Oct 31 00:51:25.692077 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 31 00:51:25.692097 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Thu Oct 30 23:38:01 -00 2025 Oct 31 00:51:25.692104 kernel: efi: EFI v2.70 by EDK II Oct 31 00:51:25.692110 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Oct 31 00:51:25.692115 kernel: random: crng init done Oct 31 00:51:25.692120 kernel: ACPI: Early table checksum verification disabled Oct 31 00:51:25.692141 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Oct 31 00:51:25.692149 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Oct 31 00:51:25.692155 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 00:51:25.692160 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 00:51:25.692166 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 00:51:25.692171 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 00:51:25.692176 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 00:51:25.692182 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 00:51:25.692190 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 00:51:25.692196 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 00:51:25.692206 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Oct 31 00:51:25.692212 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Oct 31 00:51:25.692218 kernel: NUMA: Failed to initialise from firmware Oct 31 00:51:25.692224 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Oct 31 00:51:25.692230 kernel: NUMA: NODE_DATA [mem 0xdcb0a900-0xdcb0ffff] Oct 31 00:51:25.692236 kernel: Zone ranges: Oct 31 00:51:25.692242 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Oct 31 00:51:25.692250 kernel: DMA32 empty Oct 31 00:51:25.692255 kernel: Normal empty Oct 31 00:51:25.692261 kernel: Movable zone start for each node Oct 31 00:51:25.692267 kernel: Early memory node ranges Oct 31 00:51:25.692273 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Oct 31 00:51:25.692279 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Oct 31 00:51:25.692285 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Oct 31 00:51:25.692290 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Oct 31 00:51:25.692297 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Oct 31 00:51:25.692302 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Oct 31 00:51:25.692308 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Oct 31 00:51:25.692314 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Oct 31 00:51:25.692321 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Oct 31 00:51:25.692326 kernel: psci: probing for conduit method from ACPI. Oct 31 00:51:25.692332 kernel: psci: PSCIv1.1 detected in firmware. Oct 31 00:51:25.692338 kernel: psci: Using standard PSCI v0.2 function IDs Oct 31 00:51:25.692344 kernel: psci: Trusted OS migration not required Oct 31 00:51:25.692352 kernel: psci: SMC Calling Convention v1.1 Oct 31 00:51:25.692358 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Oct 31 00:51:25.692365 kernel: ACPI: SRAT not present Oct 31 00:51:25.692372 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Oct 31 00:51:25.692378 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Oct 31 00:51:25.692384 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Oct 31 00:51:25.692390 kernel: Detected PIPT I-cache on CPU0 Oct 31 00:51:25.692396 kernel: CPU features: detected: GIC system register CPU interface Oct 31 00:51:25.692402 kernel: CPU features: detected: Hardware dirty bit management Oct 31 00:51:25.692408 kernel: CPU features: detected: Spectre-v4 Oct 31 00:51:25.692414 kernel: CPU features: detected: Spectre-BHB Oct 31 00:51:25.692421 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 31 00:51:25.692427 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 31 00:51:25.692434 kernel: CPU features: detected: ARM erratum 1418040 Oct 31 00:51:25.692440 kernel: CPU features: detected: SSBS not fully self-synchronizing Oct 31 00:51:25.692446 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Oct 31 00:51:25.692453 kernel: Policy zone: DMA Oct 31 00:51:25.692460 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=c54831d8f121b00ec4768e5b1793fd4b2eb83931891a70a1aede21bf2f1a9635 Oct 31 00:51:25.692466 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 31 00:51:25.692472 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 31 00:51:25.692478 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 31 00:51:25.692485 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 31 00:51:25.692493 kernel: Memory: 2457336K/2572288K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 114952K reserved, 0K cma-reserved) Oct 31 00:51:25.692500 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 31 00:51:25.692509 kernel: trace event string verifier disabled Oct 31 00:51:25.692516 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 31 00:51:25.692522 kernel: rcu: RCU event tracing is enabled. Oct 31 00:51:25.692529 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 31 00:51:25.692536 kernel: Trampoline variant of Tasks RCU enabled. Oct 31 00:51:25.692542 kernel: Tracing variant of Tasks RCU enabled. Oct 31 00:51:25.692549 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 31 00:51:25.692555 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 31 00:51:25.692561 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 31 00:51:25.692568 kernel: GICv3: 256 SPIs implemented Oct 31 00:51:25.692575 kernel: GICv3: 0 Extended SPIs implemented Oct 31 00:51:25.692580 kernel: GICv3: Distributor has no Range Selector support Oct 31 00:51:25.692586 kernel: Root IRQ handler: gic_handle_irq Oct 31 00:51:25.692592 kernel: GICv3: 16 PPIs implemented Oct 31 00:51:25.692608 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Oct 31 00:51:25.692614 kernel: ACPI: SRAT not present Oct 31 00:51:25.692620 kernel: ITS [mem 0x08080000-0x0809ffff] Oct 31 00:51:25.692626 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Oct 31 00:51:25.692632 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Oct 31 00:51:25.692638 kernel: GICv3: using LPI property table @0x00000000400d0000 Oct 31 00:51:25.692644 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Oct 31 00:51:25.692652 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 31 00:51:25.692658 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 31 00:51:25.692664 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 31 00:51:25.692670 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 31 00:51:25.692676 kernel: arm-pv: using stolen time PV Oct 31 00:51:25.692682 kernel: Console: colour dummy device 80x25 Oct 31 00:51:25.692688 kernel: ACPI: Core revision 20210730 Oct 31 00:51:25.692695 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 31 00:51:25.692701 kernel: pid_max: default: 32768 minimum: 301 Oct 31 00:51:25.692707 kernel: LSM: Security Framework initializing Oct 31 00:51:25.692715 kernel: SELinux: Initializing. Oct 31 00:51:25.692721 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 31 00:51:25.692727 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 31 00:51:25.692733 kernel: rcu: Hierarchical SRCU implementation. Oct 31 00:51:25.692739 kernel: Platform MSI: ITS@0x8080000 domain created Oct 31 00:51:25.692746 kernel: PCI/MSI: ITS@0x8080000 domain created Oct 31 00:51:25.692752 kernel: Remapping and enabling EFI services. Oct 31 00:51:25.692758 kernel: smp: Bringing up secondary CPUs ... Oct 31 00:51:25.692764 kernel: Detected PIPT I-cache on CPU1 Oct 31 00:51:25.692772 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Oct 31 00:51:25.692778 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Oct 31 00:51:25.692784 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 31 00:51:25.692790 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 31 00:51:25.692796 kernel: Detected PIPT I-cache on CPU2 Oct 31 00:51:25.693405 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Oct 31 00:51:25.693418 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Oct 31 00:51:25.693425 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 31 00:51:25.693431 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Oct 31 00:51:25.693437 kernel: Detected PIPT I-cache on CPU3 Oct 31 00:51:25.693449 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Oct 31 00:51:25.693456 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Oct 31 00:51:25.693462 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 31 00:51:25.693468 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Oct 31 00:51:25.693479 kernel: smp: Brought up 1 node, 4 CPUs Oct 31 00:51:25.693487 kernel: SMP: Total of 4 processors activated. Oct 31 00:51:25.693493 kernel: CPU features: detected: 32-bit EL0 Support Oct 31 00:51:25.693500 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 31 00:51:25.693507 kernel: CPU features: detected: Common not Private translations Oct 31 00:51:25.693513 kernel: CPU features: detected: CRC32 instructions Oct 31 00:51:25.693520 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 31 00:51:25.693526 kernel: CPU features: detected: LSE atomic instructions Oct 31 00:51:25.693534 kernel: CPU features: detected: Privileged Access Never Oct 31 00:51:25.693541 kernel: CPU features: detected: RAS Extension Support Oct 31 00:51:25.693548 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Oct 31 00:51:25.693554 kernel: CPU: All CPU(s) started at EL1 Oct 31 00:51:25.693561 kernel: alternatives: patching kernel code Oct 31 00:51:25.693568 kernel: devtmpfs: initialized Oct 31 00:51:25.693575 kernel: KASLR enabled Oct 31 00:51:25.693582 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 31 00:51:25.693588 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 31 00:51:25.693595 kernel: pinctrl core: initialized pinctrl subsystem Oct 31 00:51:25.693601 kernel: SMBIOS 3.0.0 present. Oct 31 00:51:25.693608 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Oct 31 00:51:25.693615 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 31 00:51:25.693621 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 31 00:51:25.693629 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 31 00:51:25.693636 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 31 00:51:25.693643 kernel: audit: initializing netlink subsys (disabled) Oct 31 00:51:25.693650 kernel: audit: type=2000 audit(0.034:1): state=initialized audit_enabled=0 res=1 Oct 31 00:51:25.693656 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 31 00:51:25.693663 kernel: cpuidle: using governor menu Oct 31 00:51:25.693670 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 31 00:51:25.693676 kernel: ASID allocator initialised with 32768 entries Oct 31 00:51:25.693683 kernel: ACPI: bus type PCI registered Oct 31 00:51:25.693691 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 31 00:51:25.693698 kernel: Serial: AMBA PL011 UART driver Oct 31 00:51:25.693704 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 31 00:51:25.693711 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 31 00:51:25.693718 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 31 00:51:25.693726 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 31 00:51:25.693733 kernel: cryptd: max_cpu_qlen set to 1000 Oct 31 00:51:25.693740 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 31 00:51:25.693747 kernel: ACPI: Added _OSI(Module Device) Oct 31 00:51:25.693755 kernel: ACPI: Added _OSI(Processor Device) Oct 31 00:51:25.693762 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 31 00:51:25.693768 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 31 00:51:25.693775 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 31 00:51:25.693782 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 31 00:51:25.693789 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 31 00:51:25.693795 kernel: ACPI: Interpreter enabled Oct 31 00:51:25.693802 kernel: ACPI: Using GIC for interrupt routing Oct 31 00:51:25.693809 kernel: ACPI: MCFG table detected, 1 entries Oct 31 00:51:25.693818 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Oct 31 00:51:25.693824 kernel: printk: console [ttyAMA0] enabled Oct 31 00:51:25.693831 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 31 00:51:25.693988 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 31 00:51:25.694056 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 31 00:51:25.694116 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 31 00:51:25.694195 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Oct 31 00:51:25.694259 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Oct 31 00:51:25.694268 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Oct 31 00:51:25.694274 kernel: PCI host bridge to bus 0000:00 Oct 31 00:51:25.694343 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Oct 31 00:51:25.694399 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 31 00:51:25.694454 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Oct 31 00:51:25.694518 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 31 00:51:25.694611 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Oct 31 00:51:25.694716 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Oct 31 00:51:25.694795 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Oct 31 00:51:25.694859 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Oct 31 00:51:25.694922 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Oct 31 00:51:25.694992 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Oct 31 00:51:25.695052 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Oct 31 00:51:25.695115 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Oct 31 00:51:25.695209 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Oct 31 00:51:25.695264 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 31 00:51:25.695317 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Oct 31 00:51:25.695325 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 31 00:51:25.695332 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 31 00:51:25.695339 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 31 00:51:25.695348 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 31 00:51:25.695355 kernel: iommu: Default domain type: Translated Oct 31 00:51:25.695362 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 31 00:51:25.695369 kernel: vgaarb: loaded Oct 31 00:51:25.695375 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 31 00:51:25.695382 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 31 00:51:25.695389 kernel: PTP clock support registered Oct 31 00:51:25.695396 kernel: Registered efivars operations Oct 31 00:51:25.695403 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 31 00:51:25.695409 kernel: VFS: Disk quotas dquot_6.6.0 Oct 31 00:51:25.695418 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 31 00:51:25.695424 kernel: pnp: PnP ACPI init Oct 31 00:51:25.695490 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Oct 31 00:51:25.695499 kernel: pnp: PnP ACPI: found 1 devices Oct 31 00:51:25.695506 kernel: NET: Registered PF_INET protocol family Oct 31 00:51:25.695512 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 31 00:51:25.695519 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 31 00:51:25.695526 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 31 00:51:25.695534 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 31 00:51:25.695541 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 31 00:51:25.695548 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 31 00:51:25.695554 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 31 00:51:25.695561 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 31 00:51:25.695568 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 31 00:51:25.695574 kernel: PCI: CLS 0 bytes, default 64 Oct 31 00:51:25.695581 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Oct 31 00:51:25.695588 kernel: kvm [1]: HYP mode not available Oct 31 00:51:25.695595 kernel: Initialise system trusted keyrings Oct 31 00:51:25.695602 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 31 00:51:25.695608 kernel: Key type asymmetric registered Oct 31 00:51:25.695615 kernel: Asymmetric key parser 'x509' registered Oct 31 00:51:25.695622 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 31 00:51:25.695628 kernel: io scheduler mq-deadline registered Oct 31 00:51:25.695635 kernel: io scheduler kyber registered Oct 31 00:51:25.695641 kernel: io scheduler bfq registered Oct 31 00:51:25.695648 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 31 00:51:25.695656 kernel: ACPI: button: Power Button [PWRB] Oct 31 00:51:25.695663 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 31 00:51:25.695722 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Oct 31 00:51:25.695731 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 31 00:51:25.695738 kernel: thunder_xcv, ver 1.0 Oct 31 00:51:25.695744 kernel: thunder_bgx, ver 1.0 Oct 31 00:51:25.695751 kernel: nicpf, ver 1.0 Oct 31 00:51:25.695757 kernel: nicvf, ver 1.0 Oct 31 00:51:25.695829 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 31 00:51:25.695887 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-10-31T00:51:25 UTC (1761871885) Oct 31 00:51:25.695896 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 31 00:51:25.695903 kernel: NET: Registered PF_INET6 protocol family Oct 31 00:51:25.695910 kernel: Segment Routing with IPv6 Oct 31 00:51:25.695916 kernel: In-situ OAM (IOAM) with IPv6 Oct 31 00:51:25.695923 kernel: NET: Registered PF_PACKET protocol family Oct 31 00:51:25.695930 kernel: Key type dns_resolver registered Oct 31 00:51:25.695936 kernel: registered taskstats version 1 Oct 31 00:51:25.695952 kernel: Loading compiled-in X.509 certificates Oct 31 00:51:25.695960 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: e62237f95ba4ddc0e942e4538fe1019cd3c2f62a' Oct 31 00:51:25.695966 kernel: Key type .fscrypt registered Oct 31 00:51:25.695973 kernel: Key type fscrypt-provisioning registered Oct 31 00:51:25.695980 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 31 00:51:25.695986 kernel: ima: Allocated hash algorithm: sha1 Oct 31 00:51:25.695993 kernel: ima: No architecture policies found Oct 31 00:51:25.696000 kernel: clk: Disabling unused clocks Oct 31 00:51:25.696006 kernel: Freeing unused kernel memory: 36416K Oct 31 00:51:25.696014 kernel: Run /init as init process Oct 31 00:51:25.696021 kernel: with arguments: Oct 31 00:51:25.696028 kernel: /init Oct 31 00:51:25.696034 kernel: with environment: Oct 31 00:51:25.696040 kernel: HOME=/ Oct 31 00:51:25.696047 kernel: TERM=linux Oct 31 00:51:25.696053 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 31 00:51:25.696062 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 31 00:51:25.696072 systemd[1]: Detected virtualization kvm. Oct 31 00:51:25.696079 systemd[1]: Detected architecture arm64. Oct 31 00:51:25.696086 systemd[1]: Running in initrd. Oct 31 00:51:25.696093 systemd[1]: No hostname configured, using default hostname. Oct 31 00:51:25.696100 systemd[1]: Hostname set to . Oct 31 00:51:25.696108 systemd[1]: Initializing machine ID from VM UUID. Oct 31 00:51:25.696115 systemd[1]: Queued start job for default target initrd.target. Oct 31 00:51:25.696122 systemd[1]: Started systemd-ask-password-console.path. Oct 31 00:51:25.696139 systemd[1]: Reached target cryptsetup.target. Oct 31 00:51:25.696146 systemd[1]: Reached target paths.target. Oct 31 00:51:25.696153 systemd[1]: Reached target slices.target. Oct 31 00:51:25.696160 systemd[1]: Reached target swap.target. Oct 31 00:51:25.696167 systemd[1]: Reached target timers.target. Oct 31 00:51:25.696174 systemd[1]: Listening on iscsid.socket. Oct 31 00:51:25.696181 systemd[1]: Listening on iscsiuio.socket. Oct 31 00:51:25.696190 systemd[1]: Listening on systemd-journald-audit.socket. Oct 31 00:51:25.696197 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 31 00:51:25.696204 systemd[1]: Listening on systemd-journald.socket. Oct 31 00:51:25.696211 systemd[1]: Listening on systemd-networkd.socket. Oct 31 00:51:25.696218 systemd[1]: Listening on systemd-udevd-control.socket. Oct 31 00:51:25.696226 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 31 00:51:25.696233 systemd[1]: Reached target sockets.target. Oct 31 00:51:25.696240 systemd[1]: Starting kmod-static-nodes.service... Oct 31 00:51:25.696247 systemd[1]: Finished network-cleanup.service. Oct 31 00:51:25.696255 systemd[1]: Starting systemd-fsck-usr.service... Oct 31 00:51:25.696262 systemd[1]: Starting systemd-journald.service... Oct 31 00:51:25.696269 systemd[1]: Starting systemd-modules-load.service... Oct 31 00:51:25.696276 systemd[1]: Starting systemd-resolved.service... Oct 31 00:51:25.696284 systemd[1]: Starting systemd-vconsole-setup.service... Oct 31 00:51:25.696291 systemd[1]: Finished kmod-static-nodes.service. Oct 31 00:51:25.696298 systemd[1]: Finished systemd-fsck-usr.service. Oct 31 00:51:25.696305 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 31 00:51:25.696316 systemd-journald[289]: Journal started Oct 31 00:51:25.696361 systemd-journald[289]: Runtime Journal (/run/log/journal/2a90f62de3a24855a5cb99ea7f29ac15) is 6.0M, max 48.7M, 42.6M free. Oct 31 00:51:25.692584 systemd-modules-load[290]: Inserted module 'overlay' Oct 31 00:51:25.703730 systemd[1]: Started systemd-journald.service. Oct 31 00:51:25.703773 kernel: audit: type=1130 audit(1761871885.700:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.701349 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 31 00:51:25.706759 kernel: audit: type=1130 audit(1761871885.703:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.704247 systemd[1]: Finished systemd-vconsole-setup.service. Oct 31 00:51:25.710484 kernel: audit: type=1130 audit(1761871885.707:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.710242 systemd[1]: Starting dracut-cmdline-ask.service... Oct 31 00:51:25.715877 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 31 00:51:25.715147 systemd-resolved[291]: Positive Trust Anchors: Oct 31 00:51:25.715155 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 31 00:51:25.715184 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 31 00:51:25.724085 kernel: Bridge firewalling registered Oct 31 00:51:25.720179 systemd-resolved[291]: Defaulting to hostname 'linux'. Oct 31 00:51:25.721083 systemd[1]: Started systemd-resolved.service. Oct 31 00:51:25.728931 kernel: audit: type=1130 audit(1761871885.725:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.722777 systemd-modules-load[290]: Inserted module 'br_netfilter' Oct 31 00:51:25.725879 systemd[1]: Reached target nss-lookup.target. Oct 31 00:51:25.729915 systemd[1]: Finished dracut-cmdline-ask.service. Oct 31 00:51:25.734879 kernel: audit: type=1130 audit(1761871885.730:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.734899 kernel: SCSI subsystem initialized Oct 31 00:51:25.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.731772 systemd[1]: Starting dracut-cmdline.service... Oct 31 00:51:25.741020 dracut-cmdline[306]: dracut-dracut-053 Oct 31 00:51:25.742385 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 31 00:51:25.742402 kernel: device-mapper: uevent: version 1.0.3 Oct 31 00:51:25.742411 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 31 00:51:25.743317 dracut-cmdline[306]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=c54831d8f121b00ec4768e5b1793fd4b2eb83931891a70a1aede21bf2f1a9635 Oct 31 00:51:25.747304 systemd-modules-load[290]: Inserted module 'dm_multipath' Oct 31 00:51:25.748106 systemd[1]: Finished systemd-modules-load.service. Oct 31 00:51:25.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.750273 systemd[1]: Starting systemd-sysctl.service... Oct 31 00:51:25.752505 kernel: audit: type=1130 audit(1761871885.749:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.758964 systemd[1]: Finished systemd-sysctl.service. Oct 31 00:51:25.762203 kernel: audit: type=1130 audit(1761871885.759:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.807155 kernel: Loading iSCSI transport class v2.0-870. Oct 31 00:51:25.820158 kernel: iscsi: registered transport (tcp) Oct 31 00:51:25.835173 kernel: iscsi: registered transport (qla4xxx) Oct 31 00:51:25.835220 kernel: QLogic iSCSI HBA Driver Oct 31 00:51:25.870398 systemd[1]: Finished dracut-cmdline.service. Oct 31 00:51:25.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.871906 systemd[1]: Starting dracut-pre-udev.service... Oct 31 00:51:25.874537 kernel: audit: type=1130 audit(1761871885.870:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:25.916175 kernel: raid6: neonx8 gen() 13659 MB/s Oct 31 00:51:25.934288 kernel: raid6: neonx8 xor() 10328 MB/s Oct 31 00:51:25.953000 kernel: raid6: neonx4 gen() 13417 MB/s Oct 31 00:51:25.967174 kernel: raid6: neonx4 xor() 11161 MB/s Oct 31 00:51:25.984159 kernel: raid6: neonx2 gen() 12988 MB/s Oct 31 00:51:26.001993 kernel: raid6: neonx2 xor() 10354 MB/s Oct 31 00:51:26.018173 kernel: raid6: neonx1 gen() 10508 MB/s Oct 31 00:51:26.035987 kernel: raid6: neonx1 xor() 8778 MB/s Oct 31 00:51:26.052174 kernel: raid6: int64x8 gen() 6262 MB/s Oct 31 00:51:26.069171 kernel: raid6: int64x8 xor() 3542 MB/s Oct 31 00:51:26.086161 kernel: raid6: int64x4 gen() 7204 MB/s Oct 31 00:51:26.103145 kernel: raid6: int64x4 xor() 3853 MB/s Oct 31 00:51:26.120146 kernel: raid6: int64x2 gen() 6101 MB/s Oct 31 00:51:26.137145 kernel: raid6: int64x2 xor() 3304 MB/s Oct 31 00:51:26.154143 kernel: raid6: int64x1 gen() 5039 MB/s Oct 31 00:51:26.171437 kernel: raid6: int64x1 xor() 2642 MB/s Oct 31 00:51:26.171449 kernel: raid6: using algorithm neonx8 gen() 13659 MB/s Oct 31 00:51:26.171458 kernel: raid6: .... xor() 10328 MB/s, rmw enabled Oct 31 00:51:26.171466 kernel: raid6: using neon recovery algorithm Oct 31 00:51:26.182340 kernel: xor: measuring software checksum speed Oct 31 00:51:26.182359 kernel: 8regs : 17141 MB/sec Oct 31 00:51:26.183397 kernel: 32regs : 20707 MB/sec Oct 31 00:51:26.183414 kernel: arm64_neon : 26787 MB/sec Oct 31 00:51:26.183422 kernel: xor: using function: arm64_neon (26787 MB/sec) Oct 31 00:51:26.237152 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 31 00:51:26.247953 systemd[1]: Finished dracut-pre-udev.service. Oct 31 00:51:26.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:26.250075 systemd[1]: Starting systemd-udevd.service... Oct 31 00:51:26.252284 kernel: audit: type=1130 audit(1761871886.248:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:26.249000 audit: BPF prog-id=7 op=LOAD Oct 31 00:51:26.249000 audit: BPF prog-id=8 op=LOAD Oct 31 00:51:26.274258 systemd-udevd[489]: Using default interface naming scheme 'v252'. Oct 31 00:51:26.278619 systemd[1]: Started systemd-udevd.service. Oct 31 00:51:26.