" returns successfully" Oct 31 01:20:28.859013 env[1208]: time="2025-10-31T01:20:28.858984022Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77d46fd4d5-5bw5f,Uid:1096d6b0-357c-45fe-aab1-ad0c209c60ed,Namespace:calico-apiserver,Attempt:1,}" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.391 [INFO][3549] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.421 [INFO][3549] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--lcq29-eth0 coredns-674b8bbfcf- kube-system 708d30cb-c2ce-44d9-bd45-12e83b63bbbb 1031 0 2025-10-31 01:19:50 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-lcq29 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali567bad985dd [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Namespace="kube-system" Pod="coredns-674b8bbfcf-lcq29" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--lcq29-" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.421 [INFO][3549] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Namespace="kube-system" Pod="coredns-674b8bbfcf-lcq29" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.481 [INFO][3576] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" HandleID="k8s-pod-network.2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.481 [INFO][3576] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" HandleID="k8s-pod-network.2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00032b1a0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-lcq29", "timestamp":"2025-10-31 01:20:28.481271012 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.481 [INFO][3576] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.681 [INFO][3576] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.681 [INFO][3576] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.707 [INFO][3576] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" host="localhost" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.745 [INFO][3576] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.765 [INFO][3576] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.769 [INFO][3576] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.778 [INFO][3576] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.778 [INFO][3576] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" host="localhost" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.783 [INFO][3576] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1 Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.804 [INFO][3576] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" host="localhost" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.820 [INFO][3576] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" host="localhost" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.823 [INFO][3576] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" host="localhost" Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.823 [INFO][3576] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:28.902565 env[1208]: 2025-10-31 01:20:28.823 [INFO][3576] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" HandleID="k8s-pod-network.2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.905806 env[1208]: 2025-10-31 01:20:28.837 [INFO][3549] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Namespace="kube-system" Pod="coredns-674b8bbfcf-lcq29" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--lcq29-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"708d30cb-c2ce-44d9-bd45-12e83b63bbbb", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-lcq29", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali567bad985dd", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:28.905806 env[1208]: 2025-10-31 01:20:28.837 [INFO][3549] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Namespace="kube-system" Pod="coredns-674b8bbfcf-lcq29" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.905806 env[1208]: 2025-10-31 01:20:28.837 [INFO][3549] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali567bad985dd ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Namespace="kube-system" Pod="coredns-674b8bbfcf-lcq29" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.905806 env[1208]: 2025-10-31 01:20:28.849 [INFO][3549] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Namespace="kube-system" Pod="coredns-674b8bbfcf-lcq29" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.905806 env[1208]: 2025-10-31 01:20:28.849 [INFO][3549] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Namespace="kube-system" Pod="coredns-674b8bbfcf-lcq29" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--lcq29-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"708d30cb-c2ce-44d9-bd45-12e83b63bbbb", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1", Pod:"coredns-674b8bbfcf-lcq29", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali567bad985dd", MAC:"12:eb:ae:9d:cd:03", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:28.905806 env[1208]: 2025-10-31 01:20:28.879 [INFO][3549] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1" Namespace="kube-system" Pod="coredns-674b8bbfcf-lcq29" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.728 [INFO][3658] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.728 [INFO][3658] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" iface="eth0" netns="/var/run/netns/cni-073b0cb9-56b8-e500-a95a-3ba465de7c9c" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.728 [INFO][3658] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" iface="eth0" netns="/var/run/netns/cni-073b0cb9-56b8-e500-a95a-3ba465de7c9c" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.731 [INFO][3658] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" iface="eth0" netns="/var/run/netns/cni-073b0cb9-56b8-e500-a95a-3ba465de7c9c" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.731 [INFO][3658] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.731 [INFO][3658] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.792 [INFO][3681] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" HandleID="k8s-pod-network.c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.794 [INFO][3681] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.845 [INFO][3681] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.880 [WARNING][3681] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" HandleID="k8s-pod-network.c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.880 [INFO][3681] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" HandleID="k8s-pod-network.c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.887 [INFO][3681] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:28.910631 env[1208]: 2025-10-31 01:20:28.892 [INFO][3658] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:28.912744 env[1208]: time="2025-10-31T01:20:28.912691223Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77d46fd4d5-d7tbw,Uid:b3fede59-787e-43f4-aace-2a04c63127ad,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e\"" Oct 31 01:20:28.915950 env[1208]: time="2025-10-31T01:20:28.915752145Z" level=info msg="TearDown network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\" successfully" Oct 31 01:20:28.916254 env[1208]: time="2025-10-31T01:20:28.916229562Z" level=info msg="StopPodSandbox for \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\" returns successfully" Oct 31 01:20:28.918918 env[1208]: time="2025-10-31T01:20:28.918876844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n2thp,Uid:a128bb1b-4c94-45fa-831f-8217c16a0f14,Namespace:calico-system,Attempt:1,}" Oct 31 01:20:28.932886 env[1208]: time="2025-10-31T01:20:28.932753617Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:28.933129 env[1208]: time="2025-10-31T01:20:28.933101034Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:28.933256 env[1208]: time="2025-10-31T01:20:28.933229241Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:28.933666 env[1208]: time="2025-10-31T01:20:28.933626768Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1 pid=3786 runtime=io.containerd.runc.v2 Oct 31 01:20:28.962926 systemd[1]: Started cri-containerd-2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1.scope. Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.000000 audit: BPF prog-id=150 op=LOAD Oct 31 01:20:29.001000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.001000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3786 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265633730646537623161323564386163383265613736333262306434 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3786 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265633730646537623161323564386163383265613736333262306434 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.002000 audit: BPF prog-id=151 op=LOAD Oct 31 01:20:29.002000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003baaa0 items=0 ppid=3786 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265633730646537623161323564386163383265613736333262306434 Oct 31 01:20:29.005000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.005000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.005000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.005000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.005000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.005000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.005000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.005000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.005000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.005000 audit: BPF prog-id=152 op=LOAD Oct 31 01:20:29.005000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003baae8 items=0 ppid=3786 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265633730646537623161323564386163383265613736333262306434 Oct 31 01:20:29.009000 audit: BPF prog-id=152 op=UNLOAD Oct 31 01:20:29.009000 audit: BPF prog-id=151 op=UNLOAD Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { perfmon } for pid=3795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit[3795]: AVC avc: denied { bpf } for pid=3795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.009000 audit: BPF prog-id=153 op=LOAD Oct 31 01:20:29.009000 audit[3795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003baef8 items=0 ppid=3786 pid=3795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265633730646537623161323564386163383265613736333262306434 Oct 31 01:20:29.012024 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 01:20:29.022495 env[1208]: time="2025-10-31T01:20:29.022412700Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:29.039144 env[1208]: time="2025-10-31T01:20:29.038935756Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 31 01:20:29.043795 kubelet[1989]: E1031 01:20:29.043019 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 01:20:29.043795 kubelet[1989]: E1031 01:20:29.043097 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 01:20:29.044115 kubelet[1989]: E1031 01:20:29.043387 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6567d060fad640478881d6f4ca1306d9,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-4fcxz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7df6677f99-4629b_calico-system(1507a89d-ba39-4386-b53c-44b9ad26c13e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:29.044618 env[1208]: time="2025-10-31T01:20:29.044575285Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 01:20:29.088632 env[1208]: time="2025-10-31T01:20:29.088077754Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-lcq29,Uid:708d30cb-c2ce-44d9-bd45-12e83b63bbbb,Namespace:kube-system,Attempt:1,} returns sandbox id \"2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1\"" Oct 31 01:20:29.089248 kubelet[1989]: E1031 01:20:29.089169 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:29.105838 env[1208]: time="2025-10-31T01:20:29.105753632Z" level=info msg="CreateContainer within sandbox \"2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 31 01:20:29.180049 env[1208]: time="2025-10-31T01:20:29.179892911Z" level=info msg="CreateContainer within sandbox \"2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1b9369339eff364d3ed9d02d8ff39555bcc4fd00443e7c1aa03070045b88974f\"" Oct 31 01:20:29.182861 env[1208]: time="2025-10-31T01:20:29.181307387Z" level=info msg="StartContainer for \"1b9369339eff364d3ed9d02d8ff39555bcc4fd00443e7c1aa03070045b88974f\"" Oct 31 01:20:29.210376 systemd[1]: Started cri-containerd-1b9369339eff364d3ed9d02d8ff39555bcc4fd00443e7c1aa03070045b88974f.scope. Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.233000 audit: BPF prog-id=154 op=LOAD Oct 31 01:20:29.235257 systemd-networkd[1020]: cali6be3698b2c2: Link UP Oct 31 01:20:29.238938 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6be3698b2c2: link becomes ready Oct 31 01:20:29.238886 systemd-networkd[1020]: cali6be3698b2c2: Gained carrier Oct 31 01:20:29.239000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.239000 audit[3879]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3786 pid=3879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393336393333396566663336346433656439643032643866663339 Oct 31 01:20:29.239000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.239000 audit[3879]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3786 pid=3879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393336393333396566663336346433656439643032643866663339 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit: BPF prog-id=155 op=LOAD Oct 31 01:20:29.240000 audit[3879]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001873c0 items=0 ppid=3786 pid=3879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393336393333396566663336346433656439643032643866663339 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit: BPF prog-id=156 op=LOAD Oct 31 01:20:29.240000 audit[3879]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000187408 items=0 ppid=3786 pid=3879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393336393333396566663336346433656439643032643866663339 Oct 31 01:20:29.240000 audit: BPF prog-id=156 op=UNLOAD Oct 31 01:20:29.240000 audit: BPF prog-id=155 op=UNLOAD Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { perfmon } for pid=3879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit[3879]: AVC avc: denied { bpf } for pid=3879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.240000 audit: BPF prog-id=157 op=LOAD Oct 31 01:20:29.240000 audit[3879]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000187818 items=0 ppid=3786 pid=3879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393336393333396566663336346433656439643032643866663339 Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:28.952 [INFO][3765] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:28.978 [INFO][3765] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0 calico-apiserver-77d46fd4d5- calico-apiserver 1096d6b0-357c-45fe-aab1-ad0c209c60ed 1052 0 2025-10-31 01:19:59 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:77d46fd4d5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-77d46fd4d5-5bw5f eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali6be3698b2c2 [] [] }} ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-5bw5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:28.978 [INFO][3765] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-5bw5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.114 [INFO][3828] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" HandleID="k8s-pod-network.49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.118 [INFO][3828] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" HandleID="k8s-pod-network.49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000355590), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-77d46fd4d5-5bw5f", "timestamp":"2025-10-31 01:20:29.114943361 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.118 [INFO][3828] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.118 [INFO][3828] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.119 [INFO][3828] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.132 [INFO][3828] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" host="localhost" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.145 [INFO][3828] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.156 [INFO][3828] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.178 [INFO][3828] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.192 [INFO][3828] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.192 [INFO][3828] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" host="localhost" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.203 [INFO][3828] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185 Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.217 [INFO][3828] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" host="localhost" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.229 [INFO][3828] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" host="localhost" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.229 [INFO][3828] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" host="localhost" Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.229 [INFO][3828] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:29.269055 env[1208]: 2025-10-31 01:20:29.229 [INFO][3828] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" HandleID="k8s-pod-network.49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:29.269781 env[1208]: 2025-10-31 01:20:29.232 [INFO][3765] cni-plugin/k8s.go 418: Populated endpoint ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-5bw5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0", GenerateName:"calico-apiserver-77d46fd4d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"1096d6b0-357c-45fe-aab1-ad0c209c60ed", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77d46fd4d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-77d46fd4d5-5bw5f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6be3698b2c2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:29.269781 env[1208]: 2025-10-31 01:20:29.232 [INFO][3765] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-5bw5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:29.269781 env[1208]: 2025-10-31 01:20:29.232 [INFO][3765] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6be3698b2c2 ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-5bw5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:29.269781 env[1208]: 2025-10-31 01:20:29.239 [INFO][3765] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-5bw5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:29.269781 env[1208]: 2025-10-31 01:20:29.239 [INFO][3765] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-5bw5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0", GenerateName:"calico-apiserver-77d46fd4d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"1096d6b0-357c-45fe-aab1-ad0c209c60ed", ResourceVersion:"1052", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77d46fd4d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185", Pod:"calico-apiserver-77d46fd4d5-5bw5f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6be3698b2c2", MAC:"6a:a9:5d:29:f4:13", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:29.269781 env[1208]: 2025-10-31 01:20:29.264 [INFO][3765] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185" Namespace="calico-apiserver" Pod="calico-apiserver-77d46fd4d5-5bw5f" WorkloadEndpoint="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:29.273693 env[1208]: time="2025-10-31T01:20:29.273644871Z" level=info msg="StartContainer for \"1b9369339eff364d3ed9d02d8ff39555bcc4fd00443e7c1aa03070045b88974f\" returns successfully" Oct 31 01:20:29.285166 env[1208]: time="2025-10-31T01:20:29.285069823Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:29.285166 env[1208]: time="2025-10-31T01:20:29.285135955Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:29.285166 env[1208]: time="2025-10-31T01:20:29.285146246Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:29.285474 env[1208]: time="2025-10-31T01:20:29.285425916Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185 pid=3932 runtime=io.containerd.runc.v2 Oct 31 01:20:29.296000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.296000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.296000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.296000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.296000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.296000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.296000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.296000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.299338 systemd[1]: Started cri-containerd-49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185.scope. Oct 31 01:20:29.296000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.296000 audit: BPF prog-id=158 op=LOAD Oct 31 01:20:29.296000 audit[3960]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd930865e0 a2=98 a3=1fffffffffffffff items=0 ppid=3835 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.296000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 31 01:20:29.300000 audit: BPF prog-id=158 op=UNLOAD Oct 31 01:20:29.300000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.300000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.300000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.300000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.300000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.300000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.300000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.300000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.300000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.300000 audit: BPF prog-id=159 op=LOAD Oct 31 01:20:29.300000 audit[3960]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd930864c0 a2=94 a3=3 items=0 ppid=3835 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.300000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 31 01:20:29.302000 audit: BPF prog-id=159 op=UNLOAD Oct 31 01:20:29.302000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.302000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.302000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.302000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.302000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.302000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.302000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.302000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.302000 audit[3960]: AVC avc: denied { bpf } for pid=3960 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.302000 audit: BPF prog-id=160 op=LOAD Oct 31 01:20:29.302000 audit[3960]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd93086500 a2=94 a3=7ffd930866e0 items=0 ppid=3835 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.302000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 31 01:20:29.303000 audit: BPF prog-id=160 op=UNLOAD Oct 31 01:20:29.303000 audit[3960]: AVC avc: denied { perfmon } for pid=3960 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.303000 audit[3960]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffd930865d0 a2=50 a3=a000000085 items=0 ppid=3835 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.303000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 31 01:20:29.304000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.304000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.304000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.304000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.304000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.304000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.304000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.304000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.304000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.304000 audit: BPF prog-id=161 op=LOAD Oct 31 01:20:29.304000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe4baf8980 a2=98 a3=3 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.304000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.305000 audit: BPF prog-id=161 op=UNLOAD Oct 31 01:20:29.308560 systemd-networkd[1020]: cali28dc2d71eb3: Link UP Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit: BPF prog-id=162 op=LOAD Oct 31 01:20:29.308000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe4baf8770 a2=94 a3=54428f items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.308000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.308000 audit: BPF prog-id=162 op=UNLOAD Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.308000 audit: BPF prog-id=163 op=LOAD Oct 31 01:20:29.308000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe4baf87a0 a2=94 a3=2 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.308000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.308000 audit: BPF prog-id=163 op=UNLOAD Oct 31 01:20:29.321809 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali28dc2d71eb3: link becomes ready Oct 31 01:20:29.321843 systemd-networkd[1020]: cali28dc2d71eb3: Gained carrier Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.325000 audit: BPF prog-id=164 op=LOAD Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3932 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439393632633533613266643331336335616139343431353832306666 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=3932 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439393632633533613266643331336335616139343431353832306666 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit: BPF prog-id=165 op=LOAD Oct 31 01:20:29.326000 audit[3943]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000285f60 items=0 ppid=3932 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439393632633533613266643331336335616139343431353832306666 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.326000 audit: BPF prog-id=166 op=LOAD Oct 31 01:20:29.326000 audit[3943]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000285fa8 items=0 ppid=3932 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439393632633533613266643331336335616139343431353832306666 Oct 31 01:20:29.326000 audit: BPF prog-id=166 op=UNLOAD Oct 31 