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:26.280731 systemd[1]: Starting dracut-pre-trigger.service... Oct 31 00:51:26.296943 dracut-pre-trigger[491]: rd.md=0: removing MD RAID activation Oct 31 00:51:26.327832 systemd[1]: Finished dracut-pre-trigger.service. Oct 31 00:51:26.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:26.329352 systemd[1]: Starting systemd-udev-trigger.service... Oct 31 00:51:26.364866 systemd[1]: Finished systemd-udev-trigger.service. Oct 31 00:51:26.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:26.398040 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Oct 31 00:51:26.414831 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 31 00:51:26.414846 kernel: GPT:9289727 != 19775487 Oct 31 00:51:26.414854 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 31 00:51:26.414869 kernel: GPT:9289727 != 19775487 Oct 31 00:51:26.414877 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 31 00:51:26.414885 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 31 00:51:26.433160 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (549) Oct 31 00:51:26.433869 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 31 00:51:26.434890 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 31 00:51:26.439327 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 31 00:51:26.442430 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 31 00:51:26.447552 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 31 00:51:26.449112 systemd[1]: Starting disk-uuid.service... Oct 31 00:51:26.455430 disk-uuid[564]: Primary Header is updated. Oct 31 00:51:26.455430 disk-uuid[564]: Secondary Entries is updated. Oct 31 00:51:26.455430 disk-uuid[564]: Secondary Header is updated. Oct 31 00:51:26.459141 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 31 00:51:26.463145 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 31 00:51:26.466149 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 31 00:51:27.466165 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 31 00:51:27.466353 disk-uuid[565]: The operation has completed successfully. Oct 31 00:51:27.490370 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 31 00:51:27.490467 systemd[1]: Finished disk-uuid.service. Oct 31 00:51:27.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.496289 systemd[1]: Starting verity-setup.service... Oct 31 00:51:27.512158 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 31 00:51:27.534963 systemd[1]: Found device dev-mapper-usr.device. Oct 31 00:51:27.536654 systemd[1]: Mounting sysusr-usr.mount... Oct 31 00:51:27.537338 systemd[1]: Finished verity-setup.service. Oct 31 00:51:27.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.582166 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 31 00:51:27.582578 systemd[1]: Mounted sysusr-usr.mount. Oct 31 00:51:27.583373 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 31 00:51:27.584059 systemd[1]: Starting ignition-setup.service... Oct 31 00:51:27.585755 systemd[1]: Starting parse-ip-for-networkd.service... Oct 31 00:51:27.593412 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 31 00:51:27.593445 kernel: BTRFS info (device vda6): using free space tree Oct 31 00:51:27.593455 kernel: BTRFS info (device vda6): has skinny extents Oct 31 00:51:27.601998 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 31 00:51:27.608157 systemd[1]: Finished ignition-setup.service. Oct 31 00:51:27.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.610181 systemd[1]: Starting ignition-fetch-offline.service... Oct 31 00:51:27.661925 ignition[651]: Ignition 2.14.0 Oct 31 00:51:27.661944 ignition[651]: Stage: fetch-offline Oct 31 00:51:27.661987 ignition[651]: no configs at "/usr/lib/ignition/base.d" Oct 31 00:51:27.661997 ignition[651]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 00:51:27.662169 ignition[651]: parsed url from cmdline: "" Oct 31 00:51:27.662172 ignition[651]: no config URL provided Oct 31 00:51:27.662177 ignition[651]: reading system config file "/usr/lib/ignition/user.ign" Oct 31 00:51:27.662184 ignition[651]: no config at "/usr/lib/ignition/user.ign" Oct 31 00:51:27.662203 ignition[651]: op(1): [started] loading QEMU firmware config module Oct 31 00:51:27.662208 ignition[651]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 31 00:51:27.672242 systemd[1]: Finished parse-ip-for-networkd.service. Oct 31 00:51:27.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.673000 audit: BPF prog-id=9 op=LOAD Oct 31 00:51:27.674436 systemd[1]: Starting systemd-networkd.service... Oct 31 00:51:27.682498 ignition[651]: op(1): [finished] loading QEMU firmware config module Oct 31 00:51:27.696262 systemd-networkd[742]: lo: Link UP Oct 31 00:51:27.696272 systemd-networkd[742]: lo: Gained carrier Oct 31 00:51:27.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.696656 systemd-networkd[742]: Enumeration completed Oct 31 00:51:27.696746 systemd[1]: Started systemd-networkd.service. Oct 31 00:51:27.696831 systemd-networkd[742]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 31 00:51:27.697841 systemd-networkd[742]: eth0: Link UP Oct 31 00:51:27.697844 systemd-networkd[742]: eth0: Gained carrier Oct 31 00:51:27.697993 systemd[1]: Reached target network.target. Oct 31 00:51:27.699875 systemd[1]: Starting iscsiuio.service... Oct 31 00:51:27.707303 systemd[1]: Started iscsiuio.service. Oct 31 00:51:27.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.708767 systemd[1]: Starting iscsid.service... Oct 31 00:51:27.712582 iscsid[748]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 31 00:51:27.712582 iscsid[748]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 31 00:51:27.712582 iscsid[748]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 31 00:51:27.712582 iscsid[748]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 31 00:51:27.712582 iscsid[748]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 31 00:51:27.712582 iscsid[748]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 31 00:51:27.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.715479 systemd[1]: Started iscsid.service. Oct 31 00:51:27.719629 systemd-networkd[742]: eth0: DHCPv4 address 10.0.0.85/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 31 00:51:27.720314 systemd[1]: Starting dracut-initqueue.service... Oct 31 00:51:27.730922 systemd[1]: Finished dracut-initqueue.service. Oct 31 00:51:27.732794 systemd[1]: Reached target remote-fs-pre.target. Oct 31 00:51:27.733629 systemd[1]: Reached target remote-cryptsetup.target. Oct 31 00:51:27.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.735231 systemd[1]: Reached target remote-fs.target. Oct 31 00:51:27.737506 systemd[1]: Starting dracut-pre-mount.service... Oct 31 00:51:27.745214 systemd[1]: Finished dracut-pre-mount.service. Oct 31 00:51:27.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.751222 ignition[651]: parsing config with SHA512: 9e4253bc9949ec7ccc19152760c3176404f722afccfd37cb2f89ea693280691ae916125abc9d59a97fcfb96c8320808a03501c8ff04ad530491d9a72534998f5 Oct 31 00:51:27.757891 unknown[651]: fetched base config from "system" Oct 31 00:51:27.757902 unknown[651]: fetched user config from "qemu" Oct 31 00:51:27.758318 ignition[651]: fetch-offline: fetch-offline passed Oct 31 00:51:27.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.759381 systemd[1]: Finished ignition-fetch-offline.service. Oct 31 00:51:27.758369 ignition[651]: Ignition finished successfully Oct 31 00:51:27.760741 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 31 00:51:27.761492 systemd[1]: Starting ignition-kargs.service... Oct 31 00:51:27.770438 ignition[763]: Ignition 2.14.0 Oct 31 00:51:27.770446 ignition[763]: Stage: kargs Oct 31 00:51:27.770535 ignition[763]: no configs at "/usr/lib/ignition/base.d" Oct 31 00:51:27.770544 ignition[763]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 00:51:27.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.772480 systemd[1]: Finished ignition-kargs.service. Oct 31 00:51:27.771335 ignition[763]: kargs: kargs passed Oct 31 00:51:27.774425 systemd[1]: Starting ignition-disks.service... Oct 31 00:51:27.771376 ignition[763]: Ignition finished successfully Oct 31 00:51:27.780675 ignition[769]: Ignition 2.14.0 Oct 31 00:51:27.780685 ignition[769]: Stage: disks Oct 31 00:51:27.780773 ignition[769]: no configs at "/usr/lib/ignition/base.d" Oct 31 00:51:27.780783 ignition[769]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 00:51:27.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.782521 systemd[1]: Finished ignition-disks.service. Oct 31 00:51:27.781661 ignition[769]: disks: disks passed Oct 31 00:51:27.783298 systemd[1]: Reached target initrd-root-device.target. Oct 31 00:51:27.781699 ignition[769]: Ignition finished successfully Oct 31 00:51:27.784639 systemd[1]: Reached target local-fs-pre.target. Oct 31 00:51:27.785800 systemd[1]: Reached target local-fs.target. Oct 31 00:51:27.786884 systemd[1]: Reached target sysinit.target. Oct 31 00:51:27.788032 systemd[1]: Reached target basic.target. Oct 31 00:51:27.789913 systemd[1]: Starting systemd-fsck-root.service... Oct 31 00:51:27.800211 systemd-fsck[777]: ROOT: clean, 637/553520 files, 56031/553472 blocks Oct 31 00:51:27.803819 systemd[1]: Finished systemd-fsck-root.service. Oct 31 00:51:27.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.808510 systemd[1]: Mounting sysroot.mount... Oct 31 00:51:27.815155 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 31 00:51:27.815227 systemd[1]: Mounted sysroot.mount. Oct 31 00:51:27.815850 systemd[1]: Reached target initrd-root-fs.target. Oct 31 00:51:27.817859 systemd[1]: Mounting sysroot-usr.mount... Oct 31 00:51:27.818675 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 31 00:51:27.818714 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 31 00:51:27.818738 systemd[1]: Reached target ignition-diskful.target. Oct 31 00:51:27.820432 systemd[1]: Mounted sysroot-usr.mount. Oct 31 00:51:27.821849 systemd[1]: Starting initrd-setup-root.service... Oct 31 00:51:27.826299 initrd-setup-root[787]: cut: /sysroot/etc/passwd: No such file or directory Oct 31 00:51:27.830732 initrd-setup-root[795]: cut: /sysroot/etc/group: No such file or directory Oct 31 00:51:27.834794 initrd-setup-root[803]: cut: /sysroot/etc/shadow: No such file or directory Oct 31 00:51:27.838659 initrd-setup-root[811]: cut: /sysroot/etc/gshadow: No such file or directory Oct 31 00:51:27.864953 systemd[1]: Finished initrd-setup-root.service. Oct 31 00:51:27.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.866919 systemd[1]: Starting ignition-mount.service... Oct 31 00:51:27.868660 systemd[1]: Starting sysroot-boot.service... Oct 31 00:51:27.873954 bash[828]: umount: /sysroot/usr/share/oem: not mounted. Oct 31 00:51:27.882901 ignition[830]: INFO : Ignition 2.14.0 Oct 31 00:51:27.882901 ignition[830]: INFO : Stage: mount Oct 31 00:51:27.885270 ignition[830]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 31 00:51:27.885270 ignition[830]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 00:51:27.885270 ignition[830]: INFO : mount: mount passed Oct 31 00:51:27.885270 ignition[830]: INFO : Ignition finished successfully Oct 31 00:51:27.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:27.885325 systemd[1]: Finished sysroot-boot.service. Oct 31 00:51:27.886780 systemd[1]: Finished ignition-mount.service. Oct 31 00:51:28.545145 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 31 00:51:28.552147 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (839) Oct 31 00:51:28.554231 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Oct 31 00:51:28.554254 kernel: BTRFS info (device vda6): using free space tree Oct 31 00:51:28.554264 kernel: BTRFS info (device vda6): has skinny extents Oct 31 00:51:28.557454 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 31 00:51:28.558882 systemd[1]: Starting ignition-files.service... Oct 31 00:51:28.572645 ignition[859]: INFO : Ignition 2.14.0 Oct 31 00:51:28.572645 ignition[859]: INFO : Stage: files Oct 31 00:51:28.574231 ignition[859]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 31 00:51:28.574231 ignition[859]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 00:51:28.574231 ignition[859]: DEBUG : files: compiled without relabeling support, skipping Oct 31 00:51:28.577107 ignition[859]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 31 00:51:28.577107 ignition[859]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 31 00:51:28.577107 ignition[859]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 31 00:51:28.580813 ignition[859]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 31 00:51:28.580813 ignition[859]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 31 00:51:28.580813 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Oct 31 00:51:28.580813 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Oct 31 00:51:28.577969 unknown[859]: wrote ssh authorized keys file for user: core Oct 31 00:51:28.614675 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 31 00:51:28.775369 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Oct 31 00:51:28.775369 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Oct 31 00:51:28.778473 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Oct 31 00:51:28.912277 systemd-networkd[742]: eth0: Gained IPv6LL Oct 31 00:51:29.170653 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Oct 31 00:51:29.481987 ignition[859]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Oct 31 00:51:29.484117 ignition[859]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 31 00:51:29.509827 ignition[859]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 31 00:51:29.509827 ignition[859]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Oct 31 00:51:29.509827 ignition[859]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 31 00:51:29.509827 ignition[859]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 31 00:51:29.509827 ignition[859]: INFO : files: files passed Oct 31 00:51:29.509827 ignition[859]: INFO : Ignition finished successfully Oct 31 00:51:29.510641 systemd[1]: Finished ignition-files.service. Oct 31 00:51:29.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.528120 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 31 00:51:29.528846 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 31 00:51:29.529512 systemd[1]: Starting ignition-quench.service... Oct 31 00:51:29.534899 initrd-setup-root-after-ignition[883]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 31 00:51:29.536864 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 31 00:51:29.536967 systemd[1]: Finished ignition-quench.service. Oct 31 00:51:29.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.538697 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 31 00:51:29.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.540388 initrd-setup-root-after-ignition[886]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 31 00:51:29.539819 systemd[1]: Reached target ignition-complete.target. Oct 31 00:51:29.541605 systemd[1]: Starting initrd-parse-etc.service... Oct 31 00:51:29.553790 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 31 00:51:29.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.553883 systemd[1]: Finished initrd-parse-etc.service. Oct 31 00:51:29.554721 systemd[1]: Reached target initrd-fs.target. Oct 31 00:51:29.555728 systemd[1]: Reached target initrd.target. Oct 31 00:51:29.557699 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 31 00:51:29.558470 systemd[1]: Starting dracut-pre-pivot.service... Oct 31 00:51:29.568609 systemd[1]: Finished dracut-pre-pivot.service. Oct 31 00:51:29.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.570030 systemd[1]: Starting initrd-cleanup.service... Oct 31 00:51:29.577970 systemd[1]: Stopped target nss-lookup.target. Oct 31 00:51:29.578822 systemd[1]: Stopped target remote-cryptsetup.target. Oct 31 00:51:29.580016 systemd[1]: Stopped target timers.target. Oct 31 00:51:29.581151 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 31 00:51:29.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.581261 systemd[1]: Stopped dracut-pre-pivot.service. Oct 31 00:51:29.582389 systemd[1]: Stopped target initrd.target. Oct 31 00:51:29.583555 systemd[1]: Stopped target basic.target. Oct 31 00:51:29.584644 systemd[1]: Stopped target ignition-complete.target. Oct 31 00:51:29.585743 systemd[1]: Stopped target ignition-diskful.target. Oct 31 00:51:29.586843 systemd[1]: Stopped target initrd-root-device.target. Oct 31 00:51:29.588023 systemd[1]: Stopped target remote-fs.target. Oct 31 00:51:29.589086 systemd[1]: Stopped target remote-fs-pre.target. Oct 31 00:51:29.590433 systemd[1]: Stopped target sysinit.target. Oct 31 00:51:29.591424 systemd[1]: Stopped target local-fs.target. Oct 31 00:51:29.592685 systemd[1]: Stopped target local-fs-pre.target. Oct 31 00:51:29.593725 systemd[1]: Stopped target swap.target. Oct 31 00:51:29.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.594696 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 31 00:51:29.594808 systemd[1]: Stopped dracut-pre-mount.service. Oct 31 00:51:29.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.596007 systemd[1]: Stopped target cryptsetup.target. Oct 31 00:51:29.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.596887 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 31 00:51:29.596998 systemd[1]: Stopped dracut-initqueue.service. Oct 31 00:51:29.598185 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 31 00:51:29.598278 systemd[1]: Stopped ignition-fetch-offline.service. Oct 31 00:51:29.599374 systemd[1]: Stopped target paths.target. Oct 31 00:51:29.600349 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 31 00:51:29.605164 systemd[1]: Stopped systemd-ask-password-console.path. Oct 31 00:51:29.605905 systemd[1]: Stopped target slices.target. Oct 31 00:51:29.606964 systemd[1]: Stopped target sockets.target. Oct 31 00:51:29.607937 systemd[1]: iscsid.socket: Deactivated successfully. Oct 31 00:51:29.608011 systemd[1]: Closed iscsid.socket. Oct 31 00:51:29.608853 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 31 00:51:29.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.608923 systemd[1]: Closed iscsiuio.socket. Oct 31 00:51:29.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.609886 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 31 00:51:29.609994 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 31 00:51:29.610960 systemd[1]: ignition-files.service: Deactivated successfully. Oct 31 00:51:29.611056 systemd[1]: Stopped ignition-files.service. Oct 31 00:51:29.612824 systemd[1]: Stopping ignition-mount.service... Oct 31 00:51:29.614409 systemd[1]: Stopping sysroot-boot.service... Oct 31 00:51:29.615457 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 31 00:51:29.615566 systemd[1]: Stopped systemd-udev-trigger.service. Oct 31 00:51:29.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.616775 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 31 00:51:29.616860 systemd[1]: Stopped dracut-pre-trigger.service. Oct 31 00:51:29.621332 ignition[899]: INFO : Ignition 2.14.0 Oct 31 00:51:29.621332 ignition[899]: INFO : Stage: umount Oct 31 00:51:29.621332 ignition[899]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 31 00:51:29.621332 ignition[899]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 31 00:51:29.621332 ignition[899]: INFO : umount: umount passed Oct 31 00:51:29.621332 ignition[899]: INFO : Ignition finished successfully Oct 31 00:51:29.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.620870 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 31 00:51:29.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.620973 systemd[1]: Finished initrd-cleanup.service. Oct 31 00:51:29.622097 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 31 00:51:29.622205 systemd[1]: Stopped ignition-mount.service. Oct 31 00:51:29.623012 systemd[1]: Stopped target network.target. Oct 31 00:51:29.623894 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 31 00:51:29.623950 systemd[1]: Stopped ignition-disks.service. Oct 31 00:51:29.625384 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 31 00:51:29.625423 systemd[1]: Stopped ignition-kargs.service. Oct 31 00:51:29.627004 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 31 00:51:29.627040 systemd[1]: Stopped ignition-setup.service. Oct 31 00:51:29.629210 systemd[1]: Stopping systemd-networkd.service... Oct 31 00:51:29.630852 systemd[1]: Stopping systemd-resolved.service... Oct 31 00:51:29.633464 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 31 00:51:29.638201 systemd-networkd[742]: eth0: DHCPv6 lease lost Oct 31 00:51:29.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.639675 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 31 00:51:29.639772 systemd[1]: Stopped systemd-networkd.service. Oct 31 00:51:29.642561 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 31 00:51:29.642590 systemd[1]: Closed systemd-networkd.socket. Oct 31 00:51:29.644141 systemd[1]: Stopping network-cleanup.service... Oct 31 00:51:29.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.646159 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 31 00:51:29.646219 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 31 00:51:29.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.653000 audit: BPF prog-id=9 op=UNLOAD Oct 31 00:51:29.647549 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 31 00:51:29.647588 systemd[1]: Stopped systemd-sysctl.service. Oct 31 00:51:29.649898 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 31 00:51:29.649953 systemd[1]: Stopped systemd-modules-load.service. Oct 31 00:51:29.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.650748 systemd[1]: Stopping systemd-udevd.service... Oct 31 00:51:29.655971 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 31 00:51:29.656422 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 31 00:51:29.656506 systemd[1]: Stopped systemd-resolved.service. Oct 31 00:51:29.661000 audit: BPF prog-id=6 op=UNLOAD Oct 31 00:51:29.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.660972 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 31 00:51:29.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.661074 systemd[1]: Stopped network-cleanup.service. Oct 31 00:51:29.662104 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 31 00:51:29.662231 systemd[1]: Stopped systemd-udevd.service. Oct 31 00:51:29.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.663150 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 31 00:51:29.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.663185 systemd[1]: Closed systemd-udevd-control.socket. Oct 31 00:51:29.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.664176 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 31 00:51:29.664212 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 31 00:51:29.665230 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 31 00:51:29.665266 systemd[1]: Stopped dracut-pre-udev.service. Oct 31 00:51:29.666483 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 31 00:51:29.666519 systemd[1]: Stopped dracut-cmdline.service. Oct 31 00:51:29.667512 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 31 00:51:29.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.667546 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 31 00:51:29.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.669497 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 31 00:51:29.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.670751 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 31 00:51:29.670810 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 31 00:51:29.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.672596 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 31 00:51:29.672633 systemd[1]: Stopped kmod-static-nodes.service. Oct 31 00:51:29.673301 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 31 00:51:29.673337 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 31 00:51:29.675057 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 31 00:51:29.675470 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 31 00:51:29.675562 systemd[1]: Stopped sysroot-boot.service. Oct 31 00:51:29.677037 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 31 00:51:29.677112 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 31 00:51:29.678088 systemd[1]: Reached target initrd-switch-root.target. Oct 31 00:51:29.679250 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 31 00:51:29.679293 systemd[1]: Stopped initrd-setup-root.service. Oct 31 00:51:29.681293 systemd[1]: Starting initrd-switch-root.service... Oct 31 00:51:29.687655 systemd[1]: Switching root. Oct 31 00:51:29.706555 iscsid[748]: iscsid shutting down. Oct 31 00:51:29.707119 systemd-journald[289]: Journal stopped Oct 31 00:51:31.714923 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Oct 31 00:51:31.714995 kernel: SELinux: Class mctp_socket not defined in policy. Oct 31 00:51:31.715010 kernel: SELinux: Class anon_inode not defined in policy. Oct 31 00:51:31.715021 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 31 00:51:31.715031 kernel: SELinux: policy capability network_peer_controls=1 Oct 31 00:51:31.715041 kernel: SELinux: policy capability open_perms=1 Oct 31 00:51:31.715054 kernel: SELinux: policy capability extended_socket_class=1 Oct 31 00:51:31.715066 kernel: SELinux: policy capability always_check_network=0 Oct 31 00:51:31.715077 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 31 00:51:31.715087 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 31 00:51:31.715097 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 31 00:51:31.715119 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 31 00:51:31.715146 systemd[1]: Successfully loaded SELinux policy in 32.834ms. Oct 31 00:51:31.715161 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.182ms. Oct 31 00:51:31.715173 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 31 00:51:31.715189 systemd[1]: Detected virtualization kvm. Oct 31 00:51:31.715211 systemd[1]: Detected architecture arm64. Oct 31 00:51:31.715221 systemd[1]: Detected first boot. Oct 31 00:51:31.715232 systemd[1]: Initializing machine ID from VM UUID. Oct 31 00:51:31.715243 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Oct 31 00:51:31.715254 systemd[1]: Populated /etc with preset unit settings. Oct 31 00:51:31.715265 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 31 00:51:31.715277 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 31 00:51:31.715294 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 31 00:51:31.715305 kernel: kauditd_printk_skb: 79 callbacks suppressed Oct 31 00:51:31.715314 kernel: audit: type=1334 audit(1761871891.597:83): prog-id=12 op=LOAD Oct 31 00:51:31.715327 kernel: audit: type=1334 audit(1761871891.597:84): prog-id=3 op=UNLOAD Oct 31 00:51:31.715337 kernel: audit: type=1334 audit(1761871891.598:85): prog-id=13 op=LOAD Oct 31 00:51:31.715347 kernel: audit: type=1334 audit(1761871891.598:86): prog-id=14 op=LOAD Oct 31 00:51:31.715357 kernel: audit: type=1334 audit(1761871891.598:87): prog-id=4 op=UNLOAD Oct 31 00:51:31.715366 kernel: audit: type=1334 audit(1761871891.598:88): prog-id=5 op=UNLOAD Oct 31 00:51:31.715378 kernel: audit: type=1334 audit(1761871891.600:89): prog-id=15 op=LOAD Oct 31 00:51:31.715387 kernel: audit: type=1334 audit(1761871891.600:90): prog-id=12 op=UNLOAD Oct 31 00:51:31.715397 kernel: audit: type=1334 audit(1761871891.600:91): prog-id=16 op=LOAD Oct 31 00:51:31.715408 kernel: audit: type=1334 audit(1761871891.601:92): prog-id=17 op=LOAD Oct 31 00:51:31.715419 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 31 00:51:31.715430 systemd[1]: Stopped iscsiuio.service. Oct 31 00:51:31.715441 systemd[1]: iscsid.service: Deactivated successfully. Oct 31 00:51:31.715452 systemd[1]: Stopped iscsid.service. Oct 31 00:51:31.715464 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 31 00:51:31.715474 systemd[1]: Stopped initrd-switch-root.service. Oct 31 00:51:31.715485 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 31 00:51:31.715495 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 31 00:51:31.715506 systemd[1]: Created slice system-addon\x2drun.slice. Oct 31 00:51:31.715516 systemd[1]: Created slice system-getty.slice. Oct 31 00:51:31.715528 systemd[1]: Created slice system-modprobe.slice. Oct 31 00:51:31.715538 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 31 00:51:31.715549 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 31 00:51:31.715560 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 31 00:51:31.715570 systemd[1]: Created slice user.slice. Oct 31 00:51:31.715581 systemd[1]: Started systemd-ask-password-console.path. Oct 31 00:51:31.715593 systemd[1]: Started systemd-ask-password-wall.path. Oct 31 00:51:31.715603 systemd[1]: Set up automount boot.automount. Oct 31 00:51:31.715614 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 31 00:51:31.715634 systemd[1]: Stopped target initrd-switch-root.target. Oct 31 00:51:31.715645 systemd[1]: Stopped target initrd-fs.target. Oct 31 00:51:31.715656 systemd[1]: Stopped target initrd-root-fs.target. Oct 31 00:51:31.715666 systemd[1]: Reached target integritysetup.target. Oct 31 00:51:31.715677 systemd[1]: Reached target remote-cryptsetup.target. Oct 31 00:51:31.715688 systemd[1]: Reached target remote-fs.target. Oct 31 00:51:31.715699 systemd[1]: Reached target slices.target. Oct 31 00:51:31.715709 systemd[1]: Reached target swap.target. Oct 31 00:51:31.715719 systemd[1]: Reached target torcx.target. Oct 31 00:51:31.715731 systemd[1]: Reached target veritysetup.target. Oct 31 00:51:31.715745 systemd[1]: Listening on systemd-coredump.socket. Oct 31 00:51:31.715755 systemd[1]: Listening on systemd-initctl.socket. Oct 31 00:51:31.715765 systemd[1]: Listening on systemd-networkd.socket. Oct 31 00:51:31.715775 systemd[1]: Listening on systemd-udevd-control.socket. Oct 31 00:51:31.715786 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 31 00:51:31.715796 systemd[1]: Listening on systemd-userdbd.socket. Oct 31 00:51:31.715806 systemd[1]: Mounting dev-hugepages.mount... Oct 31 00:51:31.715817 systemd[1]: Mounting dev-mqueue.mount... Oct 31 00:51:31.715827 systemd[1]: Mounting media.mount... Oct 31 00:51:31.715839 systemd[1]: Mounting sys-kernel-debug.mount... Oct 31 00:51:31.715849 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 31 00:51:31.715860 systemd[1]: Mounting tmp.mount... Oct 31 00:51:31.715870 systemd[1]: Starting flatcar-tmpfiles.service... Oct 31 00:51:31.715881 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 00:51:31.715891 systemd[1]: Starting kmod-static-nodes.service... Oct 31 00:51:31.715906 systemd[1]: Starting modprobe@configfs.service... Oct 31 00:51:31.715918 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 00:51:31.715938 systemd[1]: Starting modprobe@drm.service... Oct 31 00:51:31.715961 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 00:51:31.715974 systemd[1]: Starting modprobe@fuse.service... Oct 31 00:51:31.715985 systemd[1]: Starting modprobe@loop.service... Oct 31 00:51:31.715998 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 31 00:51:31.716009 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 31 00:51:31.716019 systemd[1]: Stopped systemd-fsck-root.service. Oct 31 00:51:31.716029 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 31 00:51:31.716040 systemd[1]: Stopped systemd-fsck-usr.service. Oct 31 00:51:31.716052 systemd[1]: Stopped systemd-journald.service. Oct 31 00:51:31.716063 kernel: fuse: init (API version 7.34) Oct 31 00:51:31.716076 kernel: loop: module loaded Oct 31 00:51:31.716086 systemd[1]: Starting systemd-journald.service... Oct 31 00:51:31.716097 systemd[1]: Starting systemd-modules-load.service... Oct 31 00:51:31.716108 systemd[1]: Starting systemd-network-generator.service... Oct 31 00:51:31.716118 systemd[1]: Starting systemd-remount-fs.service... Oct 31 00:51:31.716145 systemd[1]: Starting systemd-udev-trigger.service... Oct 31 00:51:31.716156 systemd[1]: verity-setup.service: Deactivated successfully. Oct 31 00:51:31.716166 systemd[1]: Stopped verity-setup.service. Oct 31 00:51:31.716178 systemd[1]: Mounted dev-hugepages.mount. Oct 31 00:51:31.716188 systemd[1]: Mounted dev-mqueue.mount. Oct 31 00:51:31.716198 systemd[1]: Mounted media.mount. Oct 31 00:51:31.716209 systemd[1]: Mounted sys-kernel-debug.mount. Oct 31 00:51:31.716219 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 31 00:51:31.716230 systemd[1]: Mounted tmp.mount. Oct 31 00:51:31.716249 systemd-journald[1002]: Journal started Oct 31 00:51:31.716316 systemd-journald[1002]: Runtime Journal (/run/log/journal/2a90f62de3a24855a5cb99ea7f29ac15) is 6.0M, max 48.7M, 42.6M free. Oct 31 00:51:31.716347 systemd[1]: Finished kmod-static-nodes.service. Oct 31 00:51:29.764000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 31 00:51:29.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 31 00:51:29.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 31 00:51:29.850000 audit: BPF prog-id=10 op=LOAD Oct 31 00:51:29.850000 audit: BPF prog-id=10 op=UNLOAD Oct 31 00:51:29.850000 audit: BPF prog-id=11 op=LOAD Oct 31 00:51:29.850000 audit: BPF prog-id=11 op=UNLOAD Oct 31 00:51:29.888000 audit[933]: AVC avc: denied { associate } for pid=933 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Oct 31 00:51:29.888000 audit[933]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400014589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=916 pid=933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:29.888000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Oct 31 00:51:29.889000 audit[933]: AVC avc: denied { associate } for pid=933 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Oct 31 00:51:29.889000 audit[933]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145975 a2=1ed a3=0 items=2 ppid=916 pid=933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:29.889000 audit: CWD cwd="/" Oct 31 00:51:29.889000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 00:51:29.889000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 00:51:29.889000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Oct 31 00:51:31.597000 audit: BPF prog-id=12 op=LOAD Oct 31 00:51:31.597000 audit: BPF prog-id=3 op=UNLOAD Oct 31 00:51:31.598000 audit: BPF prog-id=13 op=LOAD Oct 31 00:51:31.598000 audit: BPF prog-id=14 op=LOAD Oct 31 00:51:31.598000 audit: BPF prog-id=4 op=UNLOAD Oct 31 00:51:31.598000 audit: BPF prog-id=5 op=UNLOAD Oct 31 00:51:31.600000 audit: BPF prog-id=15 op=LOAD Oct 31 00:51:31.600000 audit: BPF prog-id=12 op=UNLOAD Oct 31 00:51:31.600000 audit: BPF prog-id=16 op=LOAD Oct 31 00:51:31.601000 audit: BPF prog-id=17 op=LOAD Oct 31 00:51:31.601000 audit: BPF prog-id=13 op=UNLOAD Oct 31 00:51:31.601000 audit: BPF prog-id=14 op=UNLOAD Oct 31 00:51:31.602000 audit: BPF prog-id=18 op=LOAD Oct 31 00:51:31.602000 audit: BPF prog-id=15 op=UNLOAD Oct 31 00:51:31.603000 audit: BPF prog-id=19 op=LOAD Oct 31 00:51:31.603000 audit: BPF prog-id=20 op=LOAD Oct 31 00:51:31.603000 audit: BPF prog-id=16 op=UNLOAD Oct 31 00:51:31.603000 audit: BPF prog-id=17 op=UNLOAD Oct 31 00:51:31.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.617000 audit: BPF prog-id=18 op=UNLOAD Oct 31 00:51:31.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.692000 audit: BPF prog-id=21 op=LOAD Oct 31 00:51:31.693000 audit: BPF prog-id=22 op=LOAD Oct 31 00:51:31.693000 audit: BPF prog-id=23 op=LOAD Oct 31 00:51:31.693000 audit: BPF prog-id=19 op=UNLOAD Oct 31 00:51:31.693000 audit: BPF prog-id=20 op=UNLOAD Oct 31 00:51:31.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.713000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 31 00:51:31.713000 audit[1002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffc89895d0 a2=4000 a3=1 items=0 ppid=1 pid=1002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:31.713000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 31 00:51:31.596216 systemd[1]: Queued start job for default target multi-user.target. Oct 31 00:51:31.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.886394 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 31 00:51:31.596228 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 31 00:51:29.886718 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 31 00:51:31.604518 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 31 00:51:29.886738 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 31 00:51:29.886769 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 31 00:51:29.886779 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 31 00:51:29.886809 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 31 00:51:29.886821 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 31 00:51:29.887032 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 31 00:51:29.887067 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 31 00:51:29.887079 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 31 00:51:29.887837 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 31 00:51:29.887872 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 31 00:51:29.887890 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Oct 31 00:51:31.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:29.887904 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 31 00:51:29.887931 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Oct 31 00:51:29.887944 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 31 00:51:31.339945 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:31Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 31 00:51:31.719160 systemd[1]: Started systemd-journald.service. Oct 31 00:51:31.340230 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:31Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 31 00:51:31.340333 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:31Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 31 00:51:31.340490 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:31Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 31 00:51:31.719341 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 31 00:51:31.340541 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:31Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 31 00:51:31.340597 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-10-31T00:51:31Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 31 00:51:31.719505 systemd[1]: Finished modprobe@configfs.service. Oct 31 00:51:31.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.720511 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 00:51:31.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.720887 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 00:51:31.721954 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 31 00:51:31.722102 systemd[1]: Finished modprobe@drm.service. Oct 31 00:51:31.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.723025 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 00:51:31.723647 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 00:51:31.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.724706 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 31 00:51:31.724851 systemd[1]: Finished modprobe@fuse.service. Oct 31 00:51:31.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.725742 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 31 00:51:31.725882 systemd[1]: Finished modprobe@loop.service. Oct 31 00:51:31.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.726990 systemd[1]: Finished systemd-modules-load.service. Oct 31 00:51:31.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.728057 systemd[1]: Finished flatcar-tmpfiles.service. Oct 31 00:51:31.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.729086 systemd[1]: Finished systemd-network-generator.service. Oct 31 00:51:31.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.730382 systemd[1]: Finished systemd-remount-fs.service. Oct 31 00:51:31.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.731537 systemd[1]: Reached target network-pre.target. Oct 31 00:51:31.733555 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 31 00:51:31.735305 systemd[1]: Mounting sys-kernel-config.mount... Oct 31 00:51:31.735885 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 31 00:51:31.737712 systemd[1]: Starting systemd-hwdb-update.service... Oct 31 00:51:31.739513 systemd[1]: Starting systemd-journal-flush.service... Oct 31 00:51:31.740301 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 31 00:51:31.741354 systemd[1]: Starting systemd-random-seed.service... Oct 31 00:51:31.742094 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 31 00:51:31.743118 systemd[1]: Starting systemd-sysctl.service... Oct 31 00:51:31.745783 systemd-journald[1002]: Time spent on flushing to /var/log/journal/2a90f62de3a24855a5cb99ea7f29ac15 is 15.461ms for 1001 entries. Oct 31 00:51:31.745783 systemd-journald[1002]: System Journal (/var/log/journal/2a90f62de3a24855a5cb99ea7f29ac15) is 8.0M, max 195.6M, 187.6M free. Oct 31 00:51:31.780331 systemd-journald[1002]: Received client request to flush runtime journal. Oct 31 00:51:31.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.745231 systemd[1]: Starting systemd-sysusers.service... Oct 31 00:51:31.750120 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 31 00:51:31.751237 systemd[1]: Mounted sys-kernel-config.mount. Oct 31 00:51:31.781071 udevadm[1033]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 31 00:51:31.752146 systemd[1]: Finished systemd-random-seed.service. Oct 31 00:51:31.753319 systemd[1]: Reached target first-boot-complete.target. Oct 31 00:51:31.755554 systemd[1]: Finished systemd-udev-trigger.service. Oct 31 00:51:31.757996 systemd[1]: Starting systemd-udev-settle.service... Oct 31 00:51:31.760090 systemd[1]: Finished systemd-sysctl.service. Oct 31 00:51:31.774767 systemd[1]: Finished systemd-sysusers.service. Oct 31 00:51:31.776983 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 31 00:51:31.781571 systemd[1]: Finished systemd-journal-flush.service. Oct 31 00:51:31.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:31.795702 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 31 00:51:31.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.219212 systemd[1]: Finished systemd-hwdb-update.service. Oct 31 00:51:32.220000 audit: BPF prog-id=24 op=LOAD Oct 31 00:51:32.220000 audit: BPF prog-id=25 op=LOAD Oct 31 00:51:32.220000 audit: BPF prog-id=7 op=UNLOAD Oct 31 00:51:32.220000 audit: BPF prog-id=8 op=UNLOAD Oct 31 00:51:32.221330 systemd[1]: Starting systemd-udevd.service... Oct 31 00:51:32.236778 systemd-udevd[1037]: Using default interface naming scheme 'v252'. Oct 31 00:51:32.256365 systemd[1]: Started systemd-udevd.service. Oct 31 00:51:32.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.258000 audit: BPF prog-id=26 op=LOAD Oct 31 00:51:32.262570 systemd[1]: Starting systemd-networkd.service... Oct 31 00:51:32.267000 audit: BPF prog-id=27 op=LOAD Oct 31 00:51:32.267000 audit: BPF prog-id=28 op=LOAD Oct 31 00:51:32.267000 audit: BPF prog-id=29 op=LOAD Oct 31 00:51:32.268551 systemd[1]: Starting systemd-userdbd.service... Oct 31 00:51:32.288020 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 31 00:51:32.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.303602 systemd[1]: Started systemd-userdbd.service. Oct 31 00:51:32.341463 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 31 00:51:32.350755 systemd-networkd[1055]: lo: Link UP Oct 31 00:51:32.350766 systemd-networkd[1055]: lo: Gained carrier Oct 31 00:51:32.351145 systemd-networkd[1055]: Enumeration completed Oct 31 00:51:32.351252 systemd-networkd[1055]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 31 00:51:32.351253 systemd[1]: Started systemd-networkd.service. Oct 31 00:51:32.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.352508 systemd-networkd[1055]: eth0: Link UP Oct 31 00:51:32.352518 systemd-networkd[1055]: eth0: Gained carrier Oct 31 00:51:32.353555 systemd[1]: Finished systemd-udev-settle.service. Oct 31 00:51:32.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.355502 systemd[1]: Starting lvm2-activation-early.service... Oct 31 00:51:32.363759 lvm[1070]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 31 00:51:32.380273 systemd-networkd[1055]: eth0: DHCPv4 address 10.0.0.85/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 31 00:51:32.404062 systemd[1]: Finished lvm2-activation-early.service. Oct 31 00:51:32.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.404938 systemd[1]: Reached target cryptsetup.target. Oct 31 00:51:32.406728 systemd[1]: Starting lvm2-activation.service... Oct 31 00:51:32.410190 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 31 00:51:32.441662 systemd[1]: Finished lvm2-activation.service. Oct 31 00:51:32.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.442475 systemd[1]: Reached target local-fs-pre.target. Oct 31 00:51:32.443110 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 31 00:51:32.443157 systemd[1]: Reached target local-fs.target. Oct 31 00:51:32.443727 systemd[1]: Reached target machines.target. Oct 31 00:51:32.445581 systemd[1]: Starting ldconfig.service... Oct 31 00:51:32.447036 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.447091 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 00:51:32.448106 systemd[1]: Starting systemd-boot-update.service... Oct 31 00:51:32.449723 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 31 00:51:32.451900 systemd[1]: Starting systemd-machine-id-commit.service... Oct 31 00:51:32.453750 systemd[1]: Starting systemd-sysext.service... Oct 31 00:51:32.455579 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1073 (bootctl) Oct 31 00:51:32.456629 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 31 00:51:32.469439 systemd[1]: Unmounting usr-share-oem.mount... Oct 31 00:51:32.470724 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 31 00:51:32.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.480813 systemd[1]: usr-share-oem.mount: Deactivated successfully. Oct 31 00:51:32.481006 systemd[1]: Unmounted usr-share-oem.mount. Oct 31 00:51:32.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.529607 systemd[1]: Finished systemd-machine-id-commit.service. Oct 31 00:51:32.532148 kernel: loop0: detected capacity change from 0 to 207008 Oct 31 00:51:32.543183 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Oct 31 00:51:32.547718 systemd-fsck[1084]: fsck.fat 4.2 (2021-01-31) Oct 31 00:51:32.547718 systemd-fsck[1084]: /dev/vda1: 236 files, 117310/258078 clusters Oct 31 00:51:32.549622 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 31 00:51:32.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.569163 kernel: loop1: detected capacity change from 0 to 207008 Oct 31 00:51:32.574971 (sd-sysext)[1087]: Using extensions 'kubernetes'. Oct 31 00:51:32.575381 (sd-sysext)[1087]: Merged extensions into '/usr'. Oct 31 00:51:32.593106 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.594429 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 00:51:32.596227 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 00:51:32.598027 systemd[1]: Starting modprobe@loop.service... Oct 31 00:51:32.598944 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.599071 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 00:51:32.599887 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 00:51:32.600030 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 00:51:32.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.601260 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 00:51:32.601368 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 00:51:32.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.602588 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 31 00:51:32.602694 systemd[1]: Finished modprobe@loop.service. Oct 31 00:51:32.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.603761 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 31 00:51:32.603857 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.672458 ldconfig[1072]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 31 00:51:32.676068 systemd[1]: Finished ldconfig.service. Oct 31 00:51:32.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.708183 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 31 00:51:32.710060 systemd[1]: Mounting boot.mount... Oct 31 00:51:32.711827 systemd[1]: Mounting usr-share-oem.mount... Oct 31 00:51:32.716346 systemd[1]: Mounted usr-share-oem.mount. Oct 31 00:51:32.720328 systemd[1]: Finished systemd-sysext.service. Oct 31 00:51:32.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.721152 systemd[1]: Mounted boot.mount. Oct 31 00:51:32.722949 systemd[1]: Starting ensure-sysext.service... Oct 31 00:51:32.724620 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 31 00:51:32.729556 systemd[1]: Finished systemd-boot-update.service. Oct 31 00:51:32.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.731299 systemd[1]: Reloading. Oct 31 00:51:32.744789 systemd-tmpfiles[1095]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 31 00:51:32.747506 systemd-tmpfiles[1095]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 31 00:51:32.749025 systemd-tmpfiles[1095]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 31 00:51:32.777620 /usr/lib/systemd/system-generators/torcx-generator[1115]: time="2025-10-31T00:51:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 31 00:51:32.777993 /usr/lib/systemd/system-generators/torcx-generator[1115]: time="2025-10-31T00:51:32Z" level=info msg="torcx already run" Oct 31 00:51:32.842840 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 31 00:51:32.842862 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 31 00:51:32.859590 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 31 00:51:32.906000 audit: BPF prog-id=30 op=LOAD Oct 31 00:51:32.906000 audit: BPF prog-id=21 op=UNLOAD Oct 31 00:51:32.906000 audit: BPF prog-id=31 op=LOAD Oct 31 00:51:32.906000 audit: BPF prog-id=32 op=LOAD Oct 31 00:51:32.906000 audit: BPF prog-id=22 op=UNLOAD Oct 31 00:51:32.907000 audit: BPF prog-id=23 op=UNLOAD Oct 31 00:51:32.908000 audit: BPF prog-id=33 op=LOAD Oct 31 00:51:32.908000 audit: BPF prog-id=34 op=LOAD Oct 31 00:51:32.908000 audit: BPF prog-id=24 op=UNLOAD Oct 31 00:51:32.908000 audit: BPF prog-id=25 op=UNLOAD Oct 31 00:51:32.909000 audit: BPF prog-id=35 op=LOAD Oct 31 00:51:32.909000 audit: BPF prog-id=27 op=UNLOAD Oct 31 00:51:32.910000 audit: BPF prog-id=36 op=LOAD Oct 31 00:51:32.910000 audit: BPF prog-id=37 op=LOAD Oct 31 00:51:32.910000 audit: BPF prog-id=28 op=UNLOAD Oct 31 00:51:32.910000 audit: BPF prog-id=29 op=UNLOAD Oct 31 00:51:32.910000 audit: BPF prog-id=38 op=LOAD Oct 31 00:51:32.910000 audit: BPF prog-id=26 op=UNLOAD Oct 31 00:51:32.912333 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 31 00:51:32.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.916873 systemd[1]: Starting audit-rules.service... Oct 31 00:51:32.918898 systemd[1]: Starting clean-ca-certificates.service... Oct 31 00:51:32.921095 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 31 00:51:32.924000 audit: BPF prog-id=39 op=LOAD Oct 31 00:51:32.925787 systemd[1]: Starting systemd-resolved.service... Oct 31 00:51:32.929000 audit: BPF prog-id=40 op=LOAD Oct 31 00:51:32.930824 systemd[1]: Starting systemd-timesyncd.service... Oct 31 00:51:32.932637 systemd[1]: Starting systemd-update-utmp.service... Oct 31 00:51:32.934313 systemd[1]: Finished clean-ca-certificates.service. Oct 31 00:51:32.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.937362 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 31 00:51:32.940000 audit[1160]: SYSTEM_BOOT pid=1160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.942808 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.944218 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 00:51:32.946794 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 00:51:32.949403 systemd[1]: Starting modprobe@loop.service... Oct 31 00:51:32.950068 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.950275 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 00:51:32.950453 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 31 00:51:32.951774 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 00:51:32.951926 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 00:51:32.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.953232 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 00:51:32.953349 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 00:51:32.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.956331 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.957564 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 00:51:32.959513 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 00:51:32.960195 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.960325 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 00:51:32.960424 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 31 00:51:32.961262 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 31 00:51:32.