01:20:29.326000 audit: BPF prog-id=165 op=UNLOAD Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { perfmon } for pid=3943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit[3943]: AVC avc: denied { bpf } for pid=3943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.327000 audit: BPF prog-id=167 op=LOAD Oct 31 01:20:29.327000 audit[3943]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0002e83b8 items=0 ppid=3932 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439393632633533613266643331336335616139343431353832306666 Oct 31 01:20:29.329615 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.014 [INFO][3806] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.036 [INFO][3806] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--n2thp-eth0 csi-node-driver- calico-system a128bb1b-4c94-45fa-831f-8217c16a0f14 1053 0 2025-10-31 01:20:03 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-n2thp eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali28dc2d71eb3 [] [] }} ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Namespace="calico-system" Pod="csi-node-driver-n2thp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n2thp-" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.036 [INFO][3806] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Namespace="calico-system" Pod="csi-node-driver-n2thp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.159 [INFO][3845] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" HandleID="k8s-pod-network.73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.160 [INFO][3845] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" HandleID="k8s-pod-network.73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cdd30), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-n2thp", "timestamp":"2025-10-31 01:20:29.159761259 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.160 [INFO][3845] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.229 [INFO][3845] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.229 [INFO][3845] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.243 [INFO][3845] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" host="localhost" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.260 [INFO][3845] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.271 [INFO][3845] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.275 [INFO][3845] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.279 [INFO][3845] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.279 [INFO][3845] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" host="localhost" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.281 [INFO][3845] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.286 [INFO][3845] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" host="localhost" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.293 [INFO][3845] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" host="localhost" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.293 [INFO][3845] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" host="localhost" Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.293 [INFO][3845] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:29.351668 env[1208]: 2025-10-31 01:20:29.293 [INFO][3845] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" HandleID="k8s-pod-network.73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:29.352327 env[1208]: 2025-10-31 01:20:29.298 [INFO][3806] cni-plugin/k8s.go 418: Populated endpoint ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Namespace="calico-system" Pod="csi-node-driver-n2thp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n2thp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n2thp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a128bb1b-4c94-45fa-831f-8217c16a0f14", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-n2thp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali28dc2d71eb3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:29.352327 env[1208]: 2025-10-31 01:20:29.298 [INFO][3806] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Namespace="calico-system" Pod="csi-node-driver-n2thp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:29.352327 env[1208]: 2025-10-31 01:20:29.298 [INFO][3806] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali28dc2d71eb3 ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Namespace="calico-system" Pod="csi-node-driver-n2thp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:29.352327 env[1208]: 2025-10-31 01:20:29.323 [INFO][3806] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Namespace="calico-system" Pod="csi-node-driver-n2thp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:29.352327 env[1208]: 2025-10-31 01:20:29.324 [INFO][3806] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Namespace="calico-system" Pod="csi-node-driver-n2thp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n2thp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n2thp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a128bb1b-4c94-45fa-831f-8217c16a0f14", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e", Pod:"csi-node-driver-n2thp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali28dc2d71eb3", MAC:"9e:e9:9e:31:39:d5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:29.352327 env[1208]: 2025-10-31 01:20:29.348 [INFO][3806] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e" Namespace="calico-system" Pod="csi-node-driver-n2thp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:29.358000 audit[3902]: AVC avc: denied { getattr } for pid=3902 comm="coredns" path="cgroup:[4026532755]" dev="nsfs" ino=4026532755 scontext=system_u:system_r:svirt_lxc_net_t:s0:c701,c767 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Oct 31 01:20:29.358000 audit[3902]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0001b6b58 a2=c000144038 a3=0 items=0 ppid=3786 pid=3902 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c701,c767 key=(null) Oct 31 01:20:29.358000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Oct 31 01:20:29.360236 env[1208]: time="2025-10-31T01:20:29.359786282Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-77d46fd4d5-5bw5f,Uid:1096d6b0-357c-45fe-aab1-ad0c209c60ed,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185\"" Oct 31 01:20:29.368852 env[1208]: time="2025-10-31T01:20:29.368785558Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:29.369061 env[1208]: time="2025-10-31T01:20:29.369035584Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:29.369178 env[1208]: time="2025-10-31T01:20:29.369152775Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:29.369442 env[1208]: time="2025-10-31T01:20:29.369406639Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e pid=3991 runtime=io.containerd.runc.v2 Oct 31 01:20:29.380897 systemd[1]: Started cri-containerd-73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e.scope. Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.394000 audit: BPF prog-id=168 op=LOAD Oct 31 01:20:29.396156 env[1208]: time="2025-10-31T01:20:29.394919542Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:29.396433 env[1208]: time="2025-10-31T01:20:29.396380128Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 01:20:29.396695 kubelet[1989]: E1031 01:20:29.396647 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:20:29.396965 kubelet[1989]: E1031 01:20:29.396709 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:20:29.397347 kubelet[1989]: E1031 01:20:29.396979 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ccmp2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-77d46fd4d5-d7tbw_calico-apiserver(b3fede59-787e-43f4-aace-2a04c63127ad): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:29.397788 env[1208]: time="2025-10-31T01:20:29.397743091Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3991 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733323137616138343330623933303166653930326632363636616366 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3991 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733323137616138343330623933303166653930326632363636616366 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit: BPF prog-id=169 op=LOAD Oct 31 01:20:29.397000 audit[4002]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c00029e750 items=0 ppid=3991 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733323137616138343330623933303166653930326632363636616366 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit: BPF prog-id=170 op=LOAD Oct 31 01:20:29.397000 audit[4002]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c00029e798 items=0 ppid=3991 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733323137616138343330623933303166653930326632363636616366 Oct 31 01:20:29.397000 audit: BPF prog-id=170 op=UNLOAD Oct 31 01:20:29.397000 audit: BPF prog-id=169 op=UNLOAD Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { perfmon } for pid=4002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.397000 audit: BPF prog-id=171 op=LOAD Oct 31 01:20:29.397000 audit[4002]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c00029eba8 items=0 ppid=3991 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733323137616138343330623933303166653930326632363636616366 Oct 31 01:20:29.400232 kubelet[1989]: E1031 01:20:29.399065 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" podUID="b3fede59-787e-43f4-aace-2a04c63127ad" Oct 31 01:20:29.399621 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 01:20:29.418324 env[1208]: time="2025-10-31T01:20:29.418270998Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n2thp,Uid:a128bb1b-4c94-45fa-831f-8217c16a0f14,Namespace:calico-system,Attempt:1,} returns sandbox id \"73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e\"" Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit: BPF prog-id=172 op=LOAD Oct 31 01:20:29.464000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe4baf8660 a2=94 a3=1 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.464000 audit: BPF prog-id=172 op=UNLOAD Oct 31 01:20:29.464000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.464000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe4baf8730 a2=50 a3=7ffe4baf8810 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.464000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.473000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.473000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4baf8670 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.473000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4baf86a0 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4baf85b0 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4baf86c0 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4baf86a0 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4baf8690 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4baf86c0 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4baf86a0 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4baf86c0 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4baf8690 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4baf8700 a2=28 a3=0 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe4baf84b0 a2=50 a3=1 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit: BPF prog-id=173 op=LOAD Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe4baf84b0 a2=94 a3=5 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit: BPF prog-id=173 op=UNLOAD Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe4baf8560 a2=50 a3=1 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.474000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.474000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe4baf8680 a2=4 a3=38 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.474000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { confidentiality } for pid=3963 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 01:20:29.475000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe4baf86d0 a2=94 a3=6 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.475000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { confidentiality } for pid=3963 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 01:20:29.475000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe4baf7e80 a2=94 a3=88 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.475000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { perfmon } for pid=3963 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { bpf } for pid=3963 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.475000 audit[3963]: AVC avc: denied { confidentiality } for pid=3963 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 01:20:29.475000 audit[3963]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe4baf7e80 a2=94 a3=88 items=0 ppid=3835 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.475000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit: BPF prog-id=174 op=LOAD Oct 31 01:20:29.483000 audit[4029]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff54d85a50 a2=98 a3=1999999999999999 items=0 ppid=3835 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.483000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 31 01:20:29.483000 audit: BPF prog-id=174 op=UNLOAD Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit: BPF prog-id=175 op=LOAD Oct 31 01:20:29.483000 audit[4029]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff54d85930 a2=94 a3=ffff items=0 ppid=3835 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.483000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 31 01:20:29.483000 audit: BPF prog-id=175 op=UNLOAD Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.483000 audit: BPF prog-id=176 op=LOAD Oct 31 01:20:29.483000 audit[4029]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff54d85970 a2=94 a3=7fff54d85b50 items=0 ppid=3835 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.483000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 31 01:20:29.484000 audit: BPF prog-id=176 op=UNLOAD Oct 31 01:20:29.505097 systemd[1]: run-netns-cni\x2d4c8a7925\x2d73b3\x2d67aa\x2df9bb\x2d289fb4a72a18.mount: Deactivated successfully. Oct 31 01:20:29.505231 systemd[1]: run-netns-cni\x2d073b0cb9\x2d56b8\x2de500\x2da95a\x2d3ba465de7c9c.mount: Deactivated successfully. Oct 31 01:20:29.540945 systemd-networkd[1020]: vxlan.calico: Link UP Oct 31 01:20:29.540955 systemd-networkd[1020]: vxlan.calico: Gained carrier Oct 31 01:20:29.565000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.565000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.565000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.565000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.565000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.565000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.565000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.565000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.565000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.565000 audit: BPF prog-id=177 op=LOAD Oct 31 01:20:29.565000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf790afa0 a2=98 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.565000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit: BPF prog-id=177 op=UNLOAD Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit: BPF prog-id=178 op=LOAD Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf790adb0 a2=94 a3=54428f items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit: BPF prog-id=178 op=UNLOAD Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit: BPF prog-id=179 op=LOAD Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcf790ade0 a2=94 a3=2 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit: BPF prog-id=179 op=UNLOAD Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcf790acb0 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcf790ace0 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcf790abf0 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcf790ad00 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcf790ace0 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcf790acd0 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcf790ad00 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcf790ace0 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcf790ad00 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcf790acd0 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcf790ad40 a2=28 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.566000 audit: BPF prog-id=180 op=LOAD Oct 31 01:20:29.566000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcf790abb0 a2=94 a3=0 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.566000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.567000 audit: BPF prog-id=180 op=UNLOAD Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffcf790aba0 a2=50 a3=2800 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.567000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffcf790aba0 a2=50 a3=2800 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.567000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit: BPF prog-id=181 op=LOAD Oct 31 01:20:29.567000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcf790a3c0 a2=94 a3=2 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.567000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.567000 audit: BPF prog-id=181 op=UNLOAD Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.567000 audit: BPF prog-id=182 op=LOAD Oct 31 01:20:29.567000 audit[4053]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcf790a4c0 a2=94 a3=30 items=0 ppid=3835 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.567000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 01:20:29.574000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.574000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.574000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.574000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.574000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.574000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.574000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.574000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.574000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.574000 audit: BPF prog-id=183 op=LOAD Oct 31 01:20:29.574000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff43c33c80 a2=98 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.574000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.575000 audit: BPF prog-id=183 op=UNLOAD Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit: BPF prog-id=184 op=LOAD Oct 31 01:20:29.575000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff43c33a70 a2=94 a3=54428f items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.575000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.575000 audit: BPF prog-id=184 op=UNLOAD Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.575000 audit: BPF prog-id=185 op=LOAD Oct 31 01:20:29.575000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff43c33aa0 a2=94 a3=2 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.575000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.575000 audit: BPF prog-id=185 op=UNLOAD Oct 31 01:20:29.609209 env[1208]: time="2025-10-31T01:20:29.609141516Z" level=info msg="StopPodSandbox for \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\"" Oct 31 01:20:29.696000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.696000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.696000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.696000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.696000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.696000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.696000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.696000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.696000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.696000 audit: BPF prog-id=186 op=LOAD Oct 31 01:20:29.696000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff43c33960 a2=94 a3=1 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.696000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.697000 audit: BPF prog-id=186 op=UNLOAD Oct 31 01:20:29.697000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.697000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff43c33a30 a2=50 a3=7fff43c33b10 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.697000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.706000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.669 [INFO][4074] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.671 [INFO][4074] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" iface="eth0" netns="/var/run/netns/cni-ead49081-64fc-30c6-65ee-72628477f071" Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.672 [INFO][4074] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" iface="eth0" netns="/var/run/netns/cni-ead49081-64fc-30c6-65ee-72628477f071" Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.672 [INFO][4074] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" iface="eth0" netns="/var/run/netns/cni-ead49081-64fc-30c6-65ee-72628477f071" Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.672 [INFO][4074] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.672 [INFO][4074] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.694 [INFO][4084] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" HandleID="k8s-pod-network.e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.695 [INFO][4084] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.695 [INFO][4084] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.701 [WARNING][4084] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" HandleID="k8s-pod-network.e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.701 [INFO][4084] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" HandleID="k8s-pod-network.e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.703 [INFO][4084] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:29.707035 env[1208]: 2025-10-31 01:20:29.705 [INFO][4074] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:29.707414 env[1208]: time="2025-10-31T01:20:29.707230398Z" level=info msg="TearDown network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\" successfully" Oct 31 01:20:29.707414 env[1208]: time="2025-10-31T01:20:29.707265197Z" level=info msg="StopPodSandbox for \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\" returns successfully" Oct 31 01:20:29.706000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff43c33970 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.706000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.706000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.706000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff43c339a0 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.706000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.707000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.707000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff43c338b0 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.707000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.707000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.707000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff43c339c0 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.707000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.707000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.707000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff43c339a0 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.707000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.708000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.708000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff43c33990 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.708000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.708000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.708000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff43c339c0 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.708000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.708000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.708000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff43c339a0 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.708000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.708000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.708000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff43c339c0 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.708000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.709941 systemd[1]: run-netns-cni\x2dead49081\x2d64fc\x2d30c6\x2d65ee\x2d72628477f071.mount: Deactivated successfully. Oct 31 01:20:29.709000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710497 env[1208]: time="2025-10-31T01:20:29.710176690Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-bc87q,Uid:ebe1f224-5028-4feb-8a17-10f3e8933d4e,Namespace:calico-system,Attempt:1,}" Oct 31 01:20:29.709000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff43c33990 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.709000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff43c33a00 a2=28 a3=0 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff43c337b0 a2=50 a3=1 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit: BPF prog-id=187 op=LOAD Oct 31 01:20:29.710000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff43c337b0 a2=94 a3=5 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.710000 audit: BPF prog-id=187 op=UNLOAD Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff43c33860 a2=50 a3=1 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff43c33980 a2=4 a3=38 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.710000 audit[4057]: AVC avc: denied { confidentiality } for pid=4057 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 01:20:29.710000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff43c339d0 a2=94 a3=6 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.710000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { confidentiality } for pid=4057 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 