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.962574 systemd[1]: Finished systemd-update-utmp.service. Oct 31 00:51:32.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.963973 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 31 00:51:32.964186 systemd[1]: Finished modprobe@loop.service. Oct 31 00:51:32.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.965368 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 00:51:32.965487 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 00:51:32.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.966946 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 00:51:32.967063 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 00:51:32.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.967000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:32.971376 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.972714 systemd[1]: Starting modprobe@dm_mod.service... Oct 31 00:51:32.974740 systemd[1]: Starting modprobe@drm.service... Oct 31 00:51:32.976000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 31 00:51:32.976000 audit[1180]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffd8925d0 a2=420 a3=0 items=0 ppid=1154 pid=1180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:32.976000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 31 00:51:32.976332 augenrules[1180]: No rules Oct 31 00:51:32.976771 systemd[1]: Starting modprobe@efi_pstore.service... Oct 31 00:51:32.978976 systemd[1]: Starting modprobe@loop.service... Oct 31 00:51:32.979899 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.980025 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 00:51:32.981247 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 31 00:51:32.983457 systemd[1]: Starting systemd-update-done.service... Oct 31 00:51:32.984340 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 31 00:51:32.985497 systemd[1]: Finished audit-rules.service. Oct 31 00:51:32.986590 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 31 00:51:32.986722 systemd[1]: Finished modprobe@dm_mod.service. Oct 31 00:51:32.987808 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 31 00:51:32.987942 systemd[1]: Finished modprobe@drm.service. Oct 31 00:51:32.989327 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 31 00:51:32.989448 systemd[1]: Finished modprobe@efi_pstore.service. Oct 31 00:51:32.990647 systemd[1]: Started systemd-timesyncd.service. Oct 31 00:51:32.990907 systemd-timesyncd[1159]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 31 00:51:32.991259 systemd-timesyncd[1159]: Initial clock synchronization to Fri 2025-10-31 00:51:32.664408 UTC. Oct 31 00:51:32.992019 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 31 00:51:32.992150 systemd[1]: Finished modprobe@loop.service. Oct 31 00:51:32.993463 systemd[1]: Finished systemd-update-done.service. Oct 31 00:51:32.994653 systemd-resolved[1158]: Positive Trust Anchors: Oct 31 00:51:32.994663 systemd-resolved[1158]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 31 00:51:32.994690 systemd-resolved[1158]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 31 00:51:32.994992 systemd[1]: Reached target time-set.target. Oct 31 00:51:32.996012 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 31 00:51:32.996055 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 31 00:51:32.996350 systemd[1]: Finished ensure-sysext.service. Oct 31 00:51:33.002742 systemd-resolved[1158]: Defaulting to hostname 'linux'. Oct 31 00:51:33.004106 systemd[1]: Started systemd-resolved.service. Oct 31 00:51:33.004769 systemd[1]: Reached target network.target. Oct 31 00:51:33.005365 systemd[1]: Reached target nss-lookup.target. Oct 31 00:51:33.005980 systemd[1]: Reached target sysinit.target. Oct 31 00:51:33.006692 systemd[1]: Started motdgen.path. Oct 31 00:51:33.007282 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 31 00:51:33.008285 systemd[1]: Started logrotate.timer. Oct 31 00:51:33.008929 systemd[1]: Started mdadm.timer. Oct 31 00:51:33.009517 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 31 00:51:33.010182 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 31 00:51:33.010211 systemd[1]: Reached target paths.target. Oct 31 00:51:33.010778 systemd[1]: Reached target timers.target. Oct 31 00:51:33.011769 systemd[1]: Listening on dbus.socket. Oct 31 00:51:33.013333 systemd[1]: Starting docker.socket... Oct 31 00:51:33.016237 systemd[1]: Listening on sshd.socket. Oct 31 00:51:33.016879 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 00:51:33.017334 systemd[1]: Listening on docker.socket. Oct 31 00:51:33.017959 systemd[1]: Reached target sockets.target. Oct 31 00:51:33.018589 systemd[1]: Reached target basic.target. Oct 31 00:51:33.019162 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 31 00:51:33.019189 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 31 00:51:33.020101 systemd[1]: Starting containerd.service... Oct 31 00:51:33.021629 systemd[1]: Starting dbus.service... Oct 31 00:51:33.023118 systemd[1]: Starting enable-oem-cloudinit.service... Oct 31 00:51:33.024732 systemd[1]: Starting extend-filesystems.service... Oct 31 00:51:33.025576 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 31 00:51:33.026733 systemd[1]: Starting motdgen.service... Oct 31 00:51:33.028277 jq[1195]: false Oct 31 00:51:33.028509 systemd[1]: Starting prepare-helm.service... Oct 31 00:51:33.030048 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 31 00:51:33.031813 systemd[1]: Starting sshd-keygen.service... Oct 31 00:51:33.035366 systemd[1]: Starting systemd-logind.service... Oct 31 00:51:33.036007 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 31 00:51:33.036081 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 31 00:51:33.036582 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 31 00:51:33.037258 systemd[1]: Starting update-engine.service... Oct 31 00:51:33.039157 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 31 00:51:33.040268 extend-filesystems[1196]: Found loop1 Oct 31 00:51:33.040268 extend-filesystems[1196]: Found vda Oct 31 00:51:33.041420 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 31 00:51:33.041636 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 31 00:51:33.042080 jq[1210]: true Oct 31 00:51:33.042643 extend-filesystems[1196]: Found vda1 Oct 31 00:51:33.042643 extend-filesystems[1196]: Found vda2 Oct 31 00:51:33.042643 extend-filesystems[1196]: Found vda3 Oct 31 00:51:33.042643 extend-filesystems[1196]: Found usr Oct 31 00:51:33.042643 extend-filesystems[1196]: Found vda4 Oct 31 00:51:33.042643 extend-filesystems[1196]: Found vda6 Oct 31 00:51:33.042643 extend-filesystems[1196]: Found vda7 Oct 31 00:51:33.042643 extend-filesystems[1196]: Found vda9 Oct 31 00:51:33.042643 extend-filesystems[1196]: Checking size of /dev/vda9 Oct 31 00:51:33.042649 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 31 00:51:33.056340 dbus-daemon[1194]: [system] SELinux support is enabled Oct 31 00:51:33.042801 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 31 00:51:33.057620 systemd[1]: Started dbus.service. Oct 31 00:51:33.060746 tar[1213]: linux-arm64/LICENSE Oct 31 00:51:33.060746 tar[1213]: linux-arm64/helm Oct 31 00:51:33.060962 jq[1219]: true Oct 31 00:51:33.077744 extend-filesystems[1196]: Resized partition /dev/vda9 Oct 31 00:51:33.062197 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 31 00:51:33.080290 extend-filesystems[1229]: resize2fs 1.46.5 (30-Dec-2021) Oct 31 00:51:33.062232 systemd[1]: Reached target system-config.target. Oct 31 00:51:33.063013 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 31 00:51:33.063028 systemd[1]: Reached target user-config.target. Oct 31 00:51:33.063950 systemd[1]: motdgen.service: Deactivated successfully. Oct 31 00:51:33.064099 systemd[1]: Finished motdgen.service. Oct 31 00:51:33.086159 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Oct 31 00:51:33.092355 update_engine[1208]: I1031 00:51:33.091967 1208 main.cc:92] Flatcar Update Engine starting Oct 31 00:51:33.095970 systemd[1]: Started update-engine.service. Oct 31 00:51:33.098544 systemd[1]: Started locksmithd.service. Oct 31 00:51:33.110879 update_engine[1208]: I1031 00:51:33.095975 1208 update_check_scheduler.cc:74] Next update check in 11m19s Oct 31 00:51:33.115556 systemd-logind[1206]: Watching system buttons on /dev/input/event0 (Power Button) Oct 31 00:51:33.115793 systemd-logind[1206]: New seat seat0. Oct 31 00:51:33.119527 systemd[1]: Started systemd-logind.service. Oct 31 00:51:33.123185 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Oct 31 00:51:33.138888 env[1221]: time="2025-10-31T00:51:33.138700671Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 31 00:51:33.140286 extend-filesystems[1229]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Oct 31 00:51:33.140286 extend-filesystems[1229]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 31 00:51:33.140286 extend-filesystems[1229]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Oct 31 00:51:33.145956 extend-filesystems[1196]: Resized filesystem in /dev/vda9 Oct 31 00:51:33.149273 bash[1245]: Updated "/home/core/.ssh/authorized_keys" Oct 31 00:51:33.142277 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 31 00:51:33.142430 systemd[1]: Finished extend-filesystems.service. Oct 31 00:51:33.145322 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 31 00:51:33.165004 env[1221]: time="2025-10-31T00:51:33.164960364Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 31 00:51:33.165308 env[1221]: time="2025-10-31T00:51:33.165289868Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 31 00:51:33.167194 env[1221]: time="2025-10-31T00:51:33.167161691Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 31 00:51:33.167194 env[1221]: time="2025-10-31T00:51:33.167192807Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 31 00:51:33.167427 env[1221]: time="2025-10-31T00:51:33.167406249Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 31 00:51:33.167460 env[1221]: time="2025-10-31T00:51:33.167426507Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 31 00:51:33.167460 env[1221]: time="2025-10-31T00:51:33.167441164Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 31 00:51:33.167460 env[1221]: time="2025-10-31T00:51:33.167450449Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 31 00:51:33.167532 env[1221]: time="2025-10-31T00:51:33.167517439Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 31 00:51:33.167797 env[1221]: time="2025-10-31T00:51:33.167778380Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 31 00:51:33.167913 env[1221]: time="2025-10-31T00:51:33.167895940Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 31 00:51:33.167941 env[1221]: time="2025-10-31T00:51:33.167913359Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 31 00:51:33.167981 env[1221]: time="2025-10-31T00:51:33.167966192Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 31 00:51:33.168011 env[1221]: time="2025-10-31T00:51:33.167980657Z" level=info msg="metadata content store policy set" policy=shared Oct 31 00:51:33.171509 env[1221]: time="2025-10-31T00:51:33.171474871Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 31 00:51:33.171565 env[1221]: time="2025-10-31T00:51:33.171513393Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 31 00:51:33.171565 env[1221]: time="2025-10-31T00:51:33.171527167Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 31 00:51:33.171631 env[1221]: time="2025-10-31T00:51:33.171566609Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 31 00:51:33.171631 env[1221]: time="2025-10-31T00:51:33.171581726Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 31 00:51:33.171680 env[1221]: time="2025-10-31T00:51:33.171603174Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 31 00:51:33.171680 env[1221]: time="2025-10-31T00:51:33.171661685Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 31 00:51:33.171997 env[1221]: time="2025-10-31T00:51:33.171976073Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 31 00:51:33.172030 env[1221]: time="2025-10-31T00:51:33.172000091Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 31 00:51:33.172030 env[1221]: time="2025-10-31T00:51:33.172013098Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 31 00:51:33.172030 env[1221]: time="2025-10-31T00:51:33.172025836Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 31 00:51:33.172095 env[1221]: time="2025-10-31T00:51:33.172038498Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 31 00:51:33.172250 env[1221]: time="2025-10-31T00:51:33.172234366Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 31 00:51:33.172339 env[1221]: time="2025-10-31T00:51:33.172325797Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 31 00:51:33.172612 env[1221]: time="2025-10-31T00:51:33.172594297Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 31 00:51:33.172636 env[1221]: time="2025-10-31T00:51:33.172624608Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.172664 env[1221]: time="2025-10-31T00:51:33.172638036Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 31 00:51:33.172752 env[1221]: time="2025-10-31T00:51:33.172739827Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.172777 env[1221]: time="2025-10-31T00:51:33.172757706Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.172777 env[1221]: time="2025-10-31T00:51:33.172770790Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.172842 env[1221]: time="2025-10-31T00:51:33.172829531Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.172863 env[1221]: time="2025-10-31T00:51:33.172847871Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.172885 env[1221]: time="2025-10-31T00:51:33.172862451Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.172885 env[1221]: time="2025-10-31T00:51:33.172874077Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.172919 env[1221]: time="2025-10-31T00:51:33.172885203Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.172919 env[1221]: time="2025-10-31T00:51:33.172898018Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 31 00:51:33.173027 env[1221]: time="2025-10-31T00:51:33.173012892Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.173048 env[1221]: time="2025-10-31T00:51:33.173032997Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.173048 env[1221]: time="2025-10-31T00:51:33.173045466Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.173088 env[1221]: time="2025-10-31T00:51:33.173057629Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 31 00:51:33.173088 env[1221]: time="2025-10-31T00:51:33.173070904Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 31 00:51:33.173088 env[1221]: time="2025-10-31T00:51:33.173083451Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 31 00:51:33.173168 env[1221]: time="2025-10-31T00:51:33.173099258Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 31 00:51:33.173168 env[1221]: time="2025-10-31T00:51:33.173147909Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 31 00:51:33.174953 env[1221]: time="2025-10-31T00:51:33.174860351Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 31 00:51:33.174953 env[1221]: time="2025-10-31T00:51:33.174935552Z" level=info msg="Connect containerd service" Oct 31 00:51:33.175775 env[1221]: time="2025-10-31T00:51:33.174977604Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 31 00:51:33.175966 env[1221]: time="2025-10-31T00:51:33.175903424Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 31 00:51:33.178168 env[1221]: time="2025-10-31T00:51:33.176167703Z" level=info msg="Start subscribing containerd event" Oct 31 00:51:33.178168 env[1221]: time="2025-10-31T00:51:33.176229054Z" level=info msg="Start recovering state" Oct 31 00:51:33.178168 env[1221]: time="2025-10-31T00:51:33.176262549Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 31 00:51:33.178168 env[1221]: time="2025-10-31T00:51:33.176288601Z" level=info msg="Start event monitor" Oct 31 00:51:33.178168 env[1221]: time="2025-10-31T00:51:33.176299804Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 31 00:51:33.178168 env[1221]: time="2025-10-31T00:51:33.176304332Z" level=info msg="Start snapshots syncer" Oct 31 00:51:33.178168 env[1221]: time="2025-10-31T00:51:33.176320638Z" level=info msg="Start cni network conf syncer for default" Oct 31 00:51:33.178168 env[1221]: time="2025-10-31T00:51:33.176329233Z" level=info msg="Start streaming server" Oct 31 00:51:33.178168 env[1221]: time="2025-10-31T00:51:33.177709599Z" level=info msg="containerd successfully booted in 0.045882s" Oct 31 00:51:33.176422 systemd[1]: Started containerd.service. Oct 31 00:51:33.179033 locksmithd[1246]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 31 00:51:33.467774 tar[1213]: linux-arm64/README.md Oct 31 00:51:33.472201 systemd[1]: Finished prepare-helm.service. Oct 31 00:51:34.160307 systemd-networkd[1055]: eth0: Gained IPv6LL Oct 31 00:51:34.162398 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 31 00:51:34.163659 systemd[1]: Reached target network-online.target. Oct 31 00:51:34.165908 systemd[1]: Starting kubelet.service... Oct 31 00:51:34.800484 systemd[1]: Started kubelet.service. Oct 31 00:51:35.031364 sshd_keygen[1211]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 31 00:51:35.049310 systemd[1]: Finished sshd-keygen.service. Oct 31 00:51:35.052192 systemd[1]: Starting issuegen.service... Oct 31 00:51:35.057044 systemd[1]: issuegen.service: Deactivated successfully. Oct 31 00:51:35.057257 systemd[1]: Finished issuegen.service. Oct 31 00:51:35.059571 systemd[1]: Starting systemd-user-sessions.service... Oct 31 00:51:35.066047 systemd[1]: Finished systemd-user-sessions.service. Oct 31 00:51:35.068245 systemd[1]: Started getty@tty1.service. Oct 31 00:51:35.070309 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 31 00:51:35.071234 systemd[1]: Reached target getty.target. Oct 31 00:51:35.071958 systemd[1]: Reached target multi-user.target. Oct 31 00:51:35.074034 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 31 00:51:35.080801 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 31 00:51:35.080977 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 31 00:51:35.081999 systemd[1]: Startup finished in 576ms (kernel) + 4.176s (initrd) + 5.352s (userspace) = 10.104s. Oct 31 00:51:35.218942 kubelet[1262]: E1031 00:51:35.218885 1262 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 31 00:51:35.220500 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 31 00:51:35.220624 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 31 00:51:37.837863 systemd[1]: Created slice system-sshd.slice. Oct 31 00:51:37.838893 systemd[1]: Started sshd@0-10.0.0.85:22-10.0.0.1:52186.service. Oct 31 00:51:37.878288 sshd[1285]: Accepted publickey for core from 10.0.0.1 port 52186 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:51:37.880540 sshd[1285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:51:37.889805 systemd[1]: Created slice user-500.slice. Oct 31 00:51:37.890831 systemd[1]: Starting user-runtime-dir@500.service... Oct 31 00:51:37.892369 systemd-logind[1206]: New session 1 of user core. Oct 31 00:51:37.898393 systemd[1]: Finished user-runtime-dir@500.service. Oct 31 00:51:37.899670 systemd[1]: Starting user@500.service... Oct 31 00:51:37.902474 (systemd)[1288]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:51:37.959156 systemd[1288]: Queued start job for default target default.target. Oct 31 00:51:37.959811 systemd[1288]: Reached target paths.target. Oct 31 00:51:37.959845 systemd[1288]: Reached target sockets.target. Oct 31 00:51:37.959856 systemd[1288]: Reached target timers.target. Oct 31 00:51:37.959866 systemd[1288]: Reached target basic.target. Oct 31 00:51:37.959910 systemd[1288]: Reached target default.target. Oct 31 00:51:37.959934 systemd[1288]: Startup finished in 52ms. Oct 31 00:51:37.962450 systemd[1]: Started user@500.service. Oct 31 00:51:37.963477 systemd[1]: Started session-1.scope. Oct 31 00:51:38.018791 systemd[1]: Started sshd@1-10.0.0.85:22-10.0.0.1:52194.service. Oct 31 00:51:38.054023 sshd[1297]: Accepted publickey for core from 10.0.0.1 port 52194 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:51:38.055350 sshd[1297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:51:38.061607 systemd-logind[1206]: New session 2 of user core. Oct 31 00:51:38.063157 systemd[1]: Started session-2.scope. Oct 31 00:51:38.115738 sshd[1297]: pam_unix(sshd:session): session closed for user core Oct 31 00:51:38.118437 systemd[1]: sshd@1-10.0.0.85:22-10.0.0.1:52194.service: Deactivated successfully. Oct 31 00:51:38.119013 systemd[1]: session-2.scope: Deactivated successfully. Oct 31 00:51:38.119557 systemd-logind[1206]: Session 2 logged out. Waiting for processes to exit. Oct 31 00:51:38.120629 systemd[1]: Started sshd@2-10.0.0.85:22-10.0.0.1:52202.service. Oct 31 00:51:38.121528 systemd-logind[1206]: Removed session 2. Oct 31 00:51:38.158765 sshd[1303]: Accepted publickey for core from 10.0.0.1 port 52202 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:51:38.161506 sshd[1303]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:51:38.169747 systemd-logind[1206]: New session 3 of user core. Oct 31 00:51:38.170210 systemd[1]: Started session-3.scope. Oct 31 00:51:38.222883 sshd[1303]: pam_unix(sshd:session): session closed for user core Oct 31 00:51:38.226122 systemd[1]: Started sshd@3-10.0.0.85:22-10.0.0.1:52216.service. Oct 31 00:51:38.226655 systemd[1]: sshd@2-10.0.0.85:22-10.0.0.1:52202.service: Deactivated successfully. Oct 31 00:51:38.227342 systemd[1]: session-3.scope: Deactivated successfully. Oct 31 00:51:38.227851 systemd-logind[1206]: Session 3 logged out. Waiting for processes to exit. Oct 31 00:51:38.228634 systemd-logind[1206]: Removed session 3. Oct 31 00:51:38.262205 sshd[1308]: Accepted publickey for core from 10.0.0.1 port 52216 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:51:38.263605 sshd[1308]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:51:38.266994 systemd-logind[1206]: New session 4 of user core. Oct 31 00:51:38.267863 systemd[1]: Started session-4.scope. Oct 31 00:51:38.320541 sshd[1308]: pam_unix(sshd:session): session closed for user core Oct 31 00:51:38.323070 systemd[1]: sshd@3-10.0.0.85:22-10.0.0.1:52216.service: Deactivated successfully. Oct 31 00:51:38.323666 systemd[1]: session-4.scope: Deactivated successfully. Oct 31 00:51:38.324172 systemd-logind[1206]: Session 4 logged out. Waiting for processes to exit. Oct 31 00:51:38.325179 systemd[1]: Started sshd@4-10.0.0.85:22-10.0.0.1:52230.service. Oct 31 00:51:38.325774 systemd-logind[1206]: Removed session 4. Oct 31 00:51:38.363053 sshd[1315]: Accepted publickey for core from 10.0.0.1 port 52230 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:51:38.362895 sshd[1315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:51:38.369399 systemd-logind[1206]: New session 5 of user core. Oct 31 00:51:38.370344 systemd[1]: Started session-5.scope. Oct 31 00:51:38.431921 sudo[1319]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 31 00:51:38.432517 sudo[1319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 31 00:51:38.449346 dbus-daemon[1194]: avc: received setenforce notice (enforcing=1) Oct 31 00:51:38.451152 sudo[1319]: pam_unix(sudo:session): session closed for user root Oct 31 00:51:38.453850 sshd[1315]: pam_unix(sshd:session): session closed for user core Oct 31 00:51:38.458033 systemd[1]: sshd@4-10.0.0.85:22-10.0.0.1:52230.service: Deactivated successfully. Oct 31 00:51:38.458670 systemd[1]: session-5.scope: Deactivated successfully. Oct 31 00:51:38.459208 systemd-logind[1206]: Session 5 logged out. Waiting for processes to exit. Oct 31 00:51:38.460376 systemd[1]: Started sshd@5-10.0.0.85:22-10.0.0.1:52234.service. Oct 31 00:51:38.461459 systemd-logind[1206]: Removed session 5. Oct 31 00:51:38.495217 sshd[1323]: Accepted publickey for core from 10.0.0.1 port 52234 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:51:38.496515 sshd[1323]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:51:38.501502 systemd[1]: Started session-6.scope. Oct 31 00:51:38.501955 systemd-logind[1206]: New session 6 of user core. Oct 31 00:51:38.559011 sudo[1327]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 31 00:51:38.559264 sudo[1327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 31 00:51:38.562183 sudo[1327]: pam_unix(sudo:session): session closed for user root Oct 31 00:51:38.567236 sudo[1326]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 31 00:51:38.567492 sudo[1326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 31 00:51:38.577325 systemd[1]: Stopping audit-rules.service... Oct 31 00:51:38.578000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 31 00:51:38.578687 auditctl[1330]: No rules Oct 31 00:51:38.578902 systemd[1]: audit-rules.service: Deactivated successfully. Oct 31 00:51:38.579077 systemd[1]: Stopped audit-rules.service. Oct 31 00:51:38.581521 kernel: kauditd_printk_skb: 116 callbacks suppressed Oct 31 00:51:38.581600 kernel: audit: type=1305 audit(1761871898.578:205): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 31 00:51:38.581620 kernel: audit: type=1300 audit(1761871898.578:205): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc843bea0 a2=420 a3=0 items=0 ppid=1 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:38.578000 audit[1330]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc843bea0 a2=420 a3=0 items=0 ppid=1 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:38.580534 systemd[1]: Starting audit-rules.service... Oct 31 00:51:38.583527 kernel: audit: type=1327 audit(1761871898.578:205): proctitle=2F7362696E2F617564697463746C002D44 Oct 31 00:51:38.578000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 31 00:51:38.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.586468 kernel: audit: type=1131 audit(1761871898.578:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.599824 augenrules[1347]: No rules Oct 31 00:51:38.600547 systemd[1]: Finished audit-rules.service. Oct 31 00:51:38.