01:20:29.711000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff43c33180 a2=94 a3=88 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.711000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { perfmon } for pid=4057 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { confidentiality } for pid=4057 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 01:20:29.711000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff43c33180 a2=94 a3=88 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.711000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff43c34bb0 a2=10 a3=208 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.711000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff43c34a50 a2=10 a3=3 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.711000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff43c349f0 a2=10 a3=3 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.711000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.711000 audit[4057]: AVC avc: denied { bpf } for pid=4057 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:29.711000 audit[4057]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff43c349f0 a2=10 a3=7 items=0 ppid=3835 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.711000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 01:20:29.718000 audit: BPF prog-id=182 op=UNLOAD Oct 31 01:20:29.758528 env[1208]: time="2025-10-31T01:20:29.758449175Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:29.794362 kubelet[1989]: E1031 01:20:29.793157 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:29.797950 kubelet[1989]: E1031 01:20:29.797908 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" podUID="b3fede59-787e-43f4-aace-2a04c63127ad" Oct 31 01:20:29.805000 audit[4131]: NETFILTER_CFG table=mangle:105 family=2 entries=16 op=nft_register_chain pid=4131 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 01:20:29.805000 audit[4131]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffc0933f5d0 a2=0 a3=7ffc0933f5bc items=0 ppid=3835 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.805000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 01:20:29.811000 audit[4129]: NETFILTER_CFG table=nat:106 family=2 entries=15 op=nft_register_chain pid=4129 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 01:20:29.811000 audit[4129]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffdab348c80 a2=0 a3=7ffdab348c6c items=0 ppid=3835 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.811000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 01:20:29.815000 audit[4130]: NETFILTER_CFG table=raw:107 family=2 entries=21 op=nft_register_chain pid=4130 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 01:20:29.815000 audit[4130]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffce0090bf0 a2=0 a3=7ffce0090bdc items=0 ppid=3835 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.815000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 01:20:29.821000 audit[4134]: NETFILTER_CFG table=filter:108 family=2 entries=227 op=nft_register_chain pid=4134 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 01:20:29.821000 audit[4134]: SYSCALL arch=c000003e syscall=46 success=yes exit=133740 a0=3 a1=7ffe6b392a10 a2=0 a3=7ffe6b3929fc items=0 ppid=3835 pid=4134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:29.821000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 01:20:29.859172 env[1208]: time="2025-10-31T01:20:29.859087392Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 31 01:20:29.859452 kubelet[1989]: E1031 01:20:29.859397 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 01:20:29.859544 kubelet[1989]: E1031 01:20:29.859459 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 01:20:29.859901 env[1208]: time="2025-10-31T01:20:29.859856577Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 01:20:29.860083 kubelet[1989]: E1031 01:20:29.859831 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-4fcxz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7df6677f99-4629b_calico-system(1507a89d-ba39-4386-b53c-44b9ad26c13e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:29.861387 kubelet[1989]: E1031 01:20:29.861334 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7df6677f99-4629b" podUID="1507a89d-ba39-4386-b53c-44b9ad26c13e" Oct 31 01:20:30.002920 kubelet[1989]: I1031 01:20:30.002842 1989 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-lcq29" podStartSLOduration=40.002824153 podStartE2EDuration="40.002824153s" podCreationTimestamp="2025-10-31 01:19:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 01:20:30.002049217 +0000 UTC m=+45.499135453" watchObservedRunningTime="2025-10-31 01:20:30.002824153 +0000 UTC m=+45.499910389" Oct 31 01:20:30.031000 audit[4151]: NETFILTER_CFG table=filter:109 family=2 entries=20 op=nft_register_rule pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:30.031000 audit[4151]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcd2982eb0 a2=0 a3=7ffcd2982e9c items=0 ppid=2102 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.031000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:30.037000 audit[4151]: NETFILTER_CFG table=nat:110 family=2 entries=14 op=nft_register_rule pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:30.037000 audit[4151]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffcd2982eb0 a2=0 a3=0 items=0 ppid=2102 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.037000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:30.070000 audit[4154]: NETFILTER_CFG table=filter:111 family=2 entries=17 op=nft_register_rule pid=4154 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:30.070000 audit[4154]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffddff35980 a2=0 a3=7ffddff3596c items=0 ppid=2102 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.070000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:30.076000 audit[4154]: NETFILTER_CFG table=nat:112 family=2 entries=35 op=nft_register_chain pid=4154 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:30.076000 audit[4154]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffddff35980 a2=0 a3=7ffddff3596c items=0 ppid=2102 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.076000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:30.103793 systemd-networkd[1020]: calic97932f0bb4: Link UP Oct 31 01:20:30.106954 systemd-networkd[1020]: calic97932f0bb4: Gained carrier Oct 31 01:20:30.107818 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic97932f0bb4: link becomes ready Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.002 [INFO][4095] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--666569f655--bc87q-eth0 goldmane-666569f655- calico-system ebe1f224-5028-4feb-8a17-10f3e8933d4e 1080 0 2025-10-31 01:20:00 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-666569f655-bc87q eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calic97932f0bb4 [] [] }} ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Namespace="calico-system" Pod="goldmane-666569f655-bc87q" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--bc87q-" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.002 [INFO][4095] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Namespace="calico-system" Pod="goldmane-666569f655-bc87q" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.045 [INFO][4144] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" HandleID="k8s-pod-network.daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.045 [INFO][4144] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" HandleID="k8s-pod-network.daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00043cf00), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-666569f655-bc87q", "timestamp":"2025-10-31 01:20:30.04523942 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.045 [INFO][4144] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.045 [INFO][4144] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.045 [INFO][4144] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.064 [INFO][4144] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" host="localhost" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.070 [INFO][4144] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.075 [INFO][4144] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.077 [INFO][4144] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.080 [INFO][4144] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.080 [INFO][4144] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" host="localhost" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.082 [INFO][4144] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.089 [INFO][4144] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" host="localhost" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.098 [INFO][4144] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" host="localhost" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.098 [INFO][4144] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" host="localhost" Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.098 [INFO][4144] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:30.119056 env[1208]: 2025-10-31 01:20:30.098 [INFO][4144] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" HandleID="k8s-pod-network.daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:30.120227 env[1208]: 2025-10-31 01:20:30.100 [INFO][4095] cni-plugin/k8s.go 418: Populated endpoint ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Namespace="calico-system" Pod="goldmane-666569f655-bc87q" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--bc87q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--bc87q-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"ebe1f224-5028-4feb-8a17-10f3e8933d4e", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-666569f655-bc87q", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic97932f0bb4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:30.120227 env[1208]: 2025-10-31 01:20:30.100 [INFO][4095] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Namespace="calico-system" Pod="goldmane-666569f655-bc87q" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:30.120227 env[1208]: 2025-10-31 01:20:30.100 [INFO][4095] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic97932f0bb4 ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Namespace="calico-system" Pod="goldmane-666569f655-bc87q" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:30.120227 env[1208]: 2025-10-31 01:20:30.107 [INFO][4095] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Namespace="calico-system" Pod="goldmane-666569f655-bc87q" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:30.120227 env[1208]: 2025-10-31 01:20:30.108 [INFO][4095] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Namespace="calico-system" Pod="goldmane-666569f655-bc87q" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--bc87q-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--bc87q-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"ebe1f224-5028-4feb-8a17-10f3e8933d4e", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a", Pod:"goldmane-666569f655-bc87q", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic97932f0bb4", MAC:"96:ff:b1:90:8b:6c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:30.120227 env[1208]: 2025-10-31 01:20:30.116 [INFO][4095] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a" Namespace="calico-system" Pod="goldmane-666569f655-bc87q" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:30.137000 audit[4166]: NETFILTER_CFG table=filter:113 family=2 entries=60 op=nft_register_chain pid=4166 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 01:20:30.137000 audit[4166]: SYSCALL arch=c000003e syscall=46 success=yes exit=29932 a0=3 a1=7fff401406d0 a2=0 a3=7fff401406bc items=0 ppid=3835 pid=4166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.137000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 01:20:30.141635 env[1208]: time="2025-10-31T01:20:30.141543310Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:30.141875 env[1208]: time="2025-10-31T01:20:30.141814775Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:30.142093 env[1208]: time="2025-10-31T01:20:30.142022006Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:30.142519 env[1208]: time="2025-10-31T01:20:30.142471620Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a pid=4172 runtime=io.containerd.runc.v2 Oct 31 01:20:30.142862 systemd-networkd[1020]: cali567bad985dd: Gained IPv6LL Oct 31 01:20:30.160590 systemd[1]: Started cri-containerd-daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a.scope. Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit: BPF prog-id=188 op=LOAD Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4172 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663166636331303630306334393937633761626635643962303234 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4172 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663166636331303630306334393937633761626635643962303234 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit: BPF prog-id=189 op=LOAD Oct 31 01:20:30.177000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0003045c0 items=0 ppid=4172 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663166636331303630306334393937633761626635643962303234 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit: BPF prog-id=190 op=LOAD Oct 31 01:20:30.177000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000304608 items=0 ppid=4172 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663166636331303630306334393937633761626635643962303234 Oct 31 01:20:30.177000 audit: BPF prog-id=190 op=UNLOAD Oct 31 01:20:30.177000 audit: BPF prog-id=189 op=UNLOAD Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { perfmon } for pid=4185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit[4185]: AVC avc: denied { bpf } for pid=4185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.177000 audit: BPF prog-id=191 op=LOAD Oct 31 01:20:30.177000 audit[4185]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000304a18 items=0 ppid=4172 pid=4185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461663166636331303630306334393937633761626635643962303234 Oct 31 01:20:30.181462 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 01:20:30.213600 env[1208]: time="2025-10-31T01:20:30.213547507Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-bc87q,Uid:ebe1f224-5028-4feb-8a17-10f3e8933d4e,Namespace:calico-system,Attempt:1,} returns sandbox id \"daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a\"" Oct 31 01:20:30.268948 systemd-networkd[1020]: cali8303efac7b8: Gained IPv6LL Oct 31 01:20:30.292207 env[1208]: time="2025-10-31T01:20:30.292049113Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:30.293746 env[1208]: time="2025-10-31T01:20:30.293677996Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 01:20:30.294991 kubelet[1989]: E1031 01:20:30.294013 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:20:30.294991 kubelet[1989]: E1031 01:20:30.294083 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:20:30.294991 kubelet[1989]: E1031 01:20:30.294641 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sjqpl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-77d46fd4d5-5bw5f_calico-apiserver(1096d6b0-357c-45fe-aab1-ad0c209c60ed): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:30.295371 env[1208]: time="2025-10-31T01:20:30.294583445Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 31 01:20:30.295967 kubelet[1989]: E1031 01:20:30.295917 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" podUID="1096d6b0-357c-45fe-aab1-ad0c209c60ed" Oct 31 01:20:30.525950 systemd-networkd[1020]: calia0ead0e36bc: Gained IPv6LL Oct 31 01:20:30.609295 env[1208]: time="2025-10-31T01:20:30.608869029Z" level=info msg="StopPodSandbox for \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\"" Oct 31 01:20:30.609295 env[1208]: time="2025-10-31T01:20:30.608869049Z" level=info msg="StopPodSandbox for \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\"" Oct 31 01:20:30.666170 env[1208]: time="2025-10-31T01:20:30.666104948Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:30.709108 env[1208]: time="2025-10-31T01:20:30.709002947Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 31 01:20:30.709406 kubelet[1989]: E1031 01:20:30.709335 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 01:20:30.709406 kubelet[1989]: E1031 01:20:30.709392 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 01:20:30.709857 kubelet[1989]: E1031 01:20:30.709749 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cmktl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-n2thp_calico-system(a128bb1b-4c94-45fa-831f-8217c16a0f14): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:30.710646 env[1208]: time="2025-10-31T01:20:30.710596086Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 31 01:20:30.716988 systemd-networkd[1020]: cali6be3698b2c2: Gained IPv6LL Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.732 [INFO][4230] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.732 [INFO][4230] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" iface="eth0" netns="/var/run/netns/cni-a4e1baa0-d2e4-4261-5a40-7dff4660ce17" Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.732 [INFO][4230] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" iface="eth0" netns="/var/run/netns/cni-a4e1baa0-d2e4-4261-5a40-7dff4660ce17" Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.733 [INFO][4230] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" iface="eth0" netns="/var/run/netns/cni-a4e1baa0-d2e4-4261-5a40-7dff4660ce17" Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.733 [INFO][4230] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.733 [INFO][4230] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.761 [INFO][4248] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" HandleID="k8s-pod-network.b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.762 [INFO][4248] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.762 [INFO][4248] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.769 [WARNING][4248] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" HandleID="k8s-pod-network.b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.769 [INFO][4248] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" HandleID="k8s-pod-network.b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.771 [INFO][4248] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:30.777060 env[1208]: 2025-10-31 01:20:30.774 [INFO][4230] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:30.780162 env[1208]: time="2025-10-31T01:20:30.777286972Z" level=info msg="TearDown network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\" successfully" Oct 31 01:20:30.780162 env[1208]: time="2025-10-31T01:20:30.777348102Z" level=info msg="StopPodSandbox for \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\" returns successfully" Oct 31 01:20:30.780162 env[1208]: time="2025-10-31T01:20:30.778334135Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gfplj,Uid:f8b91bc0-a415-4d83-bda1-171bfb939454,Namespace:kube-system,Attempt:1,}" Oct 31 01:20:30.780092 systemd[1]: run-netns-cni\x2da4e1baa0\x2dd2e4\x2d4261\x2d5a40\x2d7dff4660ce17.mount: Deactivated successfully. Oct 31 01:20:30.780305 kubelet[1989]: E1031 01:20:30.777809 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.738 [INFO][4229] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.738 [INFO][4229] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" iface="eth0" netns="/var/run/netns/cni-253fd479-7ff1-9d76-1a35-e312cf76b846" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.739 [INFO][4229] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" iface="eth0" netns="/var/run/netns/cni-253fd479-7ff1-9d76-1a35-e312cf76b846" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.739 [INFO][4229] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" iface="eth0" netns="/var/run/netns/cni-253fd479-7ff1-9d76-1a35-e312cf76b846" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.739 [INFO][4229] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.739 [INFO][4229] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.763 [INFO][4254] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" HandleID="k8s-pod-network.27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.763 [INFO][4254] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.771 [INFO][4254] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.781 [WARNING][4254] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" HandleID="k8s-pod-network.27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.781 [INFO][4254] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" HandleID="k8s-pod-network.27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.784 [INFO][4254] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:30.788858 env[1208]: 2025-10-31 01:20:30.787 [INFO][4229] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:30.789244 env[1208]: time="2025-10-31T01:20:30.789030001Z" level=info msg="TearDown network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\" successfully" Oct 31 01:20:30.789244 env[1208]: time="2025-10-31T01:20:30.789070624Z" level=info msg="StopPodSandbox for \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\" returns successfully" Oct 31 01:20:30.789990 env[1208]: time="2025-10-31T01:20:30.789941160Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d4f95648-mnwp9,Uid:6254973b-926c-41f6-bffb-e73e5b8fa8f8,Namespace:calico-system,Attempt:1,}" Oct 31 01:20:30.791560 systemd[1]: run-netns-cni\x2d253fd479\x2d7ff1\x2d9d76\x2d1a35\x2de312cf76b846.mount: Deactivated successfully. Oct 31 01:20:30.803255 kubelet[1989]: E1031 01:20:30.802568 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:30.806064 kubelet[1989]: E1031 01:20:30.805917 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" podUID="b3fede59-787e-43f4-aace-2a04c63127ad" Oct 31 01:20:30.807303 kubelet[1989]: E1031 01:20:30.807245 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7df6677f99-4629b" podUID="1507a89d-ba39-4386-b53c-44b9ad26c13e" Oct 31 01:20:30.809494 kubelet[1989]: E1031 01:20:30.807774 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" podUID="1096d6b0-357c-45fe-aab1-ad0c209c60ed" Oct 31 01:20:30.931841 systemd-networkd[1020]: calib1dc148e07f: Link UP Oct 31 01:20:30.935875 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 31 01:20:30.936604 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib1dc148e07f: link becomes ready Oct 31 01:20:30.936298 systemd-networkd[1020]: calib1dc148e07f: Gained carrier Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.860 [INFO][4271] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0 calico-kube-controllers-69d4f95648- calico-system 6254973b-926c-41f6-bffb-e73e5b8fa8f8 1117 0 2025-10-31 01:20:03 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:69d4f95648 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-69d4f95648-mnwp9 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calib1dc148e07f [] [] }} ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Namespace="calico-system" Pod="calico-kube-controllers-69d4f95648-mnwp9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.860 [INFO][4271] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Namespace="calico-system" Pod="calico-kube-controllers-69d4f95648-mnwp9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.889 [INFO][4291] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" HandleID="k8s-pod-network.5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.889 [INFO][4291] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" HandleID="k8s-pod-network.5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000138da0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-69d4f95648-mnwp9", "timestamp":"2025-10-31 01:20:30.889013181 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.889 [INFO][4291] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.889 [INFO][4291] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.889 [INFO][4291] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.896 [INFO][4291] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" host="localhost" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.900 [INFO][4291] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.905 [INFO][4291] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.910 [INFO][4291] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.912 [INFO][4291] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.912 [INFO][4291] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" host="localhost" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.913 [INFO][4291] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0 Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.917 [INFO][4291] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" host="localhost" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.924 [INFO][4291] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" host="localhost" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.924 [INFO][4291] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" host="localhost" Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.924 [INFO][4291] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:30.953825 env[1208]: 2025-10-31 01:20:30.924 [INFO][4291] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" HandleID="k8s-pod-network.5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.954642 env[1208]: 2025-10-31 01:20:30.927 [INFO][4271] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Namespace="calico-system" Pod="calico-kube-controllers-69d4f95648-mnwp9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0", GenerateName:"calico-kube-controllers-69d4f95648-", Namespace:"calico-system", SelfLink:"", UID:"6254973b-926c-41f6-bffb-e73e5b8fa8f8", ResourceVersion:"1117", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d4f95648", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-69d4f95648-mnwp9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib1dc148e07f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:30.954642 env[1208]: 2025-10-31 01:20:30.928 [INFO][4271] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Namespace="calico-system" Pod="calico-kube-controllers-69d4f95648-mnwp9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.954642 env[1208]: 2025-10-31 01:20:30.928 [INFO][4271] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib1dc148e07f ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Namespace="calico-system" Pod="calico-kube-controllers-69d4f95648-mnwp9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.954642 env[1208]: 2025-10-31 01:20:30.938 [INFO][4271] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Namespace="calico-system" Pod="calico-kube-controllers-69d4f95648-mnwp9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.954642 env[1208]: 2025-10-31 01:20:30.939 [INFO][4271] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Namespace="calico-system" Pod="calico-kube-controllers-69d4f95648-mnwp9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0", GenerateName:"calico-kube-controllers-69d4f95648-", Namespace:"calico-system", SelfLink:"", UID:"6254973b-926c-41f6-bffb-e73e5b8fa8f8", ResourceVersion:"1117", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d4f95648", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0", Pod:"calico-kube-controllers-69d4f95648-mnwp9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib1dc148e07f", MAC:"66:a3:49:61:94:8f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:30.954642 env[1208]: 2025-10-31 01:20:30.951 [INFO][4271] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0" Namespace="calico-system" Pod="calico-kube-controllers-69d4f95648-mnwp9" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:30.968667 env[1208]: time="2025-10-31T01:20:30.967690511Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:30.968667 env[1208]: time="2025-10-31T01:20:30.967751420Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:30.968667 env[1208]: time="2025-10-31T01:20:30.967783517Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:30.968667 env[1208]: time="2025-10-31T01:20:30.968069509Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0 pid=4324 runtime=io.containerd.runc.v2 Oct 31 01:20:30.967000 audit[4329]: NETFILTER_CFG table=filter:114 family=2 entries=56 op=nft_register_chain pid=4329 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 01:20:30.967000 audit[4329]: SYSCALL arch=c000003e syscall=46 success=yes exit=25516 a0=3 a1=7ffee8f6ea00 a2=0 a3=7ffee8f6e9ec items=0 ppid=3835 pid=4329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.967000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 01:20:30.982864 systemd[1]: Started cri-containerd-5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0.scope. Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit: BPF prog-id=192 op=LOAD Oct 31 01:20:30.999000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4324 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562373464386463323562353033643866653665313831313661666232 Oct 31 01:20:30.999000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:30.999000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4324 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:30.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562373464386463323562353033643866653665313831313661666232 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit: BPF prog-id=193 op=LOAD Oct 31 01:20:31.000000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00028ee70 items=0 ppid=4324 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562373464386463323562353033643866653665313831313661666232 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit: BPF prog-id=194 op=LOAD Oct 31 01:20:31.000000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00028eeb8 items=0 ppid=4324 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562373464386463323562353033643866653665313831313661666232 Oct 31 01:20:31.000000 audit: BPF prog-id=194 op=UNLOAD Oct 31 01:20:31.000000 audit: BPF prog-id=193 op=UNLOAD Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { perfmon } for pid=4335 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit[4335]: AVC avc: denied { bpf } for pid=4335 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.000000 audit: BPF prog-id=195 op=LOAD Oct 31 01:20:31.000000 audit[4335]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00028f2c8 items=0 ppid=4324 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562373464386463323562353033643866653665313831313661666232 Oct 31 01:20:31.002300 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 01:20:31.037238 systemd-networkd[1020]: cali09c2b9127b1: Link UP Oct 31 01:20:31.040288 systemd-networkd[1020]: cali28dc2d71eb3: Gained IPv6LL Oct 31 01:20:31.042970 systemd-networkd[1020]: cali09c2b9127b1: Gained carrier Oct 31 01:20:31.043818 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali09c2b9127b1: link becomes ready Oct 31 01:20:31.050811 env[1208]: time="2025-10-31T01:20:31.050744257Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69d4f95648-mnwp9,Uid:6254973b-926c-41f6-bffb-e73e5b8fa8f8,Namespace:calico-system,Attempt:1,} returns sandbox id \"5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0\"" Oct 31 01:20:31.052249 env[1208]: time="2025-10-31T01:20:31.052171006Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:31.054647 env[1208]: time="2025-10-31T01:20:31.054550515Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 31 01:20:31.055028 kubelet[1989]: E1031 01:20:31.054986 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 01:20:31.055111 kubelet[1989]: E1031 01:20:31.055028 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 01:20:31.055212 kubelet[1989]: E1031 01:20:31.055170 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2t8cj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-bc87q_calico-system(ebe1f224-5028-4feb-8a17-10f3e8933d4e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:31.055392 env[1208]: time="2025-10-31T01:20:31.055362421Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:30.871 [INFO][4263] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--gfplj-eth0 coredns-674b8bbfcf- kube-system f8b91bc0-a415-4d83-bda1-171bfb939454 1114 0 2025-10-31 01:19:50 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-gfplj eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali09c2b9127b1 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-gfplj" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--gfplj-" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:30.871 [INFO][4263] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-gfplj" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:30.906 [INFO][4297] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" HandleID="k8s-pod-network.4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:30.906 [INFO][4297] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" HandleID="k8s-pod-network.4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002e6fd0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-gfplj", "timestamp":"2025-10-31 01:20:30.906458756 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:30.906 [INFO][4297] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:30.924 [INFO][4297] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:30.924 [INFO][4297] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:30.997 [INFO][4297] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" host="localhost" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.003 [INFO][4297] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.011 [INFO][4297] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.013 [INFO][4297] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.015 [INFO][4297] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.015 [INFO][4297] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" host="localhost" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.016 [INFO][4297] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0 Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.020 [INFO][4297] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" host="localhost" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.030 [INFO][4297] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" host="localhost" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.030 [INFO][4297] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" host="localhost" Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.030 [INFO][4297] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:31.056665 env[1208]: 2025-10-31 01:20:31.030 [INFO][4297] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" HandleID="k8s-pod-network.4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:31.057368 env[1208]: 2025-10-31 01:20:31.035 [INFO][4263] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-gfplj" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--gfplj-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f8b91bc0-a415-4d83-bda1-171bfb939454", ResourceVersion:"1114", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-gfplj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali09c2b9127b1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:31.057368 env[1208]: 2025-10-31 01:20:31.035 [INFO][4263] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-gfplj" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:31.057368 env[1208]: 2025-10-31 01:20:31.035 [INFO][4263] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali09c2b9127b1 ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-gfplj" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:31.057368 env[1208]: 2025-10-31 01:20:31.037 [INFO][4263] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-gfplj" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:31.057368 env[1208]: 2025-10-31 01:20:31.037 [INFO][4263] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-gfplj" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--gfplj-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f8b91bc0-a415-4d83-bda1-171bfb939454", ResourceVersion:"1114", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0", Pod:"coredns-674b8bbfcf-gfplj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali09c2b9127b1", MAC:"3a:f3:5e:c7:e9:6a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:31.057368 env[1208]: 2025-10-31 01:20:31.052 [INFO][4263] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-gfplj" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:31.057648 kubelet[1989]: E1031 01:20:31.057299 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-bc87q" podUID="ebe1f224-5028-4feb-8a17-10f3e8933d4e" Oct 31 01:20:31.068568 env[1208]: time="2025-10-31T01:20:31.068467939Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 01:20:31.068568 env[1208]: time="2025-10-31T01:20:31.068516567Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 01:20:31.068816 env[1208]: time="2025-10-31T01:20:31.068556789Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 01:20:31.068816 env[1208]: time="2025-10-31T01:20:31.068676233Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0 pid=4374 runtime=io.containerd.runc.v2 Oct 31 01:20:31.070000 audit[4382]: NETFILTER_CFG table=filter:115 family=2 entries=56 op=nft_register_chain pid=4382 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 01:20:31.070000 audit[4382]: SYSCALL arch=c000003e syscall=46 success=yes exit=25096 a0=3 a1=7ffc6c3934f0 a2=0 a3=7ffc6c3934dc items=0 ppid=3835 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.070000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 01:20:31.080657 systemd[1]: Started cri-containerd-4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0.scope. Oct 31 01:20:31.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit: BPF prog-id=196 op=LOAD Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4374 pid=4386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313835313561326533383564343639323836323732646664363132 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4374 pid=4386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313835313561326533383564343639323836323732646664363132 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit: BPF prog-id=197 op=LOAD Oct 31 01:20:31.091000 audit[4386]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000376a50 items=0 ppid=4374 pid=4386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313835313561326533383564343639323836323732646664363132 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.091000 audit: BPF prog-id=198 op=LOAD Oct 31 01:20:31.091000 audit[4386]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000376a98 items=0 ppid=4374 pid=4386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313835313561326533383564343639323836323732646664363132 Oct 31 01:20:31.092000 audit: BPF prog-id=198 op=UNLOAD Oct 31 01:20:31.092000 audit: BPF prog-id=197 op=UNLOAD Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { perfmon } for pid=4386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit[4386]: AVC avc: denied { bpf } for pid=4386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.092000 audit: BPF prog-id=199 op=LOAD Oct 31 01:20:31.092000 audit[4386]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000376ea8 items=0 ppid=4374 pid=4386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313835313561326533383564343639323836323732646664363132 Oct 31 01:20:31.093605 systemd-resolved[1148]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 01:20:31.099000 audit[4404]: NETFILTER_CFG table=filter:116 family=2 entries=14 op=nft_register_rule pid=4404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:31.099000 audit[4404]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc44071e00 a2=0 a3=7ffc44071dec items=0 ppid=2102 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.099000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:31.107000 audit[4404]: NETFILTER_CFG table=nat:117 family=2 entries=20 op=nft_register_rule pid=4404 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:31.107000 audit[4404]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc44071e00 a2=0 a3=7ffc44071dec items=0 ppid=2102 pid=4404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.107000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:31.117322 env[1208]: time="2025-10-31T01:20:31.117262627Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-gfplj,Uid:f8b91bc0-a415-4d83-bda1-171bfb939454,Namespace:kube-system,Attempt:1,} returns sandbox id \"4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0\"" Oct 31 01:20:31.117891 kubelet[1989]: E1031 01:20:31.117861 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:31.123246 env[1208]: time="2025-10-31T01:20:31.123211338Z" level=info msg="CreateContainer within sandbox \"4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 31 01:20:31.142455 env[1208]: time="2025-10-31T01:20:31.142340883Z" level=info msg="CreateContainer within sandbox \"4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"66f7669a0b56313fa701e16fc352269d3d4daef2147581fc031e1d627d86031a\"" Oct 31 01:20:31.143208 env[1208]: time="2025-10-31T01:20:31.143149373Z" level=info msg="StartContainer for \"66f7669a0b56313fa701e16fc352269d3d4daef2147581fc031e1d627d86031a\"" Oct 31 01:20:31.158805 systemd[1]: Started cri-containerd-66f7669a0b56313fa701e16fc352269d3d4daef2147581fc031e1d627d86031a.scope. Oct 31 01:20:31.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit: BPF prog-id=200 op=LOAD Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4374 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636663736363961306235363331336661373031653136666333353232 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4374 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636663736363961306235363331336661373031653136666333353232 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit: BPF prog-id=201 op=LOAD Oct 31 01:20:31.171000 audit[4419]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000304590 items=0 ppid=4374 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636663736363961306235363331336661373031653136666333353232 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.171000 audit: BPF prog-id=202 op=LOAD Oct 31 01:20:31.171000 audit[4419]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003045d8 items=0 ppid=4374 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636663736363961306235363331336661373031653136666333353232 Oct 31 01:20:31.172000 audit: BPF prog-id=202 op=UNLOAD Oct 31 01:20:31.172000 audit: BPF prog-id=201 op=UNLOAD Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { perfmon } for pid=4419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit[4419]: AVC avc: denied { bpf } for pid=4419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 01:20:31.172000 audit: BPF prog-id=203 op=LOAD Oct 31 01:20:31.172000 audit[4419]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003049e8 items=0 ppid=4374 pid=4419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:31.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636663736363961306235363331336661373031653136666333353232 Oct 31 01:20:31.193425 env[1208]: time="2025-10-31T01:20:31.186628075Z" level=info msg="StartContainer for \"66f7669a0b56313fa701e16fc352269d3d4daef2147581fc031e1d627d86031a\" returns successfully" Oct 31 01:20:31.195000 audit[4430]: AVC avc: denied { getattr } for pid=4430 comm="coredns" path="cgroup:[4026532693]" dev="nsfs" ino=4026532693 scontext=system_u:system_r:svirt_lxc_net_t:s0:c697,c731 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Oct 31 01:20:31.195000 audit[4430]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a810 a2=c000481a38 a3=0 items=0 ppid=4374 pid=4430 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c697,c731 key=(null) Oct 31 01:20:31.195000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Oct 31 01:20:31.356977 systemd-networkd[1020]: vxlan.calico: Gained IPv6LL Oct 31 01:20:31.397377 env[1208]: time="2025-10-31T01:20:31.397305446Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:31.485333 env[1208]: time="2025-10-31T01:20:31.485080336Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 31 01:20:31.485535 kubelet[1989]: E1031 01:20:31.485473 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 01:20:31.485608 kubelet[1989]: E1031 01:20:31.485541 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 01:20:31.485904 kubelet[1989]: E1031 01:20:31.485849 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cmktl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-n2thp_calico-system(a128bb1b-4c94-45fa-831f-8217c16a0f14): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:31.486983 env[1208]: time="2025-10-31T01:20:31.486943669Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 31 01:20:31.487379 kubelet[1989]: E1031 01:20:31.487331 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:31.806467 kubelet[1989]: E1031 01:20:31.806344 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:31.808140 kubelet[1989]: E1031 01:20:31.808095 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:31.808807 kubelet[1989]: E1031 01:20:31.808744 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-bc87q" podUID="ebe1f224-5028-4feb-8a17-10f3e8933d4e" Oct 31 01:20:31.809116 kubelet[1989]: E1031 01:20:31.809068 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:31.871249 systemd-networkd[1020]: calic97932f0bb4: Gained IPv6LL Oct 31 01:20:31.964676 kubelet[1989]: I1031 01:20:31.964591 1989 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-gfplj" podStartSLOduration=41.964571013 podStartE2EDuration="41.964571013s" podCreationTimestamp="2025-10-31 01:19:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 01:20:31.949689478 +0000 UTC m=+47.446775724" watchObservedRunningTime="2025-10-31 01:20:31.964571013 +0000 UTC m=+47.461657249" Oct 31 01:20:32.014992 env[1208]: time="2025-10-31T01:20:32.014901412Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:32.016466 env[1208]: time="2025-10-31T01:20:32.016374282Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 31 01:20:32.016815 kubelet[1989]: E1031 01:20:32.016732 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 01:20:32.016952 kubelet[1989]: E1031 01:20:32.016925 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 01:20:32.017146 kubelet[1989]: E1031 01:20:32.017095 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-848hr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-69d4f95648-mnwp9_calico-system(6254973b-926c-41f6-bffb-e73e5b8fa8f8): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:32.018335 kubelet[1989]: E1031 01:20:32.018296 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" podUID="6254973b-926c-41f6-bffb-e73e5b8fa8f8" Oct 31 01:20:32.122000 audit[4453]: NETFILTER_CFG table=filter:118 family=2 entries=14 op=nft_register_rule pid=4453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:32.122000 audit[4453]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd6e982180 a2=0 a3=7ffd6e98216c items=0 ppid=2102 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:32.122000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:32.131000 audit[4453]: NETFILTER_CFG table=nat:119 family=2 entries=56 op=nft_register_chain pid=4453 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:20:32.131000 audit[4453]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd6e982180 a2=0 a3=7ffd6e98216c items=0 ppid=2102 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:32.131000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:20:32.509873 systemd-networkd[1020]: cali09c2b9127b1: Gained IPv6LL Oct 31 01:20:32.707661 systemd[1]: Started sshd@9-10.0.0.131:22-10.0.0.1:39144.service. Oct 31 01:20:32.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.131:22-10.0.0.1:39144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:32.713797 kernel: kauditd_printk_skb: 1173 callbacks suppressed Oct 31 01:20:32.713869 kernel: audit: type=1130 audit(1761873632.707:1339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.131:22-10.0.0.1:39144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:32.751000 audit[4456]: USER_ACCT pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.752263 sshd[4456]: Accepted publickey for core from 10.0.0.1 port 39144 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:32.759000 audit[4456]: CRED_ACQ pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.760641 sshd[4456]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:32.764463 systemd-logind[1196]: New session 10 of user core. Oct 31 01:20:32.765423 systemd[1]: Started session-10.scope. Oct 31 01:20:32.765823 systemd-networkd[1020]: calib1dc148e07f: Gained IPv6LL Oct 31 01:20:32.768355 kernel: audit: type=1101 audit(1761873632.751:1340): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.768412 kernel: audit: type=1103 audit(1761873632.759:1341): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.773746 kernel: audit: type=1006 audit(1761873632.759:1342): pid=4456 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 31 01:20:32.773819 kernel: audit: type=1300 audit(1761873632.759:1342): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe124eac50 a2=3 a3=0 items=0 ppid=1 pid=4456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:32.759000 audit[4456]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe124eac50 a2=3 a3=0 items=0 ppid=1 pid=4456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:32.759000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:32.782982 kernel: audit: type=1327 audit(1761873632.759:1342): proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:32.783034 kernel: audit: type=1105 audit(1761873632.769:1343): pid=4456 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.769000 audit[4456]: USER_START pid=4456 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.790439 kernel: audit: type=1103 audit(1761873632.771:1344): pid=4458 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.771000 audit[4458]: CRED_ACQ pid=4458 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.810792 kubelet[1989]: E1031 01:20:32.810734 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:32.812954 kubelet[1989]: E1031 01:20:32.812899 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" podUID="6254973b-926c-41f6-bffb-e73e5b8fa8f8" Oct 31 01:20:32.888136 sshd[4456]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:32.888000 audit[4456]: USER_END pid=4456 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.890710 systemd[1]: sshd@9-10.0.0.131:22-10.0.0.1:39144.service: Deactivated successfully. Oct 31 01:20:32.891712 systemd[1]: session-10.scope: Deactivated successfully. Oct 31 01:20:32.894562 systemd-logind[1196]: Session 10 logged out. Waiting for processes to exit. Oct 31 01:20:32.895521 systemd-logind[1196]: Removed session 10. Oct 31 01:20:32.896820 kernel: audit: type=1106 audit(1761873632.888:1345): pid=4456 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.896890 kernel: audit: type=1104 audit(1761873632.888:1346): pid=4456 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.888000 audit[4456]: CRED_DISP pid=4456 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:32.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.131:22-10.0.0.1:39144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:33.812678 kubelet[1989]: E1031 01:20:33.812624 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:37.893039 systemd[1]: Started sshd@10-10.0.0.131:22-10.0.0.1:44216.service. Oct 31 01:20:37.898791 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 01:20:37.898840 kernel: audit: type=1130 audit(1761873637.891:1348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.131:22-10.0.0.1:44216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:37.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.131:22-10.0.0.1:44216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:37.931000 audit[4479]: USER_ACCT pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:37.934052 sshd[4479]: Accepted publickey for core from 10.0.0.1 port 44216 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:37.935136 sshd[4479]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:37.939641 systemd[1]: Started session-11.scope. Oct 31 01:20:37.940064 systemd-logind[1196]: New session 11 of user core. Oct 31 01:20:37.932000 audit[4479]: CRED_ACQ pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:37.946867 kernel: audit: type=1101 audit(1761873637.931:1349): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:37.946932 kernel: audit: type=1103 audit(1761873637.932:1350): pid=4479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:37.946975 kernel: audit: type=1006 audit(1761873637.933:1351): pid=4479 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 31 01:20:37.933000 audit[4479]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff66a24180 a2=3 a3=0 items=0 ppid=1 pid=4479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:37.957837 kernel: audit: type=1300 audit(1761873637.933:1351): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff66a24180 a2=3 a3=0 items=0 ppid=1 pid=4479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:37.957999 kernel: audit: type=1327 audit(1761873637.933:1351): proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:37.933000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:37.960033 kernel: audit: type=1105 audit(1761873637.942:1352): pid=4479 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:37.942000 audit[4479]: USER_START pid=4479 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:37.967998 kernel: audit: type=1103 audit(1761873637.943:1353): pid=4481 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:37.943000 audit[4481]: CRED_ACQ pid=4481 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:38.107255 sshd[4479]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:38.106000 audit[4479]: USER_END pid=4479 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:38.110143 systemd[1]: sshd@10-10.0.0.131:22-10.0.0.1:44216.service: Deactivated successfully. Oct 31 01:20:38.111201 systemd[1]: session-11.scope: Deactivated successfully. Oct 31 01:20:38.117419 systemd-logind[1196]: Session 11 logged out. Waiting for processes to exit. Oct 31 01:20:38.118396 systemd-logind[1196]: Removed session 11. Oct 31 01:20:38.106000 audit[4479]: CRED_DISP pid=4479 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:38.126244 kernel: audit: type=1106 audit(1761873638.106:1354): pid=4479 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:38.126309 kernel: audit: type=1104 audit(1761873638.106:1355): pid=4479 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:38.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.131:22-10.0.0.1:44216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:41.111000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:41.111000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000114540 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:20:41.111000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:20:41.122000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6758 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:41.122000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e811a0 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:20:41.122000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:20:41.296000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6754 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:41.296000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c004e2bbf0 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:20:41.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:20:41.296000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6758 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:41.296000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c004dcb500 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:20:41.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:20:41.296000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6758 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:41.296000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c0064d4060 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:20:41.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:20:41.296000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:41.296000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c0095af0b0 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:20:41.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:20:41.300000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:41.300000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c009a9fba0 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:20:41.300000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:20:41.300000 audit[1857]: AVC avc: denied { watch } for pid=1857 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:41.300000 audit[1857]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c009a9fc20 a2=fc6 a3=0 items=0 ppid=1688 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c420,c612 key=(null) Oct 31 01:20:41.300000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 31 01:20:42.610471 env[1208]: time="2025-10-31T01:20:42.609518509Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 01:20:43.019438 env[1208]: time="2025-10-31T01:20:43.019339419Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:43.020639 env[1208]: time="2025-10-31T01:20:43.020575775Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 01:20:43.021037 kubelet[1989]: E1031 01:20:43.020972 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:20:43.021417 kubelet[1989]: E1031 01:20:43.021051 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:20:43.021417 kubelet[1989]: E1031 01:20:43.021231 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sjqpl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-77d46fd4d5-5bw5f_calico-apiserver(1096d6b0-357c-45fe-aab1-ad0c209c60ed): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:43.022580 kubelet[1989]: E1031 01:20:43.022496 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" podUID="1096d6b0-357c-45fe-aab1-ad0c209c60ed" Oct 31 01:20:43.110104 systemd[1]: Started sshd@11-10.0.0.131:22-10.0.0.1:44222.service. Oct 31 01:20:43.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.131:22-10.0.0.1:44222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:43.112479 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 31 01:20:43.112564 kernel: audit: type=1130 audit(1761873643.109:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.131:22-10.0.0.1:44222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:43.150000 audit[4503]: USER_ACCT pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.151424 sshd[4503]: Accepted publickey for core from 10.0.0.1 port 44222 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:43.158000 audit[4503]: CRED_ACQ pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.159319 sshd[4503]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:43.163122 systemd-logind[1196]: New session 12 of user core. Oct 31 01:20:43.164244 systemd[1]: Started session-12.scope. Oct 31 01:20:43.165822 kernel: audit: type=1101 audit(1761873643.150:1366): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.165890 kernel: audit: type=1103 audit(1761873643.158:1367): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.165918 kernel: audit: type=1006 audit(1761873643.158:1368): pid=4503 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 31 01:20:43.158000 audit[4503]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe5e96e00 a2=3 a3=0 items=0 ppid=1 pid=4503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:43.177008 kernel: audit: type=1300 audit(1761873643.158:1368): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe5e96e00 a2=3 a3=0 items=0 ppid=1 pid=4503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:43.177081 kernel: audit: type=1327 audit(1761873643.158:1368): proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:43.158000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:43.168000 audit[4503]: USER_START pid=4503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.187020 kernel: audit: type=1105 audit(1761873643.168:1369): pid=4503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.187250 kernel: audit: type=1103 audit(1761873643.169:1370): pid=4505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.169000 audit[4505]: CRED_ACQ pid=4505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.286071 sshd[4503]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:43.287000 audit[4503]: USER_END pid=4503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.290646 systemd[1]: Started sshd@12-10.0.0.131:22-10.0.0.1:44230.service. Oct 31 01:20:43.291153 systemd[1]: sshd@11-10.0.0.131:22-10.0.0.1:44222.service: Deactivated successfully. Oct 31 01:20:43.291797 systemd[1]: session-12.scope: Deactivated successfully. Oct 31 01:20:43.292380 systemd-logind[1196]: Session 12 logged out. Waiting for processes to exit. Oct 31 01:20:43.293378 systemd-logind[1196]: Removed session 12. Oct 31 01:20:43.287000 audit[4503]: CRED_DISP pid=4503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.302590 kernel: audit: type=1106 audit(1761873643.287:1371): pid=4503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.302660 kernel: audit: type=1104 audit(1761873643.287:1372): pid=4503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.131:22-10.0.0.1:44230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:43.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.131:22-10.0.0.1:44222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:43.335000 audit[4516]: USER_ACCT pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.336125 sshd[4516]: Accepted publickey for core from 10.0.0.1 port 44230 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:43.336000 audit[4516]: CRED_ACQ pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.336000 audit[4516]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed612e7c0 a2=3 a3=0 items=0 ppid=1 pid=4516 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:43.336000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:43.337386 sshd[4516]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:43.341474 systemd-logind[1196]: New session 13 of user core. Oct 31 01:20:43.342318 systemd[1]: Started session-13.scope. Oct 31 01:20:43.345000 audit[4516]: USER_START pid=4516 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.347000 audit[4519]: CRED_ACQ pid=4519 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.535758 sshd[4516]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:43.536000 audit[4516]: USER_END pid=4516 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.536000 audit[4516]: CRED_DISP pid=4516 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.540072 systemd[1]: Started sshd@13-10.0.0.131:22-10.0.0.1:44234.service. Oct 31 01:20:43.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.131:22-10.0.0.1:44234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:43.540633 systemd[1]: sshd@12-10.0.0.131:22-10.0.0.1:44230.service: Deactivated successfully. Oct 31 01:20:43.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.131:22-10.0.0.1:44230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:43.542033 systemd[1]: session-13.scope: Deactivated successfully. Oct 31 01:20:43.542835 systemd-logind[1196]: Session 13 logged out. Waiting for processes to exit. Oct 31 01:20:43.543898 systemd-logind[1196]: Removed session 13. Oct 31 01:20:43.581000 audit[4528]: USER_ACCT pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.582734 sshd[4528]: Accepted publickey for core from 10.0.0.1 port 44234 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:43.582000 audit[4528]: CRED_ACQ pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.582000 audit[4528]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5dc8e5d0 a2=3 a3=0 items=0 ppid=1 pid=4528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:43.582000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:43.584012 sshd[4528]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:43.588592 systemd-logind[1196]: New session 14 of user core. Oct 31 01:20:43.590029 systemd[1]: Started session-14.scope. Oct 31 01:20:43.594000 audit[4528]: USER_START pid=4528 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.595000 audit[4531]: CRED_ACQ pid=4531 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.608956 env[1208]: time="2025-10-31T01:20:43.608914492Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 31 01:20:43.732123 sshd[4528]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:43.732000 audit[4528]: USER_END pid=4528 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.732000 audit[4528]: CRED_DISP pid=4528 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:43.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.131:22-10.0.0.1:44234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:43.734336 systemd[1]: sshd@13-10.0.0.131:22-10.0.0.1:44234.service: Deactivated successfully. Oct 31 01:20:43.735121 systemd[1]: session-14.scope: Deactivated successfully. Oct 31 01:20:43.735629 systemd-logind[1196]: Session 14 logged out. Waiting for processes to exit. Oct 31 01:20:43.736408 systemd-logind[1196]: Removed session 14. Oct 31 01:20:44.008312 env[1208]: time="2025-10-31T01:20:44.008134949Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:44.039947 env[1208]: time="2025-10-31T01:20:44.039849289Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 31 01:20:44.040180 kubelet[1989]: E1031 01:20:44.040132 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 01:20:44.040525 kubelet[1989]: E1031 01:20:44.040189 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 01:20:44.040525 kubelet[1989]: E1031 01:20:44.040313 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cmktl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-n2thp_calico-system(a128bb1b-4c94-45fa-831f-8217c16a0f14): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:44.042757 env[1208]: time="2025-10-31T01:20:44.042376390Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 31 01:20:44.236000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:44.236000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:44.236000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0029c4a00 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:20:44.236000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:20:44.236000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002e3a440 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:20:44.236000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:20:44.247000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:44.247000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002e3a460 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:20:44.247000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:20:44.249000 audit[1839]: AVC avc: denied { watch } for pid=1839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 01:20:44.249000 audit[1839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0029c4a20 a2=fc6 a3=0 items=0 ppid=1682 pid=1839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c198,c379 key=(null) Oct 31 01:20:44.249000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 01:20:44.501348 env[1208]: time="2025-10-31T01:20:44.501280071Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:44.570360 env[1208]: time="2025-10-31T01:20:44.570321338Z" level=info msg="StopPodSandbox for \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\"" Oct 31 01:20:44.684219 env[1208]: time="2025-10-31T01:20:44.683357415Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 31 01:20:44.684707 kubelet[1989]: E1031 01:20:44.684629 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 01:20:44.684845 kubelet[1989]: E1031 01:20:44.684714 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 01:20:44.685060 kubelet[1989]: E1031 01:20:44.684991 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cmktl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-n2thp_calico-system(a128bb1b-4c94-45fa-831f-8217c16a0f14): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:44.685374 env[1208]: time="2025-10-31T01:20:44.685323017Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 31 01:20:44.704010 kubelet[1989]: E1031 01:20:44.703942 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:45.205978 env[1208]: time="2025-10-31T01:20:45.205870687Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:45.378178 env[1208]: time="2025-10-31T01:20:45.377581674Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 31 01:20:45.378933 kubelet[1989]: E1031 01:20:45.377942 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 01:20:45.380244 kubelet[1989]: E1031 01:20:45.378855 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 01:20:45.380244 kubelet[1989]: E1031 01:20:45.379439 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2t8cj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-bc87q_calico-system(ebe1f224-5028-4feb-8a17-10f3e8933d4e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:45.380517 env[1208]: time="2025-10-31T01:20:45.379436407Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 01:20:45.382032 kubelet[1989]: E1031 01:20:45.381923 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-bc87q" podUID="ebe1f224-5028-4feb-8a17-10f3e8933d4e" Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.166 [WARNING][4551] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--bc87q-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"ebe1f224-5028-4feb-8a17-10f3e8933d4e", ResourceVersion:"1171", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a", Pod:"goldmane-666569f655-bc87q", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic97932f0bb4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.166 [INFO][4551] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.166 [INFO][4551] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" iface="eth0" netns="" Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.166 [INFO][4551] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.166 [INFO][4551] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.200 [INFO][4561] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" HandleID="k8s-pod-network.e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.200 [INFO][4561] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.200 [INFO][4561] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.537 [WARNING][4561] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" HandleID="k8s-pod-network.e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.537 [INFO][4561] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" HandleID="k8s-pod-network.e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.608 [INFO][4561] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:45.612522 env[1208]: 2025-10-31 01:20:45.610 [INFO][4551] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:45.617356 env[1208]: time="2025-10-31T01:20:45.612949904Z" level=info msg="TearDown network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\" successfully" Oct 31 01:20:45.617356 env[1208]: time="2025-10-31T01:20:45.612980260Z" level=info msg="StopPodSandbox for \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\" returns successfully" Oct 31 01:20:45.617356 env[1208]: time="2025-10-31T01:20:45.613450924Z" level=info msg="RemovePodSandbox for \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\"" Oct 31 01:20:45.617356 env[1208]: time="2025-10-31T01:20:45.613474578Z" level=info msg="Forcibly stopping sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\"" Oct 31 01:20:45.855598 env[1208]: time="2025-10-31T01:20:45.855526404Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:45.978878 env[1208]: time="2025-10-31T01:20:45.978688051Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 01:20:45.979022 kubelet[1989]: E1031 01:20:45.978904 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:20:45.979022 kubelet[1989]: E1031 01:20:45.978943 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:20:45.979166 kubelet[1989]: E1031 01:20:45.979122 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ccmp2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-77d46fd4d5-d7tbw_calico-apiserver(b3fede59-787e-43f4-aace-2a04c63127ad): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:45.979645 env[1208]: time="2025-10-31T01:20:45.979342025Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 31 01:20:45.981022 kubelet[1989]: E1031 01:20:45.980916 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" podUID="b3fede59-787e-43f4-aace-2a04c63127ad" Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:45.692 [WARNING][4580] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--bc87q-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"ebe1f224-5028-4feb-8a17-10f3e8933d4e", ResourceVersion:"1267", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"daf1fcc10600c4997c7abf5d9b0245a0f60a22be8337fc496a1d0a460dc9721a", Pod:"goldmane-666569f655-bc87q", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic97932f0bb4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:45.692 [INFO][4580] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:45.692 [INFO][4580] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" iface="eth0" netns="" Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:45.692 [INFO][4580] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:45.692 [INFO][4580] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:45.711 [INFO][4589] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" HandleID="k8s-pod-network.e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:45.711 [INFO][4589] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:45.711 [INFO][4589] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:46.415 [WARNING][4589] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" HandleID="k8s-pod-network.e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:46.415 [INFO][4589] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" HandleID="k8s-pod-network.e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Workload="localhost-k8s-goldmane--666569f655--bc87q-eth0" Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:46.493 [INFO][4589] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:46.497973 env[1208]: 2025-10-31 01:20:46.496 [INFO][4580] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c" Oct 31 01:20:46.498816 env[1208]: time="2025-10-31T01:20:46.498022322Z" level=info msg="TearDown network for sandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\" successfully" Oct 31 01:20:46.594370 env[1208]: time="2025-10-31T01:20:46.594289775Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:46.833303 env[1208]: time="2025-10-31T01:20:46.833194761Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 31 01:20:46.833634 kubelet[1989]: E1031 01:20:46.833566 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 01:20:46.833634 kubelet[1989]: E1031 01:20:46.833626 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 01:20:46.834118 kubelet[1989]: E1031 01:20:46.833757 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6567d060fad640478881d6f4ca1306d9,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-4fcxz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7df6677f99-4629b_calico-system(1507a89d-ba39-4386-b53c-44b9ad26c13e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:46.835621 env[1208]: time="2025-10-31T01:20:46.835587660Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 31 01:20:46.863653 env[1208]: time="2025-10-31T01:20:46.863595802Z" level=info msg="RemovePodSandbox \"e6bf0089431f80573414617bb8fe15b0d906718157e663c03af3198afd90841c\" returns successfully" Oct 31 01:20:46.864127 env[1208]: time="2025-10-31T01:20:46.864100932Z" level=info msg="StopPodSandbox for \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\"" Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.897 [WARNING][4608] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n2thp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a128bb1b-4c94-45fa-831f-8217c16a0f14", ResourceVersion:"1250", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e", Pod:"csi-node-driver-n2thp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali28dc2d71eb3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.897 [INFO][4608] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.897 [INFO][4608] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" iface="eth0" netns="" Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.897 [INFO][4608] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.897 [INFO][4608] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.916 [INFO][4616] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" HandleID="k8s-pod-network.c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.916 [INFO][4616] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.916 [INFO][4616] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.923 [WARNING][4616] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" HandleID="k8s-pod-network.c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.923 [INFO][4616] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" HandleID="k8s-pod-network.c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.925 [INFO][4616] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:46.928941 env[1208]: 2025-10-31 01:20:46.926 [INFO][4608] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:46.929570 env[1208]: time="2025-10-31T01:20:46.928970901Z" level=info msg="TearDown network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\" successfully" Oct 31 01:20:46.929570 env[1208]: time="2025-10-31T01:20:46.929009332Z" level=info msg="StopPodSandbox for \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\" returns successfully" Oct 31 01:20:46.929621 env[1208]: time="2025-10-31T01:20:46.929566999Z" level=info msg="RemovePodSandbox for \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\"" Oct 31 01:20:46.929648 env[1208]: time="2025-10-31T01:20:46.929601854Z" level=info msg="Forcibly stopping sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\"" Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.961 [WARNING][4634] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n2thp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a128bb1b-4c94-45fa-831f-8217c16a0f14", ResourceVersion:"1250", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"73217aa8430b9301fe902f2666acfb791e8f505e45e52f809f07874e01abfc9e", Pod:"csi-node-driver-n2thp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali28dc2d71eb3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.961 [INFO][4634] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.961 [INFO][4634] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" iface="eth0" netns="" Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.961 [INFO][4634] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.961 [INFO][4634] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.979 [INFO][4643] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" HandleID="k8s-pod-network.c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.979 [INFO][4643] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.979 [INFO][4643] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.985 [WARNING][4643] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" HandleID="k8s-pod-network.c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.985 [INFO][4643] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" HandleID="k8s-pod-network.c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Workload="localhost-k8s-csi--node--driver--n2thp-eth0" Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.987 [INFO][4643] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:46.990803 env[1208]: 2025-10-31 01:20:46.989 [INFO][4634] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a" Oct 31 01:20:46.991420 env[1208]: time="2025-10-31T01:20:46.991357151Z" level=info msg="TearDown network for sandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\" successfully" Oct 31 01:20:46.994903 env[1208]: time="2025-10-31T01:20:46.994875884Z" level=info msg="RemovePodSandbox \"c1fef1e6e78a1fc7bbcf3bdd28fc725a982da270505ab865def47475f1c7086a\" returns successfully" Oct 31 01:20:46.995489 env[1208]: time="2025-10-31T01:20:46.995450192Z" level=info msg="StopPodSandbox for \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\"" Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.026 [WARNING][4660] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--gfplj-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f8b91bc0-a415-4d83-bda1-171bfb939454", ResourceVersion:"1176", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0", Pod:"coredns-674b8bbfcf-gfplj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali09c2b9127b1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.026 [INFO][4660] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.026 [INFO][4660] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" iface="eth0" netns="" Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.026 [INFO][4660] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.026 [INFO][4660] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.046 [INFO][4670] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" HandleID="k8s-pod-network.b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.047 [INFO][4670] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.047 [INFO][4670] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.054 [WARNING][4670] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" HandleID="k8s-pod-network.b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.054 [INFO][4670] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" HandleID="k8s-pod-network.b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.056 [INFO][4670] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.060660 env[1208]: 2025-10-31 01:20:47.058 [INFO][4660] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:47.061420 env[1208]: time="2025-10-31T01:20:47.060684711Z" level=info msg="TearDown network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\" successfully" Oct 31 01:20:47.061420 env[1208]: time="2025-10-31T01:20:47.060719846Z" level=info msg="StopPodSandbox for \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\" returns successfully" Oct 31 01:20:47.061420 env[1208]: time="2025-10-31T01:20:47.061329342Z" level=info msg="RemovePodSandbox for \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\"" Oct 31 01:20:47.061420 env[1208]: time="2025-10-31T01:20:47.061381919Z" level=info msg="Forcibly stopping sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\"" Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.097 [WARNING][4688] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--gfplj-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"f8b91bc0-a415-4d83-bda1-171bfb939454", ResourceVersion:"1176", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4518515a2e385d469286272dfd6126affe88f9c75040f27edede2a5911c97fb0", Pod:"coredns-674b8bbfcf-gfplj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali09c2b9127b1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.097 [INFO][4688] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.097 [INFO][4688] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" iface="eth0" netns="" Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.097 [INFO][4688] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.097 [INFO][4688] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.117 [INFO][4697] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" HandleID="k8s-pod-network.b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.117 [INFO][4697] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.117 [INFO][4697] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.123 [WARNING][4697] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" HandleID="k8s-pod-network.b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.123 [INFO][4697] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" HandleID="k8s-pod-network.b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Workload="localhost-k8s-coredns--674b8bbfcf--gfplj-eth0" Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.125 [INFO][4697] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.129085 env[1208]: 2025-10-31 01:20:47.127 [INFO][4688] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad" Oct 31 01:20:47.129085 env[1208]: time="2025-10-31T01:20:47.129042356Z" level=info msg="TearDown network for sandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\" successfully" Oct 31 01:20:47.140205 env[1208]: time="2025-10-31T01:20:47.140114612Z" level=info msg="RemovePodSandbox \"b4d860cdf0aa46c10293e801a839779cc7682586f703e51164cab2ded22e66ad\" returns successfully" Oct 31 01:20:47.140818 env[1208]: time="2025-10-31T01:20:47.140760025Z" level=info msg="StopPodSandbox for \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\"" Oct 31 01:20:47.185257 env[1208]: time="2025-10-31T01:20:47.185173573Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:47.186688 env[1208]: time="2025-10-31T01:20:47.186625097Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 31 01:20:47.187016 kubelet[1989]: E1031 01:20:47.186956 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 01:20:47.187118 kubelet[1989]: E1031 01:20:47.187034 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 01:20:47.187416 kubelet[1989]: E1031 01:20:47.187205 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-4fcxz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7df6677f99-4629b_calico-system(1507a89d-ba39-4386-b53c-44b9ad26c13e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:47.188501 kubelet[1989]: E1031 01:20:47.188424 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7df6677f99-4629b" podUID="1507a89d-ba39-4386-b53c-44b9ad26c13e" Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.176 [WARNING][4714] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0", GenerateName:"calico-apiserver-77d46fd4d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"1096d6b0-357c-45fe-aab1-ad0c209c60ed", ResourceVersion:"1236", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77d46fd4d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185", Pod:"calico-apiserver-77d46fd4d5-5bw5f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6be3698b2c2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.177 [INFO][4714] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.177 [INFO][4714] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" iface="eth0" netns="" Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.177 [INFO][4714] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.177 [INFO][4714] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.199 [INFO][4722] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" HandleID="k8s-pod-network.dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.200 [INFO][4722] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.200 [INFO][4722] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.207 [WARNING][4722] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" HandleID="k8s-pod-network.dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.207 [INFO][4722] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" HandleID="k8s-pod-network.dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.208 [INFO][4722] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.213207 env[1208]: 2025-10-31 01:20:47.210 [INFO][4714] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:47.213996 env[1208]: time="2025-10-31T01:20:47.213225913Z" level=info msg="TearDown network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\" successfully" Oct 31 01:20:47.213996 env[1208]: time="2025-10-31T01:20:47.213265235Z" level=info msg="StopPodSandbox for \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\" returns successfully" Oct 31 01:20:47.213996 env[1208]: time="2025-10-31T01:20:47.213935735Z" level=info msg="RemovePodSandbox for \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\"" Oct 31 01:20:47.214069 env[1208]: time="2025-10-31T01:20:47.213979897Z" level=info msg="Forcibly stopping sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\"" Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.250 [WARNING][4740] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0", GenerateName:"calico-apiserver-77d46fd4d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"1096d6b0-357c-45fe-aab1-ad0c209c60ed", ResourceVersion:"1236", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77d46fd4d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"49962c53a2fd313c5aa94415820ff63f04aaeae9a9827c535bfa814cd175e185", Pod:"calico-apiserver-77d46fd4d5-5bw5f", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6be3698b2c2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.251 [INFO][4740] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.251 [INFO][4740] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" iface="eth0" netns="" Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.251 [INFO][4740] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.251 [INFO][4740] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.274 [INFO][4749] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" HandleID="k8s-pod-network.dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.274 [INFO][4749] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.274 [INFO][4749] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.283 [WARNING][4749] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" HandleID="k8s-pod-network.dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.283 [INFO][4749] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" HandleID="k8s-pod-network.dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--5bw5f-eth0" Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.284 [INFO][4749] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.288908 env[1208]: 2025-10-31 01:20:47.286 [INFO][4740] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b" Oct 31 01:20:47.289486 env[1208]: time="2025-10-31T01:20:47.288959458Z" level=info msg="TearDown network for sandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\" successfully" Oct 31 01:20:47.293098 env[1208]: time="2025-10-31T01:20:47.293060257Z" level=info msg="RemovePodSandbox \"dd3f84649b5806efdd15129ad4778f053d9ecdf38375daf87b6abddc4ecb188b\" returns successfully" Oct 31 01:20:47.293761 env[1208]: time="2025-10-31T01:20:47.293693277Z" level=info msg="StopPodSandbox for \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\"" Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.329 [WARNING][4766] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0", GenerateName:"calico-apiserver-77d46fd4d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"b3fede59-787e-43f4-aace-2a04c63127ad", ResourceVersion:"1129", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77d46fd4d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e", Pod:"calico-apiserver-77d46fd4d5-d7tbw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia0ead0e36bc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.329 [INFO][4766] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.329 [INFO][4766] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" iface="eth0" netns="" Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.329 [INFO][4766] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.329 [INFO][4766] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.352 [INFO][4774] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" HandleID="k8s-pod-network.861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.352 [INFO][4774] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.352 [INFO][4774] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.358 [WARNING][4774] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" HandleID="k8s-pod-network.861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.358 [INFO][4774] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" HandleID="k8s-pod-network.861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.359 [INFO][4774] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.363460 env[1208]: 2025-10-31 01:20:47.361 [INFO][4766] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:47.364013 env[1208]: time="2025-10-31T01:20:47.363502856Z" level=info msg="TearDown network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\" successfully" Oct 31 01:20:47.364013 env[1208]: time="2025-10-31T01:20:47.363543211Z" level=info msg="StopPodSandbox for \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\" returns successfully" Oct 31 01:20:47.364167 env[1208]: time="2025-10-31T01:20:47.364127860Z" level=info msg="RemovePodSandbox for \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\"" Oct 31 01:20:47.364237 env[1208]: time="2025-10-31T01:20:47.364171381Z" level=info msg="Forcibly stopping sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\"" Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.398 [WARNING][4791] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0", GenerateName:"calico-apiserver-77d46fd4d5-", Namespace:"calico-apiserver", SelfLink:"", UID:"b3fede59-787e-43f4-aace-2a04c63127ad", ResourceVersion:"1129", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"77d46fd4d5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"09937361d9e68d8d3c1965c5af27d148a02127be5a6c806d925bc3235c5b3a9e", Pod:"calico-apiserver-77d46fd4d5-d7tbw", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia0ead0e36bc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.398 [INFO][4791] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.398 [INFO][4791] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" iface="eth0" netns="" Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.398 [INFO][4791] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.398 [INFO][4791] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.421 [INFO][4801] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" HandleID="k8s-pod-network.861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.421 [INFO][4801] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.421 [INFO][4801] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.427 [WARNING][4801] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" HandleID="k8s-pod-network.861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.427 [INFO][4801] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" HandleID="k8s-pod-network.861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Workload="localhost-k8s-calico--apiserver--77d46fd4d5--d7tbw-eth0" Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.428 [INFO][4801] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.432731 env[1208]: 2025-10-31 01:20:47.430 [INFO][4791] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758" Oct 31 01:20:47.433680 env[1208]: time="2025-10-31T01:20:47.432716465Z" level=info msg="TearDown network for sandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\" successfully" Oct 31 01:20:47.436221 env[1208]: time="2025-10-31T01:20:47.436186229Z" level=info msg="RemovePodSandbox \"861fbf764b7351e3e7b775b1ffc3d7ed049080a849b75a0c1908145cc52d0758\" returns successfully" Oct 31 01:20:47.436819 env[1208]: time="2025-10-31T01:20:47.436750150Z" level=info msg="StopPodSandbox for \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\"" Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.470 [WARNING][4819] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--lcq29-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"708d30cb-c2ce-44d9-bd45-12e83b63bbbb", ResourceVersion:"1094", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1", Pod:"coredns-674b8bbfcf-lcq29", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali567bad985dd", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.470 [INFO][4819] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.470 [INFO][4819] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" iface="eth0" netns="" Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.470 [INFO][4819] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.470 [INFO][4819] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.491 [INFO][4827] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" HandleID="k8s-pod-network.59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.491 [INFO][4827] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.491 [INFO][4827] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.496 [WARNING][4827] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" HandleID="k8s-pod-network.59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.496 [INFO][4827] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" HandleID="k8s-pod-network.59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.498 [INFO][4827] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.501883 env[1208]: 2025-10-31 01:20:47.499 [INFO][4819] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:47.501883 env[1208]: time="2025-10-31T01:20:47.501836820Z" level=info msg="TearDown network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\" successfully" Oct 31 01:20:47.501883 env[1208]: time="2025-10-31T01:20:47.501871084Z" level=info msg="StopPodSandbox for \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\" returns successfully" Oct 31 01:20:47.502843 env[1208]: time="2025-10-31T01:20:47.502468618Z" level=info msg="RemovePodSandbox for \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\"" Oct 31 01:20:47.502843 env[1208]: time="2025-10-31T01:20:47.502510796Z" level=info msg="Forcibly stopping sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\"" Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.535 [WARNING][4844] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--lcq29-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"708d30cb-c2ce-44d9-bd45-12e83b63bbbb", ResourceVersion:"1094", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 19, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ec70de7b1a25d8ac82ea7632b0d4781a3576506d2585898204f7dae4efb54a1", Pod:"coredns-674b8bbfcf-lcq29", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali567bad985dd", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.535 [INFO][4844] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.535 [INFO][4844] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" iface="eth0" netns="" Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.535 [INFO][4844] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.535 [INFO][4844] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.554 [INFO][4853] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" HandleID="k8s-pod-network.59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.555 [INFO][4853] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.555 [INFO][4853] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.567 [WARNING][4853] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" HandleID="k8s-pod-network.59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.567 [INFO][4853] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" HandleID="k8s-pod-network.59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Workload="localhost-k8s-coredns--674b8bbfcf--lcq29-eth0" Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.568 [INFO][4853] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.572550 env[1208]: 2025-10-31 01:20:47.570 [INFO][4844] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34" Oct 31 01:20:47.573057 env[1208]: time="2025-10-31T01:20:47.572586842Z" level=info msg="TearDown network for sandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\" successfully" Oct 31 01:20:47.576782 env[1208]: time="2025-10-31T01:20:47.576734489Z" level=info msg="RemovePodSandbox \"59667cbbd59ea5d9942afb1b7855dcc475f9ff1fa2b13987fba92fb7fab98d34\" returns successfully" Oct 31 01:20:47.577394 env[1208]: time="2025-10-31T01:20:47.577344775Z" level=info msg="StopPodSandbox for \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\"" Oct 31 01:20:47.616226 env[1208]: time="2025-10-31T01:20:47.611019369Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.610 [WARNING][4871] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" WorkloadEndpoint="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.610 [INFO][4871] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.610 [INFO][4871] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" iface="eth0" netns="" Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.610 [INFO][4871] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.610 [INFO][4871] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.636 [INFO][4880] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" HandleID="k8s-pod-network.b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Workload="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.636 [INFO][4880] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.636 [INFO][4880] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.642 [WARNING][4880] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" HandleID="k8s-pod-network.b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Workload="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.643 [INFO][4880] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" HandleID="k8s-pod-network.b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Workload="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.645 [INFO][4880] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.649212 env[1208]: 2025-10-31 01:20:47.647 [INFO][4871] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:47.649645 env[1208]: time="2025-10-31T01:20:47.649252493Z" level=info msg="TearDown network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\" successfully" Oct 31 01:20:47.649645 env[1208]: time="2025-10-31T01:20:47.649313847Z" level=info msg="StopPodSandbox for \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\" returns successfully" Oct 31 01:20:47.649911 env[1208]: time="2025-10-31T01:20:47.649882236Z" level=info msg="RemovePodSandbox for \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\"" Oct 31 01:20:47.649974 env[1208]: time="2025-10-31T01:20:47.649921981Z" level=info msg="Forcibly stopping sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\"" Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.681 [WARNING][4899] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" WorkloadEndpoint="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.681 [INFO][4899] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.681 [INFO][4899] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" iface="eth0" netns="" Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.681 [INFO][4899] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.681 [INFO][4899] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.700 [INFO][4908] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" HandleID="k8s-pod-network.b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Workload="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.701 [INFO][4908] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.701 [INFO][4908] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.707 [WARNING][4908] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" HandleID="k8s-pod-network.b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Workload="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.707 [INFO][4908] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" HandleID="k8s-pod-network.b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Workload="localhost-k8s-whisker--574b6cc847--ccvtr-eth0" Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.709 [INFO][4908] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.712924 env[1208]: 2025-10-31 01:20:47.711 [INFO][4899] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571" Oct 31 01:20:47.712924 env[1208]: time="2025-10-31T01:20:47.712889203Z" level=info msg="TearDown network for sandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\" successfully" Oct 31 01:20:47.716888 env[1208]: time="2025-10-31T01:20:47.716860742Z" level=info msg="RemovePodSandbox \"b62733a203b36edda93fc5946e72d5275b207a2f7eb97a54162add948ea6f571\" returns successfully" Oct 31 01:20:47.717439 env[1208]: time="2025-10-31T01:20:47.717408403Z" level=info msg="StopPodSandbox for \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\"" Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.748 [WARNING][4925] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0", GenerateName:"calico-kube-controllers-69d4f95648-", Namespace:"calico-system", SelfLink:"", UID:"6254973b-926c-41f6-bffb-e73e5b8fa8f8", ResourceVersion:"1289", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d4f95648", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0", Pod:"calico-kube-controllers-69d4f95648-mnwp9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib1dc148e07f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.748 [INFO][4925] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.748 [INFO][4925] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" iface="eth0" netns="" Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.748 [INFO][4925] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.748 [INFO][4925] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.767 [INFO][4933] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" HandleID="k8s-pod-network.27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.767 [INFO][4933] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.768 [INFO][4933] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.774 [WARNING][4933] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" HandleID="k8s-pod-network.27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.774 [INFO][4933] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" HandleID="k8s-pod-network.27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.775 [INFO][4933] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.779828 env[1208]: 2025-10-31 01:20:47.777 [INFO][4925] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:47.780438 env[1208]: time="2025-10-31T01:20:47.779855806Z" level=info msg="TearDown network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\" successfully" Oct 31 01:20:47.780438 env[1208]: time="2025-10-31T01:20:47.779890602Z" level=info msg="StopPodSandbox for \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\" returns successfully" Oct 31 01:20:47.780526 env[1208]: time="2025-10-31T01:20:47.780473969Z" level=info msg="RemovePodSandbox for \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\"" Oct 31 01:20:47.780710 env[1208]: time="2025-10-31T01:20:47.780523150Z" level=info msg="Forcibly stopping sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\"" Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.807 [WARNING][4951] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0", GenerateName:"calico-kube-controllers-69d4f95648-", Namespace:"calico-system", SelfLink:"", UID:"6254973b-926c-41f6-bffb-e73e5b8fa8f8", ResourceVersion:"1289", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 1, 20, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69d4f95648", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5b74d8dc25b503d8fe6e18116afb288137ca6e8d095f06cdf01013b4a2c553d0", Pod:"calico-kube-controllers-69d4f95648-mnwp9", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib1dc148e07f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.808 [INFO][4951] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.808 [INFO][4951] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" iface="eth0" netns="" Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.808 [INFO][4951] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.808 [INFO][4951] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.827 [INFO][4960] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" HandleID="k8s-pod-network.27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.827 [INFO][4960] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.827 [INFO][4960] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.834 [WARNING][4960] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" HandleID="k8s-pod-network.27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.834 [INFO][4960] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" HandleID="k8s-pod-network.27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Workload="localhost-k8s-calico--kube--controllers--69d4f95648--mnwp9-eth0" Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.836 [INFO][4960] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 01:20:47.840452 env[1208]: 2025-10-31 01:20:47.838 [INFO][4951] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e" Oct 31 01:20:47.840993 env[1208]: time="2025-10-31T01:20:47.840514518Z" level=info msg="TearDown network for sandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\" successfully" Oct 31 01:20:47.844669 env[1208]: time="2025-10-31T01:20:47.844612944Z" level=info msg="RemovePodSandbox \"27e692976bd3539e895564375c059e19c4b188f005739e98982214c1c21acd2e\" returns successfully" Oct 31 01:20:47.981720 env[1208]: time="2025-10-31T01:20:47.981562880Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:20:47.983157 env[1208]: time="2025-10-31T01:20:47.983061833Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 31 01:20:47.983395 kubelet[1989]: E1031 01:20:47.983341 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 01:20:47.983395 kubelet[1989]: E1031 01:20:47.983395 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 01:20:47.983938 kubelet[1989]: E1031 01:20:47.983538 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-848hr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-69d4f95648-mnwp9_calico-system(6254973b-926c-41f6-bffb-e73e5b8fa8f8): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 31 01:20:47.984809 kubelet[1989]: E1031 01:20:47.984741 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" podUID="6254973b-926c-41f6-bffb-e73e5b8fa8f8" Oct 31 01:20:48.737040 systemd[1]: Started sshd@14-10.0.0.131:22-10.0.0.1:36632.service. Oct 31 01:20:48.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.131:22-10.0.0.1:36632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:48.739160 kernel: kauditd_printk_skb: 35 callbacks suppressed Oct 31 01:20:48.739264 kernel: audit: type=1130 audit(1761873648.736:1396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.131:22-10.0.0.1:36632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:48.780000 audit[4968]: USER_ACCT pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.781458 sshd[4968]: Accepted publickey for core from 10.0.0.1 port 36632 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:48.785005 sshd[4968]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:48.783000 audit[4968]: CRED_ACQ pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.789029 systemd-logind[1196]: New session 15 of user core. Oct 31 01:20:48.790068 systemd[1]: Started session-15.scope. Oct 31 01:20:48.796175 kernel: audit: type=1101 audit(1761873648.780:1397): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.796249 kernel: audit: type=1103 audit(1761873648.783:1398): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.796273 kernel: audit: type=1006 audit(1761873648.783:1399): pid=4968 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 31 01:20:48.783000 audit[4968]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe447987a0 a2=3 a3=0 items=0 ppid=1 pid=4968 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:48.809351 kernel: audit: type=1300 audit(1761873648.783:1399): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe447987a0 a2=3 a3=0 items=0 ppid=1 pid=4968 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:48.809414 kernel: audit: type=1327 audit(1761873648.783:1399): proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:48.783000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:48.793000 audit[4968]: USER_START pid=4968 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.820000 kernel: audit: type=1105 audit(1761873648.793:1400): pid=4968 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.820041 kernel: audit: type=1103 audit(1761873648.794:1401): pid=4970 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.794000 audit[4970]: CRED_ACQ pid=4970 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.928292 sshd[4968]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:48.928000 audit[4968]: USER_END pid=4968 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.931067 systemd[1]: sshd@14-10.0.0.131:22-10.0.0.1:36632.service: Deactivated successfully. Oct 31 01:20:48.931860 systemd[1]: session-15.scope: Deactivated successfully. Oct 31 01:20:48.932444 systemd-logind[1196]: Session 15 logged out. Waiting for processes to exit. Oct 31 01:20:48.933097 systemd-logind[1196]: Removed session 15. Oct 31 01:20:48.928000 audit[4968]: CRED_DISP pid=4968 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.945616 kernel: audit: type=1106 audit(1761873648.928:1402): pid=4968 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.945689 kernel: audit: type=1104 audit(1761873648.928:1403): pid=4968 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:48.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.131:22-10.0.0.1:36632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:52.608364 kubelet[1989]: E1031 01:20:52.608312 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:53.932185 systemd[1]: Started sshd@15-10.0.0.131:22-10.0.0.1:36646.service. Oct 31 01:20:53.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.131:22-10.0.0.1:36646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:53.933981 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 01:20:53.934039 kernel: audit: type=1130 audit(1761873653.931:1405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.131:22-10.0.0.1:36646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:53.973000 audit[4995]: USER_ACCT pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:53.974093 sshd[4995]: Accepted publickey for core from 10.0.0.1 port 36646 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:53.976394 sshd[4995]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:53.975000 audit[4995]: CRED_ACQ pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:53.981395 systemd-logind[1196]: New session 16 of user core. Oct 31 01:20:53.982714 systemd[1]: Started session-16.scope. Oct 31 01:20:53.987650 kernel: audit: type=1101 audit(1761873653.973:1406): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:53.987708 kernel: audit: type=1103 audit(1761873653.975:1407): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:53.987742 kernel: audit: type=1006 audit(1761873653.975:1408): pid=4995 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 31 01:20:53.975000 audit[4995]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd526a8cc0 a2=3 a3=0 items=0 ppid=1 pid=4995 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:53.998250 kernel: audit: type=1300 audit(1761873653.975:1408): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd526a8cc0 a2=3 a3=0 items=0 ppid=1 pid=4995 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:53.998335 kernel: audit: type=1327 audit(1761873653.975:1408): proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:53.975000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:54.000478 kernel: audit: type=1105 audit(1761873653.987:1409): pid=4995 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:53.987000 audit[4995]: USER_START pid=4995 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:54.007596 kernel: audit: type=1103 audit(1761873653.989:1410): pid=4997 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:53.989000 audit[4997]: CRED_ACQ pid=4997 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:54.097798 sshd[4995]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:54.098000 audit[4995]: USER_END pid=4995 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:54.100154 systemd[1]: sshd@15-10.0.0.131:22-10.0.0.1:36646.service: Deactivated successfully. Oct 31 01:20:54.100964 systemd[1]: session-16.scope: Deactivated successfully. Oct 31 01:20:54.101486 systemd-logind[1196]: Session 16 logged out. Waiting for processes to exit. Oct 31 01:20:54.102245 systemd-logind[1196]: Removed session 16. Oct 31 01:20:54.098000 audit[4995]: CRED_DISP pid=4995 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:54.115229 kernel: audit: type=1106 audit(1761873654.098:1411): pid=4995 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:54.115296 kernel: audit: type=1104 audit(1761873654.098:1412): pid=4995 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:54.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.131:22-10.0.0.1:36646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:54.609105 kubelet[1989]: E1031 01:20:54.609054 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" podUID="1096d6b0-357c-45fe-aab1-ad0c209c60ed" Oct 31 01:20:56.610236 kubelet[1989]: E1031 01:20:56.610178 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:20:57.608514 kubelet[1989]: E1031 01:20:57.608450 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-bc87q" podUID="ebe1f224-5028-4feb-8a17-10f3e8933d4e" Oct 31 01:20:58.608167 kubelet[1989]: E1031 01:20:58.608128 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:20:58.609201 kubelet[1989]: E1031 01:20:58.609168 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" podUID="b3fede59-787e-43f4-aace-2a04c63127ad" Oct 31 01:20:58.609630 kubelet[1989]: E1031 01:20:58.609572 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7df6677f99-4629b" podUID="1507a89d-ba39-4386-b53c-44b9ad26c13e" Oct 31 01:20:59.102167 systemd[1]: Started sshd@16-10.0.0.131:22-10.0.0.1:59266.service. Oct 31 01:20:59.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.131:22-10.0.0.1:59266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:59.104019 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 01:20:59.104168 kernel: audit: type=1130 audit(1761873659.101:1414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.131:22-10.0.0.1:59266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:20:59.145000 audit[5033]: USER_ACCT pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.146269 sshd[5033]: Accepted publickey for core from 10.0.0.1 port 59266 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:20:59.148362 sshd[5033]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:20:59.147000 audit[5033]: CRED_ACQ pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.153115 systemd-logind[1196]: New session 17 of user core. Oct 31 01:20:59.153426 systemd[1]: Started session-17.scope. Oct 31 01:20:59.158860 kernel: audit: type=1101 audit(1761873659.145:1415): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.158922 kernel: audit: type=1103 audit(1761873659.147:1416): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.158955 kernel: audit: type=1006 audit(1761873659.147:1417): pid=5033 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 31 01:20:59.147000 audit[5033]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee43d2d50 a2=3 a3=0 items=0 ppid=1 pid=5033 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:59.170037 kernel: audit: type=1300 audit(1761873659.147:1417): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee43d2d50 a2=3 a3=0 items=0 ppid=1 pid=5033 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:20:59.170103 kernel: audit: type=1327 audit(1761873659.147:1417): proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:59.147000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:20:59.156000 audit[5033]: USER_START pid=5033 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.180047 kernel: audit: type=1105 audit(1761873659.156:1418): pid=5033 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.180104 kernel: audit: type=1103 audit(1761873659.158:1419): pid=5035 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.158000 audit[5035]: CRED_ACQ pid=5035 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.262678 sshd[5033]: pam_unix(sshd:session): session closed for user core Oct 31 01:20:59.262000 audit[5033]: USER_END pid=5033 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.265019 systemd[1]: sshd@16-10.0.0.131:22-10.0.0.1:59266.service: Deactivated successfully. Oct 31 01:20:59.265755 systemd[1]: session-17.scope: Deactivated successfully. Oct 31 01:20:59.266398 systemd-logind[1196]: Session 17 logged out. Waiting for processes to exit. Oct 31 01:20:59.267209 systemd-logind[1196]: Removed session 17. Oct 31 01:20:59.262000 audit[5033]: CRED_DISP pid=5033 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.278642 kernel: audit: type=1106 audit(1761873659.262:1420): pid=5033 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.278716 kernel: audit: type=1104 audit(1761873659.262:1421): pid=5033 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:20:59.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.131:22-10.0.0.1:59266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:01.609060 kubelet[1989]: E1031 01:21:01.609003 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" podUID="6254973b-926c-41f6-bffb-e73e5b8fa8f8" Oct 31 01:21:02.607941 kubelet[1989]: E1031 01:21:02.607900 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:21:04.269012 systemd[1]: Started sshd@17-10.0.0.131:22-10.0.0.1:59270.service. Oct 31 01:21:04.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.131:22-10.0.0.1:59270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:04.270646 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 01:21:04.270712 kernel: audit: type=1130 audit(1761873664.267:1423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.131:22-10.0.0.1:59270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:04.309000 audit[5048]: USER_ACCT pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.311756 sshd[5048]: Accepted publickey for core from 10.0.0.1 port 59270 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:21:04.316000 audit[5048]: CRED_ACQ pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.319024 sshd[5048]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:21:04.324677 kernel: audit: type=1101 audit(1761873664.309:1424): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.324734 kernel: audit: type=1103 audit(1761873664.316:1425): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.316000 audit[5048]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2865adf0 a2=3 a3=0 items=0 ppid=1 pid=5048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:04.328455 systemd-logind[1196]: New session 18 of user core. Oct 31 01:21:04.328621 systemd[1]: Started session-18.scope. Oct 31 01:21:04.335428 kernel: audit: type=1006 audit(1761873664.316:1426): pid=5048 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 31 01:21:04.335506 kernel: audit: type=1300 audit(1761873664.316:1426): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2865adf0 a2=3 a3=0 items=0 ppid=1 pid=5048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:04.335527 kernel: audit: type=1327 audit(1761873664.316:1426): proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:04.316000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:04.331000 audit[5048]: USER_START pid=5048 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.344876 kernel: audit: type=1105 audit(1761873664.331:1427): pid=5048 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.332000 audit[5050]: CRED_ACQ pid=5050 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.350703 kernel: audit: type=1103 audit(1761873664.332:1428): pid=5050 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.506298 sshd[5048]: pam_unix(sshd:session): session closed for user core Oct 31 01:21:04.505000 audit[5048]: USER_END pid=5048 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.506000 audit[5048]: CRED_DISP pid=5048 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.518888 systemd[1]: sshd@17-10.0.0.131:22-10.0.0.1:59270.service: Deactivated successfully. Oct 31 01:21:04.519795 systemd[1]: session-18.scope: Deactivated successfully. Oct 31 01:21:04.520550 systemd-logind[1196]: Session 18 logged out. Waiting for processes to exit. Oct 31 01:21:04.521514 systemd-logind[1196]: Removed session 18. Oct 31 01:21:04.523844 kernel: audit: type=1106 audit(1761873664.505:1429): pid=5048 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.523908 kernel: audit: type=1104 audit(1761873664.506:1430): pid=5048 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:04.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.131:22-10.0.0.1:59270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:05.608750 env[1208]: time="2025-10-31T01:21:05.608690109Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 01:21:05.960931 env[1208]: time="2025-10-31T01:21:05.960794914Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:21:05.962101 env[1208]: time="2025-10-31T01:21:05.962034440Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 01:21:05.962256 kubelet[1989]: E1031 01:21:05.962213 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:21:05.962585 kubelet[1989]: E1031 01:21:05.962261 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:21:05.962585 kubelet[1989]: E1031 01:21:05.962396 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sjqpl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-77d46fd4d5-5bw5f_calico-apiserver(1096d6b0-357c-45fe-aab1-ad0c209c60ed): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 01:21:05.963569 kubelet[1989]: E1031 01:21:05.963538 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" podUID="1096d6b0-357c-45fe-aab1-ad0c209c60ed" Oct 31 01:21:06.607912 kubelet[1989]: E1031 01:21:06.607854 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:21:09.511730 systemd[1]: Started sshd@18-10.0.0.131:22-10.0.0.1:33212.service. Oct 31 01:21:09.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.131:22-10.0.0.1:33212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:09.520504 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 01:21:09.520616 kernel: audit: type=1130 audit(1761873669.511:1432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.131:22-10.0.0.1:33212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:09.555000 audit[5063]: USER_ACCT pid=5063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.558106 sshd[5063]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:21:09.563814 kernel: audit: type=1101 audit(1761873669.555:1433): pid=5063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.563845 sshd[5063]: Accepted publickey for core from 10.0.0.1 port 33212 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:21:09.556000 audit[5063]: CRED_ACQ pid=5063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.567069 systemd-logind[1196]: New session 19 of user core. Oct 31 01:21:09.567973 systemd[1]: Started session-19.scope. Oct 31 01:21:09.570803 kernel: audit: type=1103 audit(1761873669.556:1434): pid=5063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.571132 kernel: audit: type=1006 audit(1761873669.557:1435): pid=5063 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 31 01:21:09.557000 audit[5063]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2de5c7f0 a2=3 a3=0 items=0 ppid=1 pid=5063 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:09.583387 kernel: audit: type=1300 audit(1761873669.557:1435): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2de5c7f0 a2=3 a3=0 items=0 ppid=1 pid=5063 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:09.583464 kernel: audit: type=1327 audit(1761873669.557:1435): proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:09.557000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:09.585875 kernel: audit: type=1105 audit(1761873669.572:1436): pid=5063 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.572000 audit[5063]: USER_START pid=5063 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.574000 audit[5065]: CRED_ACQ pid=5065 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.601565 kernel: audit: type=1103 audit(1761873669.574:1437): pid=5065 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.723191 sshd[5063]: pam_unix(sshd:session): session closed for user core Oct 31 01:21:09.723000 audit[5063]: USER_END pid=5063 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.727699 systemd[1]: sshd@18-10.0.0.131:22-10.0.0.1:33212.service: Deactivated successfully. Oct 31 01:21:09.729278 systemd[1]: session-19.scope: Deactivated successfully. Oct 31 01:21:09.730236 systemd-logind[1196]: Session 19 logged out. Waiting for processes to exit. Oct 31 01:21:09.732269 systemd[1]: Started sshd@19-10.0.0.131:22-10.0.0.1:33216.service. Oct 31 01:21:09.723000 audit[5063]: CRED_DISP pid=5063 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.733829 systemd-logind[1196]: Removed session 19. Oct 31 01:21:09.739573 kernel: audit: type=1106 audit(1761873669.723:1438): pid=5063 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.739657 kernel: audit: type=1104 audit(1761873669.723:1439): pid=5063 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.131:22-10.0.0.1:33212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:09.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.131:22-10.0.0.1:33216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:09.775000 audit[5076]: USER_ACCT pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.776585 sshd[5076]: Accepted publickey for core from 10.0.0.1 port 33216 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:21:09.776000 audit[5076]: CRED_ACQ pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.776000 audit[5076]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5fecd320 a2=3 a3=0 items=0 ppid=1 pid=5076 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:09.776000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:09.777914 sshd[5076]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:21:09.781523 systemd-logind[1196]: New session 20 of user core. Oct 31 01:21:09.782599 systemd[1]: Started session-20.scope. Oct 31 01:21:09.787000 audit[5076]: USER_START pid=5076 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:09.788000 audit[5078]: CRED_ACQ pid=5078 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.048531 sshd[5076]: pam_unix(sshd:session): session closed for user core Oct 31 01:21:10.048000 audit[5076]: USER_END pid=5076 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.049000 audit[5076]: CRED_DISP pid=5076 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.051471 systemd[1]: sshd@19-10.0.0.131:22-10.0.0.1:33216.service: Deactivated successfully. Oct 31 01:21:10.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.131:22-10.0.0.1:33216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:10.052025 systemd[1]: session-20.scope: Deactivated successfully. Oct 31 01:21:10.053286 systemd-logind[1196]: Session 20 logged out. Waiting for processes to exit. Oct 31 01:21:10.