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.601364 sudo[1326]: pam_unix(sudo:session): session closed for user root Oct 31 00:51:38.603296 kernel: audit: type=1130 audit(1761871898.599:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.603358 kernel: audit: type=1106 audit(1761871898.600:208): pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.600000 audit[1326]: USER_END pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.604305 sshd[1323]: pam_unix(sshd:session): session closed for user core Oct 31 00:51:38.600000 audit[1326]: CRED_DISP pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.608286 systemd[1]: Started sshd@6-10.0.0.85:22-10.0.0.1:52238.service. Oct 31 00:51:38.608809 kernel: audit: type=1104 audit(1761871898.600:209): pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.608876 kernel: audit: type=1106 audit(1761871898.604:210): pid=1323 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:51:38.604000 audit[1323]: USER_END pid=1323 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:51:38.608841 systemd[1]: sshd@5-10.0.0.85:22-10.0.0.1:52234.service: Deactivated successfully. Oct 31 00:51:38.609483 systemd[1]: session-6.scope: Deactivated successfully. Oct 31 00:51:38.610136 systemd-logind[1206]: Session 6 logged out. Waiting for processes to exit. Oct 31 00:51:38.611450 systemd-logind[1206]: Removed session 6. Oct 31 00:51:38.604000 audit[1323]: CRED_DISP pid=1323 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:51:38.614180 kernel: audit: type=1104 audit(1761871898.604:211): pid=1323 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:51:38.614271 kernel: audit: type=1130 audit(1761871898.607:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.85:22-10.0.0.1:52238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.85:22-10.0.0.1:52238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.85:22-10.0.0.1:52234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.646000 audit[1352]: USER_ACCT pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:51:38.647786 sshd[1352]: Accepted publickey for core from 10.0.0.1 port 52238 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:51:38.647000 audit[1352]: CRED_ACQ pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:51:38.648000 audit[1352]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3860050 a2=3 a3=1 items=0 ppid=1 pid=1352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:38.648000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:51:38.649743 sshd[1352]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:51:38.654112 systemd-logind[1206]: New session 7 of user core. Oct 31 00:51:38.654918 systemd[1]: Started session-7.scope. Oct 31 00:51:38.658000 audit[1352]: USER_START pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:51:38.660000 audit[1355]: CRED_ACQ pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:51:38.708887 sudo[1356]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 31 00:51:38.709144 sudo[1356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 31 00:51:38.707000 audit[1356]: USER_ACCT pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.707000 audit[1356]: CRED_REFR pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.709000 audit[1356]: USER_START pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:51:38.765429 systemd[1]: Starting docker.service... Oct 31 00:51:38.821994 env[1368]: time="2025-10-31T00:51:38.821937845Z" level=info msg="Starting up" Oct 31 00:51:38.823658 env[1368]: time="2025-10-31T00:51:38.823628392Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 31 00:51:38.823768 env[1368]: time="2025-10-31T00:51:38.823753243Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 31 00:51:38.823832 env[1368]: time="2025-10-31T00:51:38.823816256Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 31 00:51:38.823880 env[1368]: time="2025-10-31T00:51:38.823869087Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 31 00:51:38.825907 env[1368]: time="2025-10-31T00:51:38.825880065Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 31 00:51:38.825907 env[1368]: time="2025-10-31T00:51:38.825903485Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 31 00:51:38.826008 env[1368]: time="2025-10-31T00:51:38.825921108Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 31 00:51:38.826008 env[1368]: time="2025-10-31T00:51:38.825931565Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 31 00:51:38.992455 env[1368]: time="2025-10-31T00:51:38.991676990Z" level=info msg="Loading containers: start." Oct 31 00:51:39.036000 audit[1402]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.036000 audit[1402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc7ef9da0 a2=0 a3=1 items=0 ppid=1368 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.036000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 31 00:51:39.037000 audit[1404]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.037000 audit[1404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffcfb54550 a2=0 a3=1 items=0 ppid=1368 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.037000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 31 00:51:39.039000 audit[1406]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.039000 audit[1406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd0257490 a2=0 a3=1 items=0 ppid=1368 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.039000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 31 00:51:39.041000 audit[1408]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.041000 audit[1408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe5f84a10 a2=0 a3=1 items=0 ppid=1368 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.041000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 31 00:51:39.043000 audit[1410]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.043000 audit[1410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcbf48410 a2=0 a3=1 items=0 ppid=1368 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.043000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 31 00:51:39.066000 audit[1415]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.066000 audit[1415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcb4d8180 a2=0 a3=1 items=0 ppid=1368 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.066000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 31 00:51:39.074000 audit[1417]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.074000 audit[1417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd1bec410 a2=0 a3=1 items=0 ppid=1368 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.074000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 31 00:51:39.076000 audit[1419]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.076000 audit[1419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc29f78d0 a2=0 a3=1 items=0 ppid=1368 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.076000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 31 00:51:39.077000 audit[1421]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.077000 audit[1421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffda773e00 a2=0 a3=1 items=0 ppid=1368 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.077000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 31 00:51:39.086000 audit[1425]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.086000 audit[1425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffdeaf6c20 a2=0 a3=1 items=0 ppid=1368 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.086000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 31 00:51:39.098000 audit[1426]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.098000 audit[1426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd3996470 a2=0 a3=1 items=0 ppid=1368 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.098000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 31 00:51:39.109140 kernel: Initializing XFRM netlink socket Oct 31 00:51:39.130869 env[1368]: time="2025-10-31T00:51:39.130831865Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 31 00:51:39.145000 audit[1434]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.145000 audit[1434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd1c182e0 a2=0 a3=1 items=0 ppid=1368 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.145000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 31 00:51:39.161000 audit[1437]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.161000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff953a490 a2=0 a3=1 items=0 ppid=1368 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.161000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 31 00:51:39.163000 audit[1440]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.163000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd22bf200 a2=0 a3=1 items=0 ppid=1368 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.163000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 31 00:51:39.165000 audit[1442]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.165000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff8a5caf0 a2=0 a3=1 items=0 ppid=1368 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.165000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 31 00:51:39.167000 audit[1444]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.167000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe6226f80 a2=0 a3=1 items=0 ppid=1368 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.167000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 31 00:51:39.169000 audit[1446]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.169000 audit[1446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff10d5810 a2=0 a3=1 items=0 ppid=1368 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.169000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 31 00:51:39.171000 audit[1448]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.171000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff9b3c780 a2=0 a3=1 items=0 ppid=1368 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.171000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 31 00:51:39.178000 audit[1451]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.178000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff51efd80 a2=0 a3=1 items=0 ppid=1368 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.178000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 31 00:51:39.180000 audit[1453]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.180000 audit[1453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffffd016650 a2=0 a3=1 items=0 ppid=1368 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.180000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 31 00:51:39.182000 audit[1455]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.182000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffff39e470 a2=0 a3=1 items=0 ppid=1368 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.182000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 31 00:51:39.183000 audit[1457]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.183000 audit[1457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffec2db8f0 a2=0 a3=1 items=0 ppid=1368 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.183000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 31 00:51:39.185755 systemd-networkd[1055]: docker0: Link UP Oct 31 00:51:39.192000 audit[1461]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.192000 audit[1461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd8a8a560 a2=0 a3=1 items=0 ppid=1368 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.192000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 31 00:51:39.209000 audit[1462]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1462 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:39.209000 audit[1462]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffebad6aa0 a2=0 a3=1 items=0 ppid=1368 pid=1462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:39.209000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 31 00:51:39.210881 env[1368]: time="2025-10-31T00:51:39.210821729Z" level=info msg="Loading containers: done." Oct 31 00:51:39.229051 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck128411627-merged.mount: Deactivated successfully. Oct 31 00:51:39.238243 env[1368]: time="2025-10-31T00:51:39.238182711Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 31 00:51:39.238396 env[1368]: time="2025-10-31T00:51:39.238378067Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 31 00:51:39.238525 env[1368]: time="2025-10-31T00:51:39.238495987Z" level=info msg="Daemon has completed initialization" Oct 31 00:51:39.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:39.251665 systemd[1]: Started docker.service. Oct 31 00:51:39.258055 env[1368]: time="2025-10-31T00:51:39.257943295Z" level=info msg="API listen on /run/docker.sock" Oct 31 00:51:39.901615 env[1221]: time="2025-10-31T00:51:39.901274994Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Oct 31 00:51:40.549538 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2307724866.mount: Deactivated successfully. Oct 31 00:51:41.892797 env[1221]: time="2025-10-31T00:51:41.892744642Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:41.894206 env[1221]: time="2025-10-31T00:51:41.894174275Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:41.896446 env[1221]: time="2025-10-31T00:51:41.896416120Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:41.898560 env[1221]: time="2025-10-31T00:51:41.898523871Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:41.899356 env[1221]: time="2025-10-31T00:51:41.899315456Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002\"" Oct 31 00:51:41.900009 env[1221]: time="2025-10-31T00:51:41.899977404Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Oct 31 00:51:43.285676 env[1221]: time="2025-10-31T00:51:43.285605836Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:43.292163 env[1221]: time="2025-10-31T00:51:43.290565663Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:43.296813 env[1221]: time="2025-10-31T00:51:43.296762667Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:43.300411 env[1221]: time="2025-10-31T00:51:43.300360551Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:43.301213 env[1221]: time="2025-10-31T00:51:43.301170523Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b\"" Oct 31 00:51:43.301838 env[1221]: time="2025-10-31T00:51:43.301795977Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Oct 31 00:51:44.683899 env[1221]: time="2025-10-31T00:51:44.683836287Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:44.686293 env[1221]: time="2025-10-31T00:51:44.686260305Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:44.688576 env[1221]: time="2025-10-31T00:51:44.688545243Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:44.690805 env[1221]: time="2025-10-31T00:51:44.690768881Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:44.691672 env[1221]: time="2025-10-31T00:51:44.691644698Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27\"" Oct 31 00:51:44.692164 env[1221]: time="2025-10-31T00:51:44.692134058Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Oct 31 00:51:45.415741 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 31 00:51:45.415860 systemd[1]: Stopped kubelet.service. Oct 31 00:51:45.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:45.421135 kernel: kauditd_printk_skb: 84 callbacks suppressed Oct 31 00:51:45.421193 kernel: audit: type=1130 audit(1761871905.414:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:45.421215 kernel: audit: type=1131 audit(1761871905.414:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:45.414000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:45.422820 systemd[1]: Starting kubelet.service... Oct 31 00:51:45.544289 systemd[1]: Started kubelet.service. Oct 31 00:51:45.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:45.549164 kernel: audit: type=1130 audit(1761871905.543:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:45.675465 kubelet[1503]: E1031 00:51:45.675350 1503 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 31 00:51:45.681814 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 31 00:51:45.681935 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 31 00:51:45.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 31 00:51:45.685183 kernel: audit: type=1131 audit(1761871905.680:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 31 00:51:45.759348 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2308487614.mount: Deactivated successfully. Oct 31 00:51:46.300225 env[1221]: time="2025-10-31T00:51:46.300164242Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:46.301963 env[1221]: time="2025-10-31T00:51:46.301913136Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:46.303827 env[1221]: time="2025-10-31T00:51:46.303790181Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:46.305491 env[1221]: time="2025-10-31T00:51:46.305457029Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:46.305725 env[1221]: time="2025-10-31T00:51:46.305697487Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4\"" Oct 31 00:51:46.306918 env[1221]: time="2025-10-31T00:51:46.306885245Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Oct 31 00:51:46.900004 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount345450556.mount: Deactivated successfully. Oct 31 00:51:47.886041 env[1221]: time="2025-10-31T00:51:47.885986082Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:47.889658 env[1221]: time="2025-10-31T00:51:47.889607155Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:47.891539 env[1221]: time="2025-10-31T00:51:47.891489358Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:47.894226 env[1221]: time="2025-10-31T00:51:47.894192443Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:47.895150 env[1221]: time="2025-10-31T00:51:47.895098785Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Oct 31 00:51:47.895753 env[1221]: time="2025-10-31T00:51:47.895705662Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Oct 31 00:51:48.342220 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3465169316.mount: Deactivated successfully. Oct 31 00:51:48.349706 env[1221]: time="2025-10-31T00:51:48.349618339Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:48.351690 env[1221]: time="2025-10-31T00:51:48.351640425Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:48.353498 env[1221]: time="2025-10-31T00:51:48.353434335Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:48.355934 env[1221]: time="2025-10-31T00:51:48.355884690Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:48.359174 env[1221]: time="2025-10-31T00:51:48.356462412Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Oct 31 00:51:48.359378 env[1221]: time="2025-10-31T00:51:48.359298552Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Oct 31 00:51:48.875969 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1999071266.mount: Deactivated successfully. Oct 31 00:51:51.263025 env[1221]: time="2025-10-31T00:51:51.262974230Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:51.265315 env[1221]: time="2025-10-31T00:51:51.265267581Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:51.267501 env[1221]: time="2025-10-31T00:51:51.267472140Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:51.270330 env[1221]: time="2025-10-31T00:51:51.270286801Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:51.271278 env[1221]: time="2025-10-31T00:51:51.271244496Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Oct 31 00:51:55.771619 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 31 00:51:55.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:55.771801 systemd[1]: Stopped kubelet.service. Oct 31 00:51:55.773257 systemd[1]: Starting kubelet.service... Oct 31 00:51:55.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:55.776030 kernel: audit: type=1130 audit(1761871915.770:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:55.776117 kernel: audit: type=1131 audit(1761871915.770:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:55.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:55.869798 systemd[1]: Started kubelet.service. Oct 31 00:51:55.873171 kernel: audit: type=1130 audit(1761871915.868:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:55.904116 kubelet[1534]: E1031 00:51:55.904057 1534 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 31 00:51:55.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 31 00:51:55.906107 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 31 00:51:55.906254 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 31 00:51:55.909155 kernel: audit: type=1131 audit(1761871915.905:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 31 00:51:56.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:56.784537 systemd[1]: Stopped kubelet.service. Oct 31 00:51:56.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:56.786991 systemd[1]: Starting kubelet.service... Oct 31 00:51:56.789345 kernel: audit: type=1130 audit(1761871916.783:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:56.789433 kernel: audit: type=1131 audit(1761871916.783:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:56.812389 systemd[1]: Reloading. Oct 31 00:51:56.870580 /usr/lib/systemd/system-generators/torcx-generator[1568]: time="2025-10-31T00:51:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 31 00:51:56.870952 /usr/lib/systemd/system-generators/torcx-generator[1568]: time="2025-10-31T00:51:56Z" level=info msg="torcx already run" Oct 31 00:51:57.084071 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 31 00:51:57.084095 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 31 00:51:57.102450 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 31 00:51:57.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.163998 kernel: audit: type=1400 audit(1761871917.159:257): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.164057 kernel: audit: type=1400 audit(1761871917.159:258): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.164086 kernel: audit: type=1400 audit(1761871917.159:259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165903 kernel: audit: type=1400 audit(1761871917.159:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.161000 audit: BPF prog-id=46 op=LOAD Oct 31 00:51:57.162000 audit: BPF prog-id=44 op=UNLOAD Oct 31 00:51:57.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.163000 audit: BPF prog-id=47 op=LOAD Oct 31 00:51:57.163000 audit: BPF prog-id=30 op=UNLOAD Oct 31 00:51:57.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165000 audit: BPF prog-id=48 op=LOAD Oct 31 00:51:57.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.167000 audit: BPF prog-id=49 op=LOAD Oct 31 00:51:57.167000 audit: BPF prog-id=31 op=UNLOAD Oct 31 00:51:57.167000 audit: BPF prog-id=32 op=UNLOAD Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.169000 audit: BPF prog-id=50 op=LOAD Oct 31 00:51:57.169000 audit: BPF prog-id=39 op=UNLOAD Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit: BPF prog-id=51 op=LOAD Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.170000 audit: BPF prog-id=52 op=LOAD Oct 31 00:51:57.170000 audit: BPF prog-id=33 op=UNLOAD Oct 31 00:51:57.170000 audit: BPF prog-id=34 op=UNLOAD Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.171000 audit: BPF prog-id=53 op=LOAD Oct 31 00:51:57.171000 audit: BPF prog-id=40 op=UNLOAD Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit: BPF prog-id=54 op=LOAD Oct 31 00:51:57.172000 audit: BPF prog-id=35 op=UNLOAD Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit: BPF prog-id=55 op=LOAD Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit: BPF prog-id=56 op=LOAD Oct 31 00:51:57.173000 audit: BPF prog-id=36 op=UNLOAD Oct 31 00:51:57.173000 audit: BPF prog-id=37 op=UNLOAD Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit: BPF prog-id=57 op=LOAD Oct 31 00:51:57.174000 audit: BPF prog-id=41 op=UNLOAD Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit: BPF prog-id=58 op=LOAD Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit: BPF prog-id=59 op=LOAD Oct 31 00:51:57.174000 audit: BPF prog-id=42 op=UNLOAD Oct 31 00:51:57.174000 audit: BPF prog-id=43 op=UNLOAD Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:57.174000 audit: BPF prog-id=60 op=LOAD Oct 31 00:51:57.174000 audit: BPF prog-id=38 op=UNLOAD Oct 31 00:51:57.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:57.192275 systemd[1]: Started kubelet.service. Oct 31 00:51:57.193779 systemd[1]: Stopping kubelet.service... Oct 31 00:51:57.194019 systemd[1]: kubelet.service: Deactivated successfully. Oct 31 00:51:57.194210 systemd[1]: Stopped kubelet.service. Oct 31 00:51:57.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:57.195901 systemd[1]: Starting kubelet.service... Oct 31 00:51:57.291700 systemd[1]: Started kubelet.service. Oct 31 00:51:57.