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.131:22-10.0.0.1:33230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:10.053650 systemd[1]: Started sshd@20-10.0.0.131:22-10.0.0.1:33230.service. Oct 31 01:21:10.054547 systemd-logind[1196]: Removed session 20. Oct 31 01:21:10.095000 audit[5093]: USER_ACCT pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.096781 sshd[5093]: Accepted publickey for core from 10.0.0.1 port 33230 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:21:10.096000 audit[5093]: CRED_ACQ pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.096000 audit[5093]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe23afba30 a2=3 a3=0 items=0 ppid=1 pid=5093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:10.096000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:10.097888 sshd[5093]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:21:10.101612 systemd-logind[1196]: New session 21 of user core. Oct 31 01:21:10.102465 systemd[1]: Started session-21.scope. Oct 31 01:21:10.105000 audit[5093]: USER_START pid=5093 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.107000 audit[5095]: CRED_ACQ pid=5095 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.591000 audit[5108]: NETFILTER_CFG table=filter:120 family=2 entries=26 op=nft_register_rule pid=5108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:21:10.591000 audit[5108]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffebf4bef60 a2=0 a3=7ffebf4bef4c items=0 ppid=2102 pid=5108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:10.591000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:21:10.600000 audit[5108]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=5108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:21:10.600000 audit[5108]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffebf4bef60 a2=0 a3=0 items=0 ppid=2102 pid=5108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:10.600000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:21:10.610910 env[1208]: time="2025-10-31T01:21:10.610617211Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 31 01:21:10.611652 sshd[5093]: pam_unix(sshd:session): session closed for user core Oct 31 01:21:10.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.131:22-10.0.0.1:33244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:10.613089 systemd[1]: Started sshd@21-10.0.0.131:22-10.0.0.1:33244.service. Oct 31 01:21:10.614000 audit[5093]: USER_END pid=5093 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.615000 audit[5093]: CRED_DISP pid=5093 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.626025 systemd[1]: sshd@20-10.0.0.131:22-10.0.0.1:33230.service: Deactivated successfully. Oct 31 01:21:10.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.131:22-10.0.0.1:33230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:10.626880 systemd[1]: session-21.scope: Deactivated successfully. Oct 31 01:21:10.628030 systemd-logind[1196]: Session 21 logged out. Waiting for processes to exit. Oct 31 01:21:10.627000 audit[5112]: NETFILTER_CFG table=filter:122 family=2 entries=38 op=nft_register_rule pid=5112 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:21:10.627000 audit[5112]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffefa2e08d0 a2=0 a3=7ffefa2e08bc items=0 ppid=2102 pid=5112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:10.627000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:21:10.630235 systemd-logind[1196]: Removed session 21. Oct 31 01:21:10.636000 audit[5112]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=5112 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:21:10.636000 audit[5112]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffefa2e08d0 a2=0 a3=0 items=0 ppid=2102 pid=5112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:10.636000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:21:10.664000 audit[5110]: USER_ACCT pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.665184 sshd[5110]: Accepted publickey for core from 10.0.0.1 port 33244 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:21:10.665000 audit[5110]: CRED_ACQ pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.665000 audit[5110]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef73a6800 a2=3 a3=0 items=0 ppid=1 pid=5110 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:10.665000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:10.666178 sshd[5110]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:21:10.669705 systemd-logind[1196]: New session 22 of user core. Oct 31 01:21:10.670508 systemd[1]: Started session-22.scope. Oct 31 01:21:10.674000 audit[5110]: USER_START pid=5110 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.676000 audit[5115]: CRED_ACQ pid=5115 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.914429 sshd[5110]: pam_unix(sshd:session): session closed for user core Oct 31 01:21:10.916000 audit[5110]: USER_END pid=5110 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.916000 audit[5110]: CRED_DISP pid=5110 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.131:22-10.0.0.1:33254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:10.919319 systemd[1]: Started sshd@22-10.0.0.131:22-10.0.0.1:33254.service. Oct 31 01:21:10.920087 systemd[1]: sshd@21-10.0.0.131:22-10.0.0.1:33244.service: Deactivated successfully. Oct 31 01:21:10.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.131:22-10.0.0.1:33244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:10.921163 systemd[1]: session-22.scope: Deactivated successfully. Oct 31 01:21:10.922471 systemd-logind[1196]: Session 22 logged out. Waiting for processes to exit. Oct 31 01:21:10.923372 systemd-logind[1196]: Removed session 22. Oct 31 01:21:10.952841 env[1208]: time="2025-10-31T01:21:10.952761149Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:21:10.953864 env[1208]: time="2025-10-31T01:21:10.953822184Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 31 01:21:10.954122 kubelet[1989]: E1031 01:21:10.954077 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 01:21:10.954398 kubelet[1989]: E1031 01:21:10.954140 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 01:21:10.954398 kubelet[1989]: E1031 01:21:10.954302 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cmktl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-n2thp_calico-system(a128bb1b-4c94-45fa-831f-8217c16a0f14): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 31 01:21:10.956462 env[1208]: time="2025-10-31T01:21:10.956426856Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 31 01:21:10.963000 audit[5124]: USER_ACCT pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.964902 sshd[5124]: Accepted publickey for core from 10.0.0.1 port 33254 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:21:10.964000 audit[5124]: CRED_ACQ pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.965000 audit[5124]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb6be2be0 a2=3 a3=0 items=0 ppid=1 pid=5124 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:10.965000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:10.966125 sshd[5124]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:21:10.969661 systemd-logind[1196]: New session 23 of user core. Oct 31 01:21:10.970809 systemd[1]: Started session-23.scope. Oct 31 01:21:10.973000 audit[5124]: USER_START pid=5124 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:10.975000 audit[5127]: CRED_ACQ pid=5127 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:11.079312 sshd[5124]: pam_unix(sshd:session): session closed for user core Oct 31 01:21:11.079000 audit[5124]: USER_END pid=5124 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:11.080000 audit[5124]: CRED_DISP pid=5124 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:11.082968 systemd[1]: sshd@22-10.0.0.131:22-10.0.0.1:33254.service: Deactivated successfully. Oct 31 01:21:11.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.131:22-10.0.0.1:33254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:11.083936 systemd[1]: session-23.scope: Deactivated successfully. Oct 31 01:21:11.084606 systemd-logind[1196]: Session 23 logged out. Waiting for processes to exit. Oct 31 01:21:11.085696 systemd-logind[1196]: Removed session 23. Oct 31 01:21:11.288310 env[1208]: time="2025-10-31T01:21:11.288246715Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:21:11.289369 env[1208]: time="2025-10-31T01:21:11.289307821Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 31 01:21:11.289623 kubelet[1989]: E1031 01:21:11.289563 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 01:21:11.289705 kubelet[1989]: E1031 01:21:11.289637 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 01:21:11.289866 kubelet[1989]: E1031 01:21:11.289813 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cmktl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-n2thp_calico-system(a128bb1b-4c94-45fa-831f-8217c16a0f14): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 31 01:21:11.291158 kubelet[1989]: E1031 01:21:11.291086 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:21:12.609076 env[1208]: time="2025-10-31T01:21:12.609000426Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 01:21:12.969366 env[1208]: time="2025-10-31T01:21:12.969213408Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:21:13.047542 env[1208]: time="2025-10-31T01:21:13.047450722Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 01:21:13.047897 kubelet[1989]: E1031 01:21:13.047825 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:21:13.047897 kubelet[1989]: E1031 01:21:13.047893 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 01:21:13.048299 kubelet[1989]: E1031 01:21:13.048153 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-ccmp2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-77d46fd4d5-d7tbw_calico-apiserver(b3fede59-787e-43f4-aace-2a04c63127ad): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 01:21:13.048430 env[1208]: time="2025-10-31T01:21:13.048264324Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 31 01:21:13.049479 kubelet[1989]: E1031 01:21:13.049444 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" podUID="b3fede59-787e-43f4-aace-2a04c63127ad" Oct 31 01:21:13.855283 env[1208]: time="2025-10-31T01:21:13.855210147Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:21:14.004007 env[1208]: time="2025-10-31T01:21:14.003927225Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 31 01:21:14.004366 kubelet[1989]: E1031 01:21:14.004318 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 01:21:14.004455 kubelet[1989]: E1031 01:21:14.004384 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 01:21:14.004709 kubelet[1989]: E1031 01:21:14.004654 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6567d060fad640478881d6f4ca1306d9,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-4fcxz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7df6677f99-4629b_calico-system(1507a89d-ba39-4386-b53c-44b9ad26c13e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 31 01:21:14.004985 env[1208]: time="2025-10-31T01:21:14.004953118Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 31 01:21:14.459656 env[1208]: time="2025-10-31T01:21:14.459594624Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:21:14.533425 env[1208]: time="2025-10-31T01:21:14.533337323Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 31 01:21:14.539270 env[1208]: time="2025-10-31T01:21:14.534064932Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 31 01:21:14.539336 kubelet[1989]: E1031 01:21:14.533620 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 01:21:14.539336 kubelet[1989]: E1031 01:21:14.533683 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 01:21:14.539336 kubelet[1989]: E1031 01:21:14.533947 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2t8cj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-bc87q_calico-system(ebe1f224-5028-4feb-8a17-10f3e8933d4e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 31 01:21:14.539336 kubelet[1989]: E1031 01:21:14.535154 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-bc87q" podUID="ebe1f224-5028-4feb-8a17-10f3e8933d4e" Oct 31 01:21:15.059058 env[1208]: time="2025-10-31T01:21:15.058972223Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:21:15.067549 env[1208]: time="2025-10-31T01:21:15.067465156Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 31 01:21:15.067808 kubelet[1989]: E1031 01:21:15.067743 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 01:21:15.067895 kubelet[1989]: E1031 01:21:15.067823 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 01:21:15.068128 kubelet[1989]: E1031 01:21:15.068064 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-4fcxz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-7df6677f99-4629b_calico-system(1507a89d-ba39-4386-b53c-44b9ad26c13e): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 31 01:21:15.068287 env[1208]: time="2025-10-31T01:21:15.068119445Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 31 01:21:15.069572 kubelet[1989]: E1031 01:21:15.069511 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-7df6677f99-4629b" podUID="1507a89d-ba39-4386-b53c-44b9ad26c13e" Oct 31 01:21:15.430809 env[1208]: time="2025-10-31T01:21:15.430618131Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 01:21:15.431971 env[1208]: time="2025-10-31T01:21:15.431907382Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 31 01:21:15.432251 kubelet[1989]: E1031 01:21:15.432187 1989 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 01:21:15.432334 kubelet[1989]: E1031 01:21:15.432254 1989 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 01:21:15.432498 kubelet[1989]: E1031 01:21:15.432426 1989 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-848hr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-69d4f95648-mnwp9_calico-system(6254973b-926c-41f6-bffb-e73e5b8fa8f8): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 31 01:21:15.433657 kubelet[1989]: E1031 01:21:15.433621 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" podUID="6254973b-926c-41f6-bffb-e73e5b8fa8f8" Oct 31 01:21:16.084089 systemd[1]: Started sshd@23-10.0.0.131:22-10.0.0.1:46556.service. Oct 31 01:21:16.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.131:22-10.0.0.1:46556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:16.085605 kernel: kauditd_printk_skb: 57 callbacks suppressed Oct 31 01:21:16.085661 kernel: audit: type=1130 audit(1761873676.083:1481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.131:22-10.0.0.1:46556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:16.122000 audit[5140]: USER_ACCT pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.123724 sshd[5140]: Accepted publickey for core from 10.0.0.1 port 46556 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:21:16.125380 sshd[5140]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:21:16.130073 systemd-logind[1196]: New session 24 of user core. Oct 31 01:21:16.124000 audit[5140]: CRED_ACQ pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.131753 systemd[1]: Started session-24.scope. Oct 31 01:21:16.138962 kernel: audit: type=1101 audit(1761873676.122:1482): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.139016 kernel: audit: type=1103 audit(1761873676.124:1483): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.139038 kernel: audit: type=1006 audit(1761873676.124:1484): pid=5140 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 31 01:21:16.124000 audit[5140]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3b828d00 a2=3 a3=0 items=0 ppid=1 pid=5140 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:16.149385 kernel: audit: type=1300 audit(1761873676.124:1484): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3b828d00 a2=3 a3=0 items=0 ppid=1 pid=5140 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:16.149498 kernel: audit: type=1327 audit(1761873676.124:1484): proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:16.124000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:16.136000 audit[5140]: USER_START pid=5140 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.163210 kernel: audit: type=1105 audit(1761873676.136:1485): pid=5140 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.163270 kernel: audit: type=1103 audit(1761873676.137:1486): pid=5142 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.137000 audit[5142]: CRED_ACQ pid=5142 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.242307 sshd[5140]: pam_unix(sshd:session): session closed for user core Oct 31 01:21:16.242000 audit[5140]: USER_END pid=5140 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.244557 systemd[1]: sshd@23-10.0.0.131:22-10.0.0.1:46556.service: Deactivated successfully. Oct 31 01:21:16.245512 systemd[1]: session-24.scope: Deactivated successfully. Oct 31 01:21:16.246135 systemd-logind[1196]: Session 24 logged out. Waiting for processes to exit. Oct 31 01:21:16.247372 systemd-logind[1196]: Removed session 24. Oct 31 01:21:16.242000 audit[5140]: CRED_DISP pid=5140 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.256975 kernel: audit: type=1106 audit(1761873676.242:1487): pid=5140 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.257030 kernel: audit: type=1104 audit(1761873676.242:1488): pid=5140 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:16.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.131:22-10.0.0.1:46556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:17.609399 kubelet[1989]: E1031 01:21:17.609334 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-5bw5f" podUID="1096d6b0-357c-45fe-aab1-ad0c209c60ed" Oct 31 01:21:17.755000 audit[5153]: NETFILTER_CFG table=filter:124 family=2 entries=26 op=nft_register_rule pid=5153 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:21:17.755000 audit[5153]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc31d1b150 a2=0 a3=7ffc31d1b13c items=0 ppid=2102 pid=5153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:17.755000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:21:17.763000 audit[5153]: NETFILTER_CFG table=nat:125 family=2 entries=104 op=nft_register_chain pid=5153 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 01:21:17.763000 audit[5153]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffc31d1b150 a2=0 a3=7ffc31d1b13c items=0 ppid=2102 pid=5153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:17.763000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 01:21:21.248939 systemd[1]: Started sshd@24-10.0.0.131:22-10.0.0.1:46564.service. Oct 31 01:21:21.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.131:22-10.0.0.1:46564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:21.251216 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 31 01:21:21.251282 kernel: audit: type=1130 audit(1761873681.248:1492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.131:22-10.0.0.1:46564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:21.289000 audit[5157]: USER_ACCT pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.290873 sshd[5157]: Accepted publickey for core from 10.0.0.1 port 46564 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:21:21.297000 audit[5157]: CRED_ACQ pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.298515 sshd[5157]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:21:21.302060 systemd-logind[1196]: New session 25 of user core. Oct 31 01:21:21.302946 systemd[1]: Started session-25.scope. Oct 31 01:21:21.305853 kernel: audit: type=1101 audit(1761873681.289:1493): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.305898 kernel: audit: type=1103 audit(1761873681.297:1494): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.305924 kernel: audit: type=1006 audit(1761873681.297:1495): pid=5157 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 31 01:21:21.297000 audit[5157]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef4aa3f40 a2=3 a3=0 items=0 ppid=1 pid=5157 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:21.318681 kernel: audit: type=1300 audit(1761873681.297:1495): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef4aa3f40 a2=3 a3=0 items=0 ppid=1 pid=5157 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:21.318732 kernel: audit: type=1327 audit(1761873681.297:1495): proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:21.297000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:21.306000 audit[5157]: USER_START pid=5157 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.329297 kernel: audit: type=1105 audit(1761873681.306:1496): pid=5157 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.329347 kernel: audit: type=1103 audit(1761873681.308:1497): pid=5159 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.308000 audit[5159]: CRED_ACQ pid=5159 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.410608 sshd[5157]: pam_unix(sshd:session): session closed for user core Oct 31 01:21:21.410000 audit[5157]: USER_END pid=5157 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.413358 systemd[1]: sshd@24-10.0.0.131:22-10.0.0.1:46564.service: Deactivated successfully. Oct 31 01:21:21.414527 systemd[1]: session-25.scope: Deactivated successfully. Oct 31 01:21:21.415351 systemd-logind[1196]: Session 25 logged out. Waiting for processes to exit. Oct 31 01:21:21.416295 systemd-logind[1196]: Removed session 25. Oct 31 01:21:21.410000 audit[5157]: CRED_DISP pid=5157 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.427328 kernel: audit: type=1106 audit(1761873681.410:1498): pid=5157 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.427406 kernel: audit: type=1104 audit(1761873681.410:1499): pid=5157 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:21.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.131:22-10.0.0.1:46564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:24.609604 kubelet[1989]: E1031 01:21:24.609535 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-n2thp" podUID="a128bb1b-4c94-45fa-831f-8217c16a0f14" Oct 31 01:21:26.415603 systemd[1]: Started sshd@25-10.0.0.131:22-10.0.0.1:47016.service. Oct 31 01:21:26.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.131:22-10.0.0.1:47016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:26.417700 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 01:21:26.417788 kernel: audit: type=1130 audit(1761873686.413:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.131:22-10.0.0.1:47016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:26.454000 audit[5170]: USER_ACCT pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.456169 sshd[5170]: Accepted publickey for core from 10.0.0.1 port 47016 ssh2: RSA SHA256:lsD8JPjicOMb4IdtMa09c7waD0RtiIVSezpSCib1Gvc Oct 31 01:21:26.461000 audit[5170]: CRED_ACQ pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.463645 sshd[5170]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 01:21:26.467526 systemd-logind[1196]: New session 26 of user core. Oct 31 01:21:26.468089 systemd[1]: Started session-26.scope. Oct 31 01:21:26.513365 kernel: audit: type=1101 audit(1761873686.454:1502): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.513479 kernel: audit: type=1103 audit(1761873686.461:1503): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.513499 kernel: audit: type=1006 audit(1761873686.461:1504): pid=5170 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 31 01:21:26.517467 kernel: audit: type=1300 audit(1761873686.461:1504): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf365c840 a2=3 a3=0 items=0 ppid=1 pid=5170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:26.461000 audit[5170]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf365c840 a2=3 a3=0 items=0 ppid=1 pid=5170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 01:21:26.461000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:26.526310 kernel: audit: type=1327 audit(1761873686.461:1504): proctitle=737368643A20636F7265205B707269765D Oct 31 01:21:26.526378 kernel: audit: type=1105 audit(1761873686.471:1505): pid=5170 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.471000 audit[5170]: USER_START pid=5170 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.473000 audit[5172]: CRED_ACQ pid=5172 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.539655 kernel: audit: type=1103 audit(1761873686.473:1506): pid=5172 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.609437 kubelet[1989]: E1031 01:21:26.609078 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-77d46fd4d5-d7tbw" podUID="b3fede59-787e-43f4-aace-2a04c63127ad" Oct 31 01:21:26.610427 kubelet[1989]: E1031 01:21:26.610359 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-69d4f95648-mnwp9" podUID="6254973b-926c-41f6-bffb-e73e5b8fa8f8" Oct 31 01:21:26.618410 sshd[5170]: pam_unix(sshd:session): session closed for user core Oct 31 01:21:26.617000 audit[5170]: USER_END pid=5170 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.621120 systemd[1]: sshd@25-10.0.0.131:22-10.0.0.1:47016.service: Deactivated successfully. Oct 31 01:21:26.621934 systemd[1]: session-26.scope: Deactivated successfully. Oct 31 01:21:26.622619 systemd-logind[1196]: Session 26 logged out. Waiting for processes to exit. Oct 31 01:21:26.623551 systemd-logind[1196]: Removed session 26. Oct 31 01:21:26.617000 audit[5170]: CRED_DISP pid=5170 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.632801 kernel: audit: type=1106 audit(1761873686.617:1507): pid=5170 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.632859 kernel: audit: type=1104 audit(1761873686.617:1508): pid=5170 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 01:21:26.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.131:22-10.0.0.1:47016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 01:21:27.805040 systemd[1]: run-containerd-runc-k8s.io-4934465256b33de97a97ae06dce78bc887f89e275fbc0ce919562a2bb2458f47-runc.DEL1q3.mount: Deactivated successfully. Oct 31 01:21:27.870853 kubelet[1989]: E1031 01:21:27.870820 1989 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 01:21:28.610054 kubelet[1989]: E1031 01:21:28.609987 1989 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-bc87q" podUID="ebe1f224-5028-4feb-8a17-10f3e8933d4e"