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:51:57.330951 kubelet[1613]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 31 00:51:57.331328 kubelet[1613]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Oct 31 00:51:57.331382 kubelet[1613]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 31 00:51:57.331548 kubelet[1613]: I1031 00:51:57.331511 1613 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 31 00:51:58.210047 kubelet[1613]: I1031 00:51:58.210000 1613 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Oct 31 00:51:58.210249 kubelet[1613]: I1031 00:51:58.210236 1613 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 31 00:51:58.210609 kubelet[1613]: I1031 00:51:58.210590 1613 server.go:954] "Client rotation is on, will bootstrap in background" Oct 31 00:51:58.231179 kubelet[1613]: E1031 00:51:58.231115 1613 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.85:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Oct 31 00:51:58.234628 kubelet[1613]: I1031 00:51:58.234594 1613 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 31 00:51:58.241641 kubelet[1613]: E1031 00:51:58.241607 1613 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Oct 31 00:51:58.241641 kubelet[1613]: I1031 00:51:58.241638 1613 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Oct 31 00:51:58.244516 kubelet[1613]: I1031 00:51:58.244463 1613 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 31 00:51:58.245354 kubelet[1613]: I1031 00:51:58.245306 1613 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 31 00:51:58.245593 kubelet[1613]: I1031 00:51:58.245359 1613 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Oct 31 00:51:58.245691 kubelet[1613]: I1031 00:51:58.245666 1613 topology_manager.go:138] "Creating topology manager with none policy" Oct 31 00:51:58.245691 kubelet[1613]: I1031 00:51:58.245677 1613 container_manager_linux.go:304] "Creating device plugin manager" Oct 31 00:51:58.245893 kubelet[1613]: I1031 00:51:58.245880 1613 state_mem.go:36] "Initialized new in-memory state store" Oct 31 00:51:58.248720 kubelet[1613]: I1031 00:51:58.248690 1613 kubelet.go:446] "Attempting to sync node with API server" Oct 31 00:51:58.248774 kubelet[1613]: I1031 00:51:58.248722 1613 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 31 00:51:58.248774 kubelet[1613]: I1031 00:51:58.248744 1613 kubelet.go:352] "Adding apiserver pod source" Oct 31 00:51:58.248774 kubelet[1613]: I1031 00:51:58.248755 1613 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 31 00:51:58.286911 kubelet[1613]: W1031 00:51:58.286850 1613 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Oct 31 00:51:58.287047 kubelet[1613]: E1031 00:51:58.286924 1613 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Oct 31 00:51:58.289278 kubelet[1613]: W1031 00:51:58.289232 1613 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.85:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Oct 31 00:51:58.289442 kubelet[1613]: E1031 00:51:58.289421 1613 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.85:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Oct 31 00:51:58.291810 kubelet[1613]: I1031 00:51:58.291789 1613 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 31 00:51:58.292454 kubelet[1613]: I1031 00:51:58.292440 1613 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Oct 31 00:51:58.292575 kubelet[1613]: W1031 00:51:58.292561 1613 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 31 00:51:58.293475 kubelet[1613]: I1031 00:51:58.293448 1613 watchdog_linux.go:99] "Systemd watchdog is not enabled" Oct 31 00:51:58.293531 kubelet[1613]: I1031 00:51:58.293494 1613 server.go:1287] "Started kubelet" Oct 31 00:51:58.293659 kubelet[1613]: I1031 00:51:58.293629 1613 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Oct 31 00:51:58.295258 kubelet[1613]: I1031 00:51:58.295234 1613 server.go:479] "Adding debug handlers to kubelet server" Oct 31 00:51:58.294000 audit[1613]: AVC avc: denied { mac_admin } for pid=1613 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:58.294000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 00:51:58.294000 audit[1613]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ce5050 a1=40006e1680 a2=4000ce5020 a3=25 items=0 ppid=1 pid=1613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.294000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 00:51:58.294000 audit[1613]: AVC avc: denied { mac_admin } for pid=1613 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:58.294000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 00:51:58.294000 audit[1613]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000322cc0 a1=40006e1698 a2=4000ce50e0 a3=25 items=0 ppid=1 pid=1613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.294000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 00:51:58.296412 kubelet[1613]: I1031 00:51:58.296092 1613 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Oct 31 00:51:58.296412 kubelet[1613]: I1031 00:51:58.296151 1613 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Oct 31 00:51:58.296412 kubelet[1613]: I1031 00:51:58.296224 1613 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 31 00:51:58.297517 kubelet[1613]: I1031 00:51:58.297496 1613 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Oct 31 00:51:58.299779 kubelet[1613]: I1031 00:51:58.299704 1613 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Oct 31 00:51:58.299980 kubelet[1613]: I1031 00:51:58.299960 1613 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 31 00:51:58.300049 kubelet[1613]: E1031 00:51:58.300030 1613 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 00:51:58.300123 kubelet[1613]: I1031 00:51:58.300114 1613 volume_manager.go:297] "Starting Kubelet Volume Manager" Oct 31 00:51:58.300573 kubelet[1613]: E1031 00:51:58.300547 1613 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 31 00:51:58.300711 kubelet[1613]: I1031 00:51:58.300690 1613 factory.go:221] Registration of the systemd container factory successfully Oct 31 00:51:58.300800 kubelet[1613]: I1031 00:51:58.300784 1613 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Oct 31 00:51:58.300870 kubelet[1613]: I1031 00:51:58.300802 1613 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Oct 31 00:51:58.301167 kubelet[1613]: I1031 00:51:58.301151 1613 reconciler.go:26] "Reconciler: start to sync state" Oct 31 00:51:58.300000 audit[1627]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:58.300000 audit[1627]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc9b7e800 a2=0 a3=1 items=0 ppid=1613 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 31 00:51:58.301814 kubelet[1613]: W1031 00:51:58.301544 1613 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Oct 31 00:51:58.302082 kubelet[1613]: E1031 00:51:58.301656 1613 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.85:6443: connect: connection refused" interval="200ms" Oct 31 00:51:58.302082 kubelet[1613]: E1031 00:51:58.301529 1613 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.85:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.85:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18736d2cc59e326c default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-10-31 00:51:58.29346366 +0000 UTC m=+0.996554978,LastTimestamp:2025-10-31 00:51:58.29346366 +0000 UTC m=+0.996554978,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Oct 31 00:51:58.302310 kubelet[1613]: E1031 00:51:58.301887 1613 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Oct 31 00:51:58.302879 kubelet[1613]: I1031 00:51:58.302850 1613 factory.go:221] Registration of the containerd container factory successfully Oct 31 00:51:58.302000 audit[1628]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:58.302000 audit[1628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe1673fc0 a2=0 a3=1 items=0 ppid=1613 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.302000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 31 00:51:58.306000 audit[1630]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:58.306000 audit[1630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe80ee3f0 a2=0 a3=1 items=0 ppid=1613 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.306000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 31 00:51:58.308000 audit[1632]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:58.308000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffcd77540 a2=0 a3=1 items=0 ppid=1613 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.308000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 31 00:51:58.313791 kubelet[1613]: I1031 00:51:58.313768 1613 cpu_manager.go:221] "Starting CPU manager" policy="none" Oct 31 00:51:58.313936 kubelet[1613]: I1031 00:51:58.313911 1613 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Oct 31 00:51:58.314013 kubelet[1613]: I1031 00:51:58.314003 1613 state_mem.go:36] "Initialized new in-memory state store" Oct 31 00:51:58.316000 audit[1639]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:58.316000 audit[1639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffffafe0a10 a2=0 a3=1 items=0 ppid=1613 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.316000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 31 00:51:58.319834 kubelet[1613]: I1031 00:51:58.319785 1613 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 31 00:51:58.319000 audit[1641]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:51:58.319000 audit[1641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffff19af10 a2=0 a3=1 items=0 ppid=1613 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.319000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 31 00:51:58.319000 audit[1642]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:58.319000 audit[1642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe6d5aab0 a2=0 a3=1 items=0 ppid=1613 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.319000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 31 00:51:58.321429 kubelet[1613]: I1031 00:51:58.321403 1613 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 31 00:51:58.321540 kubelet[1613]: I1031 00:51:58.321527 1613 status_manager.go:227] "Starting to sync pod status with apiserver" Oct 31 00:51:58.321624 kubelet[1613]: I1031 00:51:58.321611 1613 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Oct 31 00:51:58.321692 kubelet[1613]: I1031 00:51:58.321683 1613 kubelet.go:2382] "Starting kubelet main sync loop" Oct 31 00:51:58.321793 kubelet[1613]: E1031 00:51:58.321775 1613 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 31 00:51:58.322516 kubelet[1613]: W1031 00:51:58.322408 1613 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Oct 31 00:51:58.322663 kubelet[1613]: E1031 00:51:58.322638 1613 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Oct 31 00:51:58.321000 audit[1643]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:51:58.321000 audit[1643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff9a32510 a2=0 a3=1 items=0 ppid=1613 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.321000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 31 00:51:58.322000 audit[1644]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:58.322000 audit[1644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8864e20 a2=0 a3=1 items=0 ppid=1613 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.322000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 31 00:51:58.322000 audit[1645]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:51:58.322000 audit[1645]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff22d6230 a2=0 a3=1 items=0 ppid=1613 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.322000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 31 00:51:58.323000 audit[1646]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:51:58.323000 audit[1646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6502060 a2=0 a3=1 items=0 ppid=1613 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.323000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 31 00:51:58.324000 audit[1647]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:51:58.324000 audit[1647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffeaadb290 a2=0 a3=1 items=0 ppid=1613 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.324000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 31 00:51:58.390523 kubelet[1613]: I1031 00:51:58.390491 1613 policy_none.go:49] "None policy: Start" Oct 31 00:51:58.390936 kubelet[1613]: I1031 00:51:58.390920 1613 memory_manager.go:186] "Starting memorymanager" policy="None" Oct 31 00:51:58.391012 kubelet[1613]: I1031 00:51:58.391002 1613 state_mem.go:35] "Initializing new in-memory state store" Oct 31 00:51:58.395730 systemd[1]: Created slice kubepods.slice. Oct 31 00:51:58.400695 kubelet[1613]: E1031 00:51:58.400668 1613 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 00:51:58.401117 systemd[1]: Created slice kubepods-burstable.slice. Oct 31 00:51:58.403932 systemd[1]: Created slice kubepods-besteffort.slice. Oct 31 00:51:58.411978 kubelet[1613]: I1031 00:51:58.411952 1613 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 31 00:51:58.412000 audit[1613]: AVC avc: denied { mac_admin } for pid=1613 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:58.412000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 00:51:58.412000 audit[1613]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ce5650 a1=40006717e8 a2=4000ce5620 a3=25 items=0 ppid=1 pid=1613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:58.412000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 00:51:58.412614 kubelet[1613]: I1031 00:51:58.412591 1613 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Oct 31 00:51:58.412833 kubelet[1613]: I1031 00:51:58.412809 1613 eviction_manager.go:189] "Eviction manager: starting control loop" Oct 31 00:51:58.412943 kubelet[1613]: I1031 00:51:58.412908 1613 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Oct 31 00:51:58.413899 kubelet[1613]: I1031 00:51:58.413705 1613 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 31 00:51:58.413899 kubelet[1613]: E1031 00:51:58.413882 1613 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Oct 31 00:51:58.414003 kubelet[1613]: E1031 00:51:58.413925 1613 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 31 00:51:58.429158 systemd[1]: Created slice kubepods-burstable-pod1297cb3893ef490f27cb9faf79fea327.slice. Oct 31 00:51:58.445052 kubelet[1613]: E1031 00:51:58.445008 1613 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 00:51:58.447679 systemd[1]: Created slice kubepods-burstable-pod4654b122dbb389158fe3c0766e603624.slice. Oct 31 00:51:58.449323 kubelet[1613]: E1031 00:51:58.449282 1613 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 00:51:58.451090 systemd[1]: Created slice kubepods-burstable-poda1d51be1ff02022474f2598f6e43038f.slice. Oct 31 00:51:58.452332 kubelet[1613]: E1031 00:51:58.452309 1613 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 00:51:58.502742 kubelet[1613]: I1031 00:51:58.502615 1613 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1297cb3893ef490f27cb9faf79fea327-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"1297cb3893ef490f27cb9faf79fea327\") " pod="kube-system/kube-apiserver-localhost" Oct 31 00:51:58.502742 kubelet[1613]: I1031 00:51:58.502668 1613 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1297cb3893ef490f27cb9faf79fea327-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"1297cb3893ef490f27cb9faf79fea327\") " pod="kube-system/kube-apiserver-localhost" Oct 31 00:51:58.502742 kubelet[1613]: I1031 00:51:58.502689 1613 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:51:58.502899 kubelet[1613]: I1031 00:51:58.502755 1613 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:51:58.502899 kubelet[1613]: I1031 00:51:58.502773 1613 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a1d51be1ff02022474f2598f6e43038f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a1d51be1ff02022474f2598f6e43038f\") " pod="kube-system/kube-scheduler-localhost" Oct 31 00:51:58.502899 kubelet[1613]: I1031 00:51:58.502819 1613 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1297cb3893ef490f27cb9faf79fea327-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"1297cb3893ef490f27cb9faf79fea327\") " pod="kube-system/kube-apiserver-localhost" Oct 31 00:51:58.502899 kubelet[1613]: I1031 00:51:58.502835 1613 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:51:58.502899 kubelet[1613]: I1031 00:51:58.502851 1613 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:51:58.503007 kubelet[1613]: I1031 00:51:58.502873 1613 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:51:58.503252 kubelet[1613]: E1031 00:51:58.503224 1613 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.85:6443: connect: connection refused" interval="400ms" Oct 31 00:51:58.515405 kubelet[1613]: I1031 00:51:58.515384 1613 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 00:51:58.515885 kubelet[1613]: E1031 00:51:58.515854 1613 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.85:6443/api/v1/nodes\": dial tcp 10.0.0.85:6443: connect: connection refused" node="localhost" Oct 31 00:51:58.717872 kubelet[1613]: I1031 00:51:58.717786 1613 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 00:51:58.718251 kubelet[1613]: E1031 00:51:58.718191 1613 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.85:6443/api/v1/nodes\": dial tcp 10.0.0.85:6443: connect: connection refused" node="localhost" Oct 31 00:51:58.746267 kubelet[1613]: E1031 00:51:58.746231 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:51:58.747177 env[1221]: time="2025-10-31T00:51:58.746941782Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:1297cb3893ef490f27cb9faf79fea327,Namespace:kube-system,Attempt:0,}" Oct 31 00:51:58.750834 kubelet[1613]: E1031 00:51:58.750696 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:51:58.751520 env[1221]: time="2025-10-31T00:51:58.751226168Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:4654b122dbb389158fe3c0766e603624,Namespace:kube-system,Attempt:0,}" Oct 31 00:51:58.753704 kubelet[1613]: E1031 00:51:58.753593 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:51:58.756382 env[1221]: time="2025-10-31T00:51:58.756333800Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a1d51be1ff02022474f2598f6e43038f,Namespace:kube-system,Attempt:0,}" Oct 31 00:51:58.904509 kubelet[1613]: E1031 00:51:58.904465 1613 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.85:6443: connect: connection refused" interval="800ms" Oct 31 00:51:59.120240 kubelet[1613]: I1031 00:51:59.120210 1613 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 00:51:59.120670 kubelet[1613]: E1031 00:51:59.120635 1613 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.85:6443/api/v1/nodes\": dial tcp 10.0.0.85:6443: connect: connection refused" node="localhost" Oct 31 00:51:59.205118 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount444030728.mount: Deactivated successfully. Oct 31 00:51:59.210970 env[1221]: time="2025-10-31T00:51:59.210921324Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.213458 env[1221]: time="2025-10-31T00:51:59.213416877Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.215363 env[1221]: time="2025-10-31T00:51:59.215322939Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.216259 env[1221]: time="2025-10-31T00:51:59.216230068Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.218185 env[1221]: time="2025-10-31T00:51:59.218143080Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.219341 env[1221]: time="2025-10-31T00:51:59.219300771Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.222408 env[1221]: time="2025-10-31T00:51:59.222349623Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.224210 env[1221]: time="2025-10-31T00:51:59.224172390Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.225617 env[1221]: time="2025-10-31T00:51:59.225582241Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.229769 env[1221]: time="2025-10-31T00:51:59.229722268Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.230981 env[1221]: time="2025-10-31T00:51:59.230947354Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.232898 env[1221]: time="2025-10-31T00:51:59.232859088Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:51:59.236049 kubelet[1613]: W1031 00:51:59.236002 1613 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.85:6443: connect: connection refused Oct 31 00:51:59.236122 kubelet[1613]: E1031 00:51:59.236048 1613 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.85:6443: connect: connection refused" logger="UnhandledError" Oct 31 00:51:59.258153 env[1221]: time="2025-10-31T00:51:59.258078728Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:51:59.258301 env[1221]: time="2025-10-31T00:51:59.258119995Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:51:59.258301 env[1221]: time="2025-10-31T00:51:59.258146961Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:51:59.258372 env[1221]: time="2025-10-31T00:51:59.258355337Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/18af2627b7126fbce0b634fd176cd66b59eb5c4ea3eaac5c6b86247c0f641530 pid=1660 runtime=io.containerd.runc.v2 Oct 31 00:51:59.265231 env[1221]: time="2025-10-31T00:51:59.265061907Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:51:59.265231 env[1221]: time="2025-10-31T00:51:59.265105612Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:51:59.265231 env[1221]: time="2025-10-31T00:51:59.265116758Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:51:59.265824 env[1221]: time="2025-10-31T00:51:59.265299406Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/12d5da354f9d11e7746afc1a1580495d9875d8b3f1bcecc6854778f2510a2b1b pid=1684 runtime=io.containerd.runc.v2 Oct 31 00:51:59.265910 env[1221]: time="2025-10-31T00:51:59.265065143Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:51:59.265910 env[1221]: time="2025-10-31T00:51:59.265109567Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:51:59.265910 env[1221]: time="2025-10-31T00:51:59.265120713Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:51:59.265910 env[1221]: time="2025-10-31T00:51:59.265270922Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8901ba0fc412180f98b1b4c4c1c22760d89a4bd204fcc8a700536aa181434be8 pid=1676 runtime=io.containerd.runc.v2 Oct 31 00:51:59.272828 systemd[1]: Started cri-containerd-18af2627b7126fbce0b634fd176cd66b59eb5c4ea3eaac5c6b86247c0f641530.scope. Oct 31 00:51:59.289395 systemd[1]: Started cri-containerd-12d5da354f9d11e7746afc1a1580495d9875d8b3f1bcecc6854778f2510a2b1b.scope. Oct 31 00:51:59.290378 systemd[1]: Started cri-containerd-8901ba0fc412180f98b1b4c4c1c22760d89a4bd204fcc8a700536aa181434be8.scope. Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.293000 audit: BPF prog-id=61 op=LOAD Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1660 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616632363237623731323666626365306236333466643137366364 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1660 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616632363237623731323666626365306236333466643137366364 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit: BPF prog-id=62 op=LOAD Oct 31 00:51:59.294000 audit[1677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1660 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616632363237623731323666626365306236333466643137366364 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit: BPF prog-id=63 op=LOAD Oct 31 00:51:59.294000 audit[1677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1660 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616632363237623731323666626365306236333466643137366364 Oct 31 00:51:59.294000 audit: BPF prog-id=63 op=UNLOAD Oct 31 00:51:59.294000 audit: BPF prog-id=62 op=UNLOAD Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { perfmon } for pid=1677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit[1677]: AVC avc: denied { bpf } for pid=1677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.294000 audit: BPF prog-id=64 op=LOAD Oct 31 00:51:59.294000 audit[1677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1660 pid=1677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138616632363237623731323666626365306236333466643137366364 Oct 31 00:51:59.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.306000 audit: BPF prog-id=65 op=LOAD Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1684 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643564613335346639643131653737343661666331613135383034 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1684 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643564613335346639643131653737343661666331613135383034 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit: BPF prog-id=66 op=LOAD Oct 31 00:51:59.308000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1684 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643564613335346639643131653737343661666331613135383034 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.308000 audit: BPF prog-id=67 op=LOAD Oct 31 00:51:59.308000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1684 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643564613335346639643131653737343661666331613135383034 Oct 31 00:51:59.309000 audit: BPF prog-id=67 op=UNLOAD Oct 31 00:51:59.309000 audit: BPF prog-id=66 op=UNLOAD Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { perfmon } for pid=1707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1707]: AVC avc: denied { bpf } for pid=1707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit: BPF prog-id=68 op=LOAD Oct 31 00:51:59.309000 audit[1707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1684 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132643564613335346639643131653737343661666331613135383034 Oct 31 00:51:59.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit: BPF prog-id=69 op=LOAD Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000151b38 a2=10 a3=0 items=0 ppid=1676 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303162613066633431323138306639386231623463346331633232 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001515a0 a2=3c a3=0 items=0 ppid=1676 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303162613066633431323138306639386231623463346331633232 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit: BPF prog-id=70 op=LOAD Oct 31 00:51:59.310000 audit[1719]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001518e0 a2=78 a3=0 items=0 ppid=1676 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303162613066633431323138306639386231623463346331633232 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit: BPF prog-id=71 op=LOAD Oct 31 00:51:59.310000 audit[1719]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000151670 a2=78 a3=0 items=0 ppid=1676 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303162613066633431323138306639386231623463346331633232 Oct 31 00:51:59.310000 audit: BPF prog-id=71 op=UNLOAD Oct 31 00:51:59.310000 audit: BPF prog-id=70 op=UNLOAD Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.310000 audit: BPF prog-id=72 op=LOAD Oct 31 00:51:59.310000 audit[1719]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000151b40 a2=78 a3=0 items=0 ppid=1676 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839303162613066633431323138306639386231623463346331633232 Oct 31 00:51:59.330284 env[1221]: time="2025-10-31T00:51:59.330232815Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:4654b122dbb389158fe3c0766e603624,Namespace:kube-system,Attempt:0,} returns sandbox id \"18af2627b7126fbce0b634fd176cd66b59eb5c4ea3eaac5c6b86247c0f641530\"" Oct 31 00:51:59.331887 kubelet[1613]: E1031 00:51:59.331630 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:51:59.334221 env[1221]: time="2025-10-31T00:51:59.334178208Z" level=info msg="CreateContainer within sandbox \"18af2627b7126fbce0b634fd176cd66b59eb5c4ea3eaac5c6b86247c0f641530\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 31 00:51:59.337961 env[1221]: time="2025-10-31T00:51:59.336299677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:1297cb3893ef490f27cb9faf79fea327,Namespace:kube-system,Attempt:0,} returns sandbox id \"8901ba0fc412180f98b1b4c4c1c22760d89a4bd204fcc8a700536aa181434be8\"" Oct 31 00:51:59.338086 kubelet[1613]: E1031 00:51:59.336908 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:51:59.338122 env[1221]: time="2025-10-31T00:51:59.338014261Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:a1d51be1ff02022474f2598f6e43038f,Namespace:kube-system,Attempt:0,} returns sandbox id \"12d5da354f9d11e7746afc1a1580495d9875d8b3f1bcecc6854778f2510a2b1b\"" Oct 31 00:51:59.339263 env[1221]: time="2025-10-31T00:51:59.338908287Z" level=info msg="CreateContainer within sandbox \"8901ba0fc412180f98b1b4c4c1c22760d89a4bd204fcc8a700536aa181434be8\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 31 00:51:59.339419 kubelet[1613]: E1031 00:51:59.339033 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:51:59.341251 env[1221]: time="2025-10-31T00:51:59.341215160Z" level=info msg="CreateContainer within sandbox \"12d5da354f9d11e7746afc1a1580495d9875d8b3f1bcecc6854778f2510a2b1b\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 31 00:51:59.352249 env[1221]: time="2025-10-31T00:51:59.352190713Z" level=info msg="CreateContainer within sandbox \"18af2627b7126fbce0b634fd176cd66b59eb5c4ea3eaac5c6b86247c0f641530\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"b926cc0a0dd1c66326cf70cc2df8d63b6a1dcdcc57cf4995dd4d59dbc433dfb6\"" Oct 31 00:51:59.352995 env[1221]: time="2025-10-31T00:51:59.352956222Z" level=info msg="StartContainer for \"b926cc0a0dd1c66326cf70cc2df8d63b6a1dcdcc57cf4995dd4d59dbc433dfb6\"" Oct 31 00:51:59.355509 env[1221]: time="2025-10-31T00:51:59.355435276Z" level=info msg="CreateContainer within sandbox \"8901ba0fc412180f98b1b4c4c1c22760d89a4bd204fcc8a700536aa181434be8\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"f6e2ec16c6c9a7a87fad9c8811509551a5779122f77ededebbcb49f2cbc361b7\"" Oct 31 00:51:59.356168 env[1221]: time="2025-10-31T00:51:59.356137945Z" level=info msg="StartContainer for \"f6e2ec16c6c9a7a87fad9c8811509551a5779122f77ededebbcb49f2cbc361b7\"" Oct 31 00:51:59.363176 env[1221]: time="2025-10-31T00:51:59.363104425Z" level=info msg="CreateContainer within sandbox \"12d5da354f9d11e7746afc1a1580495d9875d8b3f1bcecc6854778f2510a2b1b\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"9f71020a0272aa75de792e1c1426042fcfbd98573275e964609d3f660ff77752\"" Oct 31 00:51:59.363759 env[1221]: time="2025-10-31T00:51:59.363731989Z" level=info msg="StartContainer for \"9f71020a0272aa75de792e1c1426042fcfbd98573275e964609d3f660ff77752\"" Oct 31 00:51:59.370191 systemd[1]: Started cri-containerd-b926cc0a0dd1c66326cf70cc2df8d63b6a1dcdcc57cf4995dd4d59dbc433dfb6.scope. Oct 31 00:51:59.378532 systemd[1]: Started cri-containerd-f6e2ec16c6c9a7a87fad9c8811509551a5779122f77ededebbcb49f2cbc361b7.scope. Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.392000 audit: BPF prog-id=73 op=LOAD Oct 31 00:51:59.395657 systemd[1]: Started cri-containerd-9f71020a0272aa75de792e1c1426042fcfbd98573275e964609d3f660ff77752.scope. Oct 31 00:51:59.395000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.395000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1660 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323663633061306464316336363332366366373063633264663864 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1660 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323663633061306464316336363332366366373063633264663864 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit: BPF prog-id=74 op=LOAD Oct 31 00:51:59.396000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1660 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323663633061306464316336363332366366373063633264663864 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit: BPF prog-id=75 op=LOAD Oct 31 00:51:59.396000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1660 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323663633061306464316336363332366366373063633264663864 Oct 31 00:51:59.396000 audit: BPF prog-id=75 op=UNLOAD Oct 31 00:51:59.396000 audit: BPF prog-id=74 op=UNLOAD Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.396000 audit: BPF prog-id=76 op=LOAD Oct 31 00:51:59.396000 audit[1788]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1660 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323663633061306464316336363332366366373063633264663864 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.402000 audit: BPF prog-id=77 op=LOAD Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1676 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636653265633136633663396137613837666164396338383131353039 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1676 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636653265633136633663396137613837666164396338383131353039 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit: BPF prog-id=78 op=LOAD Oct 31 00:51:59.403000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1676 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636653265633136633663396137613837666164396338383131353039 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit: BPF prog-id=79 op=LOAD Oct 31 00:51:59.403000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1676 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636653265633136633663396137613837666164396338383131353039 Oct 31 00:51:59.403000 audit: BPF prog-id=79 op=UNLOAD Oct 31 00:51:59.403000 audit: BPF prog-id=78 op=UNLOAD Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.403000 audit: BPF prog-id=80 op=LOAD Oct 31 00:51:59.403000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1676 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636653265633136633663396137613837666164396338383131353039 Oct 31 00:51:59.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.411000 audit: BPF prog-id=81 op=LOAD Oct 31 00:51:59.411000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.411000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1684 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373130323061303237326161373564653739326531633134323630 Oct 31 00:51:59.411000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.411000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1684 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373130323061303237326161373564653739326531633134323630 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit: BPF prog-id=82 op=LOAD Oct 31 00:51:59.412000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1684 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373130323061303237326161373564653739326531633134323630 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.412000 audit: BPF prog-id=83 op=LOAD Oct 31 00:51:59.412000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1684 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373130323061303237326161373564653739326531633134323630 Oct 31 00:51:59.413000 audit: BPF prog-id=83 op=UNLOAD Oct 31 00:51:59.413000 audit: BPF prog-id=82 op=UNLOAD Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:51:59.413000 audit: BPF prog-id=84 op=LOAD Oct 31 00:51:59.413000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1684 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:51:59.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373130323061303237326161373564653739326531633134323630 Oct 31 00:51:59.425186 env[1221]: time="2025-10-31T00:51:59.425041436Z" level=info msg="StartContainer for \"b926cc0a0dd1c66326cf70cc2df8d63b6a1dcdcc57cf4995dd4d59dbc433dfb6\" returns successfully" Oct 31 00:51:59.433809 env[1221]: time="2025-10-31T00:51:59.433747709Z" level=info msg="StartContainer for \"f6e2ec16c6c9a7a87fad9c8811509551a5779122f77ededebbcb49f2cbc361b7\" returns successfully" Oct 31 00:51:59.438402 env[1221]: time="2025-10-31T00:51:59.438342998Z" level=info msg="StartContainer for \"9f71020a0272aa75de792e1c1426042fcfbd98573275e964609d3f660ff77752\" returns successfully" Oct 31 00:51:59.924223 kubelet[1613]: I1031 00:51:59.924188 1613 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 00:52:00.329406 kubelet[1613]: E1031 00:52:00.329159 1613 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 00:52:00.329406 kubelet[1613]: E1031 00:52:00.329297 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:00.330998 kubelet[1613]: E1031 00:52:00.330975 1613 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 00:52:00.331105 kubelet[1613]: E1031 00:52:00.331088 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:00.333857 kubelet[1613]: E1031 00:52:00.333673 1613 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Oct 31 00:52:00.333857 kubelet[1613]: E1031 00:52:00.333803 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:00.962000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7341 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.964414 kernel: kauditd_printk_skb: 561 callbacks suppressed Oct 31 00:52:00.964486 kernel: audit: type=1400 audit(1761871920.962:555): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7341 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.962000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4004aa4000 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:52:00.971321 kernel: audit: type=1300 audit(1761871920.962:555): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4004aa4000 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:52:00.971368 kernel: audit: type=1327 audit(1761871920.962:555): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:52:00.962000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:52:00.962000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.976854 kernel: audit: type=1400 audit(1761871920.962:556): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.976890 kernel: audit: type=1300 audit(1761871920.962:556): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=400440c0a0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:52:00.962000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=400440c0a0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:52:00.962000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:52:00.983219 kernel: audit: type=1327 audit(1761871920.962:556): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:52:00.983265 kernel: audit: type=1400 audit(1761871920.963:557): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.963000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.963000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4005d4c0f0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:52:00.992929 kernel: audit: type=1300 audit(1761871920.963:557): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4005d4c0f0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:52:00.992992 kernel: audit: type=1327 audit(1761871920.963:557): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:52:00.993010 kernel: audit: type=1400 audit(1761871920.975:558): avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.963000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:52:00.975000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.975000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400440c120 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:52:00.975000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:52:00.975000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7341 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.975000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004aa4450 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:52:00.975000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:52:00.991000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:00.991000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=4005f91a10 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:52:00.991000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:52:01.022000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7341 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:01.022000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000122690 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:52:01.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:52:01.022000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:01.022000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40000e0160 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:52:01.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:52:01.061612 kubelet[1613]: E1031 00:52:01.061566 1613 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 31 00:52:01.202880 kubelet[1613]: I1031 00:52:01.202743 1613 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Oct 31 00:52:01.274407 kubelet[1613]: I1031 00:52:01.274363 1613 apiserver.go:52] "Watching apiserver" Oct 31 00:52:01.301721 kubelet[1613]: I1031 00:52:01.301658 1613 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Oct 31 00:52:01.301911 kubelet[1613]: I1031 00:52:01.301742 1613 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:01.308660 kubelet[1613]: E1031 00:52:01.308610 1613 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:01.308660 kubelet[1613]: I1031 00:52:01.308641 1613 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Oct 31 00:52:01.310872 kubelet[1613]: E1031 00:52:01.310841 1613 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Oct 31 00:52:01.310872 kubelet[1613]: I1031 00:52:01.310869 1613 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 31 00:52:01.312819 kubelet[1613]: E1031 00:52:01.312787 1613 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Oct 31 00:52:01.333858 kubelet[1613]: I1031 00:52:01.333788 1613 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 31 00:52:01.334204 kubelet[1613]: I1031 00:52:01.334176 1613 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:01.336224 kubelet[1613]: E1031 00:52:01.336174 1613 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:01.336366 kubelet[1613]: E1031 00:52:01.336351 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:01.336781 kubelet[1613]: E1031 00:52:01.336755 1613 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Oct 31 00:52:01.336984 kubelet[1613]: E1031 00:52:01.336969 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:02.335690 kubelet[1613]: I1031 00:52:02.335656 1613 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:02.342991 kubelet[1613]: E1031 00:52:02.342953 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:03.241834 systemd[1]: Reloading. Oct 31 00:52:03.299693 /usr/lib/systemd/system-generators/torcx-generator[1910]: time="2025-10-31T00:52:03Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Oct 31 00:52:03.299723 /usr/lib/systemd/system-generators/torcx-generator[1910]: time="2025-10-31T00:52:03Z" level=info msg="torcx already run" Oct 31 00:52:03.337527 kubelet[1613]: E1031 00:52:03.337378 1613 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:03.363000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 31 00:52:03.363000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000e3c00 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:52:03.363000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:52:03.402875 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 31 00:52:03.403312 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 31 00:52:03.426000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:03.426000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000482ec0 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:52:03.426000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:52:03.427000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:03.427000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000659880 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:52:03.427000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:52:03.427000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:03.427000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000483180 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:52:03.427000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:52:03.428000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:52:03.428000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40006598c0 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:52:03.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:52:03.430525 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 31 00:52:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.500000 audit: BPF prog-id=85 op=LOAD Oct 31 00:52:03.500000 audit: BPF prog-id=69 op=UNLOAD Oct 31 00:52:03.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.501000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.502000 audit: BPF prog-id=86 op=LOAD Oct 31 00:52:03.502000 audit: BPF prog-id=46 op=UNLOAD Oct 31 00:52:03.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit: BPF prog-id=87 op=LOAD Oct 31 00:52:03.503000 audit: BPF prog-id=47 op=UNLOAD Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit: BPF prog-id=88 op=LOAD Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.504000 audit: BPF prog-id=89 op=LOAD Oct 31 00:52:03.504000 audit: BPF prog-id=48 op=UNLOAD Oct 31 00:52:03.504000 audit: BPF prog-id=49 op=UNLOAD Oct 31 00:52:03.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.506000 audit: BPF prog-id=90 op=LOAD Oct 31 00:52:03.506000 audit: BPF prog-id=81 op=UNLOAD Oct 31 00:52:03.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.508000 audit: BPF prog-id=91 op=LOAD Oct 31 00:52:03.508000 audit: BPF prog-id=50 op=UNLOAD Oct 31 00:52:03.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.509000 audit: BPF prog-id=92 op=LOAD Oct 31 00:52:03.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.510000 audit: BPF prog-id=93 op=LOAD Oct 31 00:52:03.510000 audit: BPF prog-id=51 op=UNLOAD Oct 31 00:52:03.510000 audit: BPF prog-id=52 op=UNLOAD Oct 31 00:52:03.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.512000 audit: BPF prog-id=94 op=LOAD Oct 31 00:52:03.512000 audit: BPF prog-id=73 op=UNLOAD Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.513000 audit: BPF prog-id=95 op=LOAD Oct 31 00:52:03.513000 audit: BPF prog-id=61 op=UNLOAD Oct 31 00:52:03.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit: BPF prog-id=96 op=LOAD Oct 31 00:52:03.515000 audit: BPF prog-id=65 op=UNLOAD Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.516000 audit: BPF prog-id=97 op=LOAD Oct 31 00:52:03.516000 audit: BPF prog-id=53 op=UNLOAD Oct 31 00:52:03.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit: BPF prog-id=98 op=LOAD Oct 31 00:52:03.518000 audit: BPF prog-id=54 op=UNLOAD Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit: BPF prog-id=99 op=LOAD Oct 31 00:52:03.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.519000 audit: BPF prog-id=100 op=LOAD Oct 31 00:52:03.519000 audit: BPF prog-id=55 op=UNLOAD Oct 31 00:52:03.519000 audit: BPF prog-id=56 op=UNLOAD Oct 31 00:52:03.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit: BPF prog-id=101 op=LOAD Oct 31 00:52:03.521000 audit: BPF prog-id=57 op=UNLOAD Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit: BPF prog-id=102 op=LOAD Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit: BPF prog-id=103 op=LOAD Oct 31 00:52:03.522000 audit: BPF prog-id=58 op=UNLOAD Oct 31 00:52:03.522000 audit: BPF prog-id=59 op=UNLOAD Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.522000 audit: BPF prog-id=104 op=LOAD Oct 31 00:52:03.522000 audit: BPF prog-id=60 op=UNLOAD Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.523000 audit: BPF prog-id=105 op=LOAD Oct 31 00:52:03.523000 audit: BPF prog-id=77 op=UNLOAD Oct 31 00:52:03.536441 systemd[1]: Stopping kubelet.service... Oct 31 00:52:03.567815 systemd[1]: kubelet.service: Deactivated successfully. Oct 31 00:52:03.568026 systemd[1]: Stopped kubelet.service. Oct 31 00:52:03.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:03.568085 systemd[1]: kubelet.service: Consumed 1.333s CPU time. Oct 31 00:52:03.570540 systemd[1]: Starting kubelet.service... Oct 31 00:52:03.669501 systemd[1]: Started kubelet.service. Oct 31 00:52:03.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:03.713720 kubelet[1951]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 31 00:52:03.714051 kubelet[1951]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Oct 31 00:52:03.714097 kubelet[1951]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 31 00:52:03.714300 kubelet[1951]: I1031 00:52:03.714258 1951 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 31 00:52:03.720868 kubelet[1951]: I1031 00:52:03.720828 1951 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Oct 31 00:52:03.720868 kubelet[1951]: I1031 00:52:03.720858 1951 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 31 00:52:03.721194 kubelet[1951]: I1031 00:52:03.721175 1951 server.go:954] "Client rotation is on, will bootstrap in background" Oct 31 00:52:03.722426 kubelet[1951]: I1031 00:52:03.722392 1951 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 31 00:52:03.725816 kubelet[1951]: I1031 00:52:03.725788 1951 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 31 00:52:03.730745 kubelet[1951]: E1031 00:52:03.730701 1951 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Oct 31 00:52:03.730907 kubelet[1951]: I1031 00:52:03.730892 1951 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Oct 31 00:52:03.733595 kubelet[1951]: I1031 00:52:03.733565 1951 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 31 00:52:03.733932 kubelet[1951]: I1031 00:52:03.733901 1951 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 31 00:52:03.734235 kubelet[1951]: I1031 00:52:03.734016 1951 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Oct 31 00:52:03.734370 kubelet[1951]: I1031 00:52:03.734355 1951 topology_manager.go:138] "Creating topology manager with none policy" Oct 31 00:52:03.734424 kubelet[1951]: I1031 00:52:03.734416 1951 container_manager_linux.go:304] "Creating device plugin manager" Oct 31 00:52:03.734554 kubelet[1951]: I1031 00:52:03.734541 1951 state_mem.go:36] "Initialized new in-memory state store" Oct 31 00:52:03.734761 kubelet[1951]: I1031 00:52:03.734748 1951 kubelet.go:446] "Attempting to sync node with API server" Oct 31 00:52:03.734861 kubelet[1951]: I1031 00:52:03.734849 1951 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 31 00:52:03.734927 kubelet[1951]: I1031 00:52:03.734918 1951 kubelet.go:352] "Adding apiserver pod source" Oct 31 00:52:03.734981 kubelet[1951]: I1031 00:52:03.734972 1951 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 31 00:52:03.737000 audit[1951]: AVC avc: denied { mac_admin } for pid=1951 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.737000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 00:52:03.737000 audit[1951]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000aa9920 a1=40009a8858 a2=4000aa98f0 a3=25 items=0 ppid=1 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:03.737000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 00:52:03.737000 audit[1951]: AVC avc: denied { mac_admin } for pid=1951 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.737000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 00:52:03.737000 audit[1951]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000758a40 a1=40009a8870 a2=4000aa99b0 a3=25 items=0 ppid=1 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:03.737000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 00:52:03.740735 kubelet[1951]: I1031 00:52:03.735966 1951 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 31 00:52:03.740735 kubelet[1951]: I1031 00:52:03.736462 1951 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Oct 31 00:52:03.740735 kubelet[1951]: I1031 00:52:03.736904 1951 watchdog_linux.go:99] "Systemd watchdog is not enabled" Oct 31 00:52:03.740735 kubelet[1951]: I1031 00:52:03.736929 1951 server.go:1287] "Started kubelet" Oct 31 00:52:03.740735 kubelet[1951]: I1031 00:52:03.738592 1951 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Oct 31 00:52:03.740735 kubelet[1951]: I1031 00:52:03.738623 1951 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Oct 31 00:52:03.740735 kubelet[1951]: I1031 00:52:03.738657 1951 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 31 00:52:03.741965 kubelet[1951]: I1031 00:52:03.741906 1951 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Oct 31 00:52:03.758094 kubelet[1951]: E1031 00:52:03.744720 1951 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.744771 1951 volume_manager.go:297] "Starting Kubelet Volume Manager" Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.744843 1951 server.go:479] "Adding debug handlers to kubelet server" Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.744973 1951 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.745086 1951 reconciler.go:26] "Reconciler: start to sync state" Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.751382 1951 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.752283 1951 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.752843 1951 factory.go:221] Registration of the containerd container factory successfully Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.752859 1951 factory.go:221] Registration of the systemd container factory successfully Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.752920 1951 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Oct 31 00:52:03.758094 kubelet[1951]: I1031 00:52:03.753873 1951 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Oct 31 00:52:03.780009 kubelet[1951]: I1031 00:52:03.779959 1951 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 31 00:52:03.781078 kubelet[1951]: I1031 00:52:03.781049 1951 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 31 00:52:03.781171 kubelet[1951]: I1031 00:52:03.781080 1951 status_manager.go:227] "Starting to sync pod status with apiserver" Oct 31 00:52:03.781171 kubelet[1951]: I1031 00:52:03.781111 1951 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Oct 31 00:52:03.781171 kubelet[1951]: I1031 00:52:03.781121 1951 kubelet.go:2382] "Starting kubelet main sync loop" Oct 31 00:52:03.781269 kubelet[1951]: E1031 00:52:03.781186 1951 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 31 00:52:03.808575 kubelet[1951]: I1031 00:52:03.808547 1951 cpu_manager.go:221] "Starting CPU manager" policy="none" Oct 31 00:52:03.808575 kubelet[1951]: I1031 00:52:03.808567 1951 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Oct 31 00:52:03.808739 kubelet[1951]: I1031 00:52:03.808613 1951 state_mem.go:36] "Initialized new in-memory state store" Oct 31 00:52:03.808846 kubelet[1951]: I1031 00:52:03.808829 1951 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 31 00:52:03.808875 kubelet[1951]: I1031 00:52:03.808845 1951 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 31 00:52:03.808875 kubelet[1951]: I1031 00:52:03.808865 1951 policy_none.go:49] "None policy: Start" Oct 31 00:52:03.808875 kubelet[1951]: I1031 00:52:03.808874 1951 memory_manager.go:186] "Starting memorymanager" policy="None" Oct 31 00:52:03.808950 kubelet[1951]: I1031 00:52:03.808895 1951 state_mem.go:35] "Initializing new in-memory state store" Oct 31 00:52:03.809020 kubelet[1951]: I1031 00:52:03.809008 1951 state_mem.go:75] "Updated machine memory state" Oct 31 00:52:03.814660 kubelet[1951]: I1031 00:52:03.814627 1951 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 31 00:52:03.813000 audit[1951]: AVC avc: denied { mac_admin } for pid=1951 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:03.813000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 31 00:52:03.813000 audit[1951]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40002c5a10 a1=4000c16b58 a2=40002c5980 a3=25 items=0 ppid=1 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:03.813000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 31 00:52:03.814934 kubelet[1951]: I1031 00:52:03.814692 1951 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Oct 31 00:52:03.814934 kubelet[1951]: I1031 00:52:03.814836 1951 eviction_manager.go:189] "Eviction manager: starting control loop" Oct 31 00:52:03.814934 kubelet[1951]: I1031 00:52:03.814846 1951 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Oct 31 00:52:03.815410 kubelet[1951]: I1031 00:52:03.815395 1951 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 31 00:52:03.818004 kubelet[1951]: E1031 00:52:03.817141 1951 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Oct 31 00:52:03.882159 kubelet[1951]: I1031 00:52:03.882092 1951 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Oct 31 00:52:03.882406 kubelet[1951]: I1031 00:52:03.882387 1951 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:03.882603 kubelet[1951]: I1031 00:52:03.882557 1951 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Oct 31 00:52:03.899112 kubelet[1951]: E1031 00:52:03.898394 1951 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:03.918736 kubelet[1951]: I1031 00:52:03.918703 1951 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Oct 31 00:52:03.930270 kubelet[1951]: I1031 00:52:03.930226 1951 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Oct 31 00:52:03.930402 kubelet[1951]: I1031 00:52:03.930331 1951 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Oct 31 00:52:04.046584 kubelet[1951]: I1031 00:52:04.046547 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1297cb3893ef490f27cb9faf79fea327-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"1297cb3893ef490f27cb9faf79fea327\") " pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:04.046584 kubelet[1951]: I1031 00:52:04.046587 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1297cb3893ef490f27cb9faf79fea327-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"1297cb3893ef490f27cb9faf79fea327\") " pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:04.046768 kubelet[1951]: I1031 00:52:04.046607 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:52:04.046768 kubelet[1951]: I1031 00:52:04.046624 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:52:04.046768 kubelet[1951]: I1031 00:52:04.046639 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:52:04.046768 kubelet[1951]: I1031 00:52:04.046654 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1297cb3893ef490f27cb9faf79fea327-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"1297cb3893ef490f27cb9faf79fea327\") " pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:04.046768 kubelet[1951]: I1031 00:52:04.046668 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:52:04.046942 kubelet[1951]: I1031 00:52:04.046686 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/4654b122dbb389158fe3c0766e603624-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"4654b122dbb389158fe3c0766e603624\") " pod="kube-system/kube-controller-manager-localhost" Oct 31 00:52:04.046942 kubelet[1951]: I1031 00:52:04.046701 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a1d51be1ff02022474f2598f6e43038f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"a1d51be1ff02022474f2598f6e43038f\") " pod="kube-system/kube-scheduler-localhost" Oct 31 00:52:04.199490 kubelet[1951]: E1031 00:52:04.199456 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:04.200012 kubelet[1951]: E1031 00:52:04.199993 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:04.200178 kubelet[1951]: E1031 00:52:04.200117 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:04.745152 kubelet[1951]: I1031 00:52:04.745087 1951 apiserver.go:52] "Watching apiserver" Oct 31 00:52:04.800030 kubelet[1951]: E1031 00:52:04.799984 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:04.800220 kubelet[1951]: I1031 00:52:04.800201 1951 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:04.800656 kubelet[1951]: E1031 00:52:04.800625 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:04.807010 kubelet[1951]: E1031 00:52:04.806969 1951 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 31 00:52:04.807163 kubelet[1951]: E1031 00:52:04.807152 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:04.842301 kubelet[1951]: I1031 00:52:04.842238 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.84221894 podStartE2EDuration="1.84221894s" podCreationTimestamp="2025-10-31 00:52:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 00:52:04.823982841 +0000 UTC m=+1.149374864" watchObservedRunningTime="2025-10-31 00:52:04.84221894 +0000 UTC m=+1.167610924" Oct 31 00:52:04.845269 kubelet[1951]: I1031 00:52:04.845231 1951 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Oct 31 00:52:04.853940 kubelet[1951]: I1031 00:52:04.853883 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.853863446 podStartE2EDuration="2.853863446s" podCreationTimestamp="2025-10-31 00:52:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 00:52:04.843030572 +0000 UTC m=+1.168422596" watchObservedRunningTime="2025-10-31 00:52:04.853863446 +0000 UTC m=+1.179255470" Oct 31 00:52:05.801617 kubelet[1951]: E1031 00:52:05.801560 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:05.802146 kubelet[1951]: E1031 00:52:05.802100 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:07.927952 kubelet[1951]: I1031 00:52:07.927920 1951 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 31 00:52:07.928389 env[1221]: time="2025-10-31T00:52:07.928241304Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 31 00:52:07.928581 kubelet[1951]: I1031 00:52:07.928452 1951 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 31 00:52:08.566058 kubelet[1951]: E1031 00:52:08.566025 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:08.787106 kubelet[1951]: I1031 00:52:08.787042 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=5.787022202 podStartE2EDuration="5.787022202s" podCreationTimestamp="2025-10-31 00:52:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 00:52:04.854170446 +0000 UTC m=+1.179562470" watchObservedRunningTime="2025-10-31 00:52:08.787022202 +0000 UTC m=+5.112414186" Oct 31 00:52:08.792519 systemd[1]: Created slice kubepods-besteffort-pod15a14e7e_4a1f_44ec_8ff9_9d5718848d11.slice. Oct 31 00:52:08.879993 kubelet[1951]: I1031 00:52:08.879874 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/15a14e7e-4a1f-44ec-8ff9-9d5718848d11-xtables-lock\") pod \"kube-proxy-5hqxt\" (UID: \"15a14e7e-4a1f-44ec-8ff9-9d5718848d11\") " pod="kube-system/kube-proxy-5hqxt" Oct 31 00:52:08.879993 kubelet[1951]: I1031 00:52:08.879917 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/15a14e7e-4a1f-44ec-8ff9-9d5718848d11-lib-modules\") pod \"kube-proxy-5hqxt\" (UID: \"15a14e7e-4a1f-44ec-8ff9-9d5718848d11\") " pod="kube-system/kube-proxy-5hqxt" Oct 31 00:52:08.879993 kubelet[1951]: I1031 00:52:08.879936 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/15a14e7e-4a1f-44ec-8ff9-9d5718848d11-kube-proxy\") pod \"kube-proxy-5hqxt\" (UID: \"15a14e7e-4a1f-44ec-8ff9-9d5718848d11\") " pod="kube-system/kube-proxy-5hqxt" Oct 31 00:52:08.879993 kubelet[1951]: I1031 00:52:08.879955 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tqh4c\" (UniqueName: \"kubernetes.io/projected/15a14e7e-4a1f-44ec-8ff9-9d5718848d11-kube-api-access-tqh4c\") pod \"kube-proxy-5hqxt\" (UID: \"15a14e7e-4a1f-44ec-8ff9-9d5718848d11\") " pod="kube-system/kube-proxy-5hqxt" Oct 31 00:52:08.990736 kubelet[1951]: I1031 00:52:08.990700 1951 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Oct 31 00:52:09.073375 systemd[1]: Created slice kubepods-besteffort-podbdd079c5_335f_4c28_a340_d9d46d1b2e07.slice. Oct 31 00:52:09.082200 kubelet[1951]: I1031 00:52:09.082150 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mkx27\" (UniqueName: \"kubernetes.io/projected/bdd079c5-335f-4c28-a340-d9d46d1b2e07-kube-api-access-mkx27\") pod \"tigera-operator-7dcd859c48-s5ckk\" (UID: \"bdd079c5-335f-4c28-a340-d9d46d1b2e07\") " pod="tigera-operator/tigera-operator-7dcd859c48-s5ckk" Oct 31 00:52:09.082376 kubelet[1951]: I1031 00:52:09.082207 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/bdd079c5-335f-4c28-a340-d9d46d1b2e07-var-lib-calico\") pod \"tigera-operator-7dcd859c48-s5ckk\" (UID: \"bdd079c5-335f-4c28-a340-d9d46d1b2e07\") " pod="tigera-operator/tigera-operator-7dcd859c48-s5ckk" Oct 31 00:52:09.114274 kubelet[1951]: E1031 00:52:09.114223 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:09.114886 env[1221]: time="2025-10-31T00:52:09.114824337Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5hqxt,Uid:15a14e7e-4a1f-44ec-8ff9-9d5718848d11,Namespace:kube-system,Attempt:0,}" Oct 31 00:52:09.135872 env[1221]: time="2025-10-31T00:52:09.135628479Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:09.135872 env[1221]: time="2025-10-31T00:52:09.135671127Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:09.135872 env[1221]: time="2025-10-31T00:52:09.135681609Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:09.135872 env[1221]: time="2025-10-31T00:52:09.135834558Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/432ab5807322daf52b18c63d053d3fb0d508729a1eff04eb8b5c75d5911cae54 pid=2008 runtime=io.containerd.runc.v2 Oct 31 00:52:09.151358 systemd[1]: run-containerd-runc-k8s.io-432ab5807322daf52b18c63d053d3fb0d508729a1eff04eb8b5c75d5911cae54-runc.HqpKUI.mount: Deactivated successfully. Oct 31 00:52:09.153114 systemd[1]: Started cri-containerd-432ab5807322daf52b18c63d053d3fb0d508729a1eff04eb8b5c75d5911cae54.scope. Oct 31 00:52:09.170935 kernel: kauditd_printk_skb: 287 callbacks suppressed Oct 31 00:52:09.171034 kernel: audit: type=1400 audit(1761871929.168:817): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.174606 kernel: audit: type=1400 audit(1761871929.168:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.174783 kernel: audit: type=1400 audit(1761871929.168:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.178338 kernel: audit: type=1400 audit(1761871929.168:820): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.178426 kernel: audit: type=1400 audit(1761871929.168:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.182126 kernel: audit: type=1400 audit(1761871929.168:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.182193 kernel: audit: type=1400 audit(1761871929.168:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.186200 kernel: audit: type=1400 audit(1761871929.168:824): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.186275 kernel: audit: type=1400 audit(1761871929.168:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.190265 kernel: audit: type=1400 audit(1761871929.169:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.169000 audit: BPF prog-id=106 op=LOAD Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2008 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433326162353830373332326461663532623138633633643035336433 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2008 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433326162353830373332326461663532623138633633643035336433 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.175000 audit: BPF prog-id=107 op=LOAD Oct 31 00:52:09.175000 audit[2019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2008 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433326162353830373332326461663532623138633633643035336433 Oct 31 00:52:09.177000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.177000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.177000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.177000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.177000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.177000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.177000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.177000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.177000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.177000 audit: BPF prog-id=108 op=LOAD Oct 31 00:52:09.177000 audit[2019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2008 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433326162353830373332326461663532623138633633643035336433 Oct 31 00:52:09.179000 audit: BPF prog-id=108 op=UNLOAD Oct 31 00:52:09.179000 audit: BPF prog-id=107 op=UNLOAD Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { perfmon } for pid=2019 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit[2019]: AVC avc: denied { bpf } for pid=2019 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.179000 audit: BPF prog-id=109 op=LOAD Oct 31 00:52:09.179000 audit[2019]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2008 pid=2019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433326162353830373332326461663532623138633633643035336433 Oct 31 00:52:09.203216 env[1221]: time="2025-10-31T00:52:09.203169595Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5hqxt,Uid:15a14e7e-4a1f-44ec-8ff9-9d5718848d11,Namespace:kube-system,Attempt:0,} returns sandbox id \"432ab5807322daf52b18c63d053d3fb0d508729a1eff04eb8b5c75d5911cae54\"" Oct 31 00:52:09.204100 kubelet[1951]: E1031 00:52:09.204065 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:09.207539 env[1221]: time="2025-10-31T00:52:09.207499856Z" level=info msg="CreateContainer within sandbox \"432ab5807322daf52b18c63d053d3fb0d508729a1eff04eb8b5c75d5911cae54\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 31 00:52:09.224929 env[1221]: time="2025-10-31T00:52:09.224882029Z" level=info msg="CreateContainer within sandbox \"432ab5807322daf52b18c63d053d3fb0d508729a1eff04eb8b5c75d5911cae54\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"f3905c758a13a51e65430b6ebf157eb20865638b5509f140d8deb5ef5b78e048\"" Oct 31 00:52:09.226246 env[1221]: time="2025-10-31T00:52:09.225939870Z" level=info msg="StartContainer for \"f3905c758a13a51e65430b6ebf157eb20865638b5509f140d8deb5ef5b78e048\"" Oct 31 00:52:09.240942 systemd[1]: Started cri-containerd-f3905c758a13a51e65430b6ebf157eb20865638b5509f140d8deb5ef5b78e048.scope. Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2008 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633393035633735386131336135316536353433306236656266313537 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit: BPF prog-id=110 op=LOAD Oct 31 00:52:09.260000 audit[2051]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2008 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633393035633735386131336135316536353433306236656266313537 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit: BPF prog-id=111 op=LOAD Oct 31 00:52:09.260000 audit[2051]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2008 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633393035633735386131336135316536353433306236656266313537 Oct 31 00:52:09.260000 audit: BPF prog-id=111 op=UNLOAD Oct 31 00:52:09.260000 audit: BPF prog-id=110 op=UNLOAD Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.260000 audit: BPF prog-id=112 op=LOAD Oct 31 00:52:09.260000 audit[2051]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2008 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633393035633735386131336135316536353433306236656266313537 Oct 31 00:52:09.276550 env[1221]: time="2025-10-31T00:52:09.276453920Z" level=info msg="StartContainer for \"f3905c758a13a51e65430b6ebf157eb20865638b5509f140d8deb5ef5b78e048\" returns successfully" Oct 31 00:52:09.377092 env[1221]: time="2025-10-31T00:52:09.377046379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-s5ckk,Uid:bdd079c5-335f-4c28-a340-d9d46d1b2e07,Namespace:tigera-operator,Attempt:0,}" Oct 31 00:52:09.397313 env[1221]: time="2025-10-31T00:52:09.397158990Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:09.397313 env[1221]: time="2025-10-31T00:52:09.397204518Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:09.397313 env[1221]: time="2025-10-31T00:52:09.397222322Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:09.400847 env[1221]: time="2025-10-31T00:52:09.400770794Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a7f961423faa747b6decd49d976b23c9355097465a0c9a4a3b25d1818eb27009 pid=2096 runtime=io.containerd.runc.v2 Oct 31 00:52:09.412567 systemd[1]: Started cri-containerd-a7f961423faa747b6decd49d976b23c9355097465a0c9a4a3b25d1818eb27009.scope. Oct 31 00:52:09.420000 audit[2146]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.420000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff33b8be0 a2=0 a3=1 items=0 ppid=2062 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.420000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 31 00:52:09.426000 audit[2147]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.426000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffda2a3160 a2=0 a3=1 items=0 ppid=2062 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.426000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 31 00:52:09.427000 audit[2148]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.427000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2fbd190 a2=0 a3=1 items=0 ppid=2062 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.427000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 31 00:52:09.428000 audit[2149]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.428000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3e6f470 a2=0 a3=1 items=0 ppid=2062 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 31 00:52:09.429000 audit[2150]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.429000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd6163f60 a2=0 a3=1 items=0 ppid=2062 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.429000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit: BPF prog-id=113 op=LOAD Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2096 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663936313432336661613734376236646563643439643937366232 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2096 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663936313432336661613734376236646563643439643937366232 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.430000 audit: BPF prog-id=114 op=LOAD Oct 31 00:52:09.430000 audit[2114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2096 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.430000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663936313432336661613734376236646563643439643937366232 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit: BPF prog-id=115 op=LOAD Oct 31 00:52:09.431000 audit[2114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2096 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663936313432336661613734376236646563643439643937366232 Oct 31 00:52:09.431000 audit: BPF prog-id=115 op=UNLOAD Oct 31 00:52:09.431000 audit: BPF prog-id=114 op=UNLOAD Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:09.431000 audit: BPF prog-id=116 op=LOAD Oct 31 00:52:09.431000 audit[2114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2096 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137663936313432336661613734376236646563643439643937366232 Oct 31 00:52:09.431000 audit[2151]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.431000 audit[2151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd2a096f0 a2=0 a3=1 items=0 ppid=2062 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.431000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 31 00:52:09.433782 kubelet[1951]: E1031 00:52:09.432073 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:09.433000 audit[2152]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.433000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe79385b0 a2=0 a3=1 items=0 ppid=2062 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.433000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 31 00:52:09.436000 audit[2154]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.436000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff0f9ff70 a2=0 a3=1 items=0 ppid=2062 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.436000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 31 00:52:09.443000 audit[2157]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.443000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe35f9230 a2=0 a3=1 items=0 ppid=2062 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 31 00:52:09.443000 audit[2158]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.443000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee18c720 a2=0 a3=1 items=0 ppid=2062 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 31 00:52:09.448000 audit[2160]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.448000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffed979d30 a2=0 a3=1 items=0 ppid=2062 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.448000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 31 00:52:09.449000 audit[2165]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.449000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff2ceff90 a2=0 a3=1 items=0 ppid=2062 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 31 00:52:09.454634 env[1221]: time="2025-10-31T00:52:09.454589031Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-s5ckk,Uid:bdd079c5-335f-4c28-a340-d9d46d1b2e07,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"a7f961423faa747b6decd49d976b23c9355097465a0c9a4a3b25d1818eb27009\"" Oct 31 00:52:09.454000 audit[2168]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.454000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd7c2cf20 a2=0 a3=1 items=0 ppid=2062 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 31 00:52:09.457157 env[1221]: time="2025-10-31T00:52:09.457098466Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Oct 31 00:52:09.460000 audit[2171]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.460000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffee9f8540 a2=0 a3=1 items=0 ppid=2062 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.460000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 31 00:52:09.462000 audit[2172]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.462000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffccd5f790 a2=0 a3=1 items=0 ppid=2062 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.462000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 31 00:52:09.464000 audit[2174]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.464000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe7f527f0 a2=0 a3=1 items=0 ppid=2062 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 31 00:52:09.465000 audit[2175]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.465000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff11886f0 a2=0 a3=1 items=0 ppid=2062 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.465000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 31 00:52:09.468000 audit[2177]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.468000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd30c74b0 a2=0 a3=1 items=0 ppid=2062 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.468000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 31 00:52:09.471000 audit[2180]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.471000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff5e81c90 a2=0 a3=1 items=0 ppid=2062 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.471000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 31 00:52:09.474000 audit[2183]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.474000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff4d4eb60 a2=0 a3=1 items=0 ppid=2062 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.474000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 31 00:52:09.475000 audit[2184]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.475000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffebe16f40 a2=0 a3=1 items=0 ppid=2062 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.475000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 31 00:52:09.477000 audit[2186]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.477000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff86e7150 a2=0 a3=1 items=0 ppid=2062 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.477000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 31 00:52:09.481000 audit[2189]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.481000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdd0d53a0 a2=0 a3=1 items=0 ppid=2062 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.481000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 31 00:52:09.482000 audit[2190]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.482000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd8f59ad0 a2=0 a3=1 items=0 ppid=2062 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.482000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 31 00:52:09.484000 audit[2192]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 31 00:52:09.484000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff4ebb170 a2=0 a3=1 items=0 ppid=2062 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.484000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 31 00:52:09.506000 audit[2198]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:09.506000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffffb830110 a2=0 a3=1 items=0 ppid=2062 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.506000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:09.518000 audit[2198]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:09.518000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffffb830110 a2=0 a3=1 items=0 ppid=2062 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.518000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:09.519000 audit[2204]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.519000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdd618040 a2=0 a3=1 items=0 ppid=2062 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.519000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 31 00:52:09.522000 audit[2208]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.522000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdd74f8b0 a2=0 a3=1 items=0 ppid=2062 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.522000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 31 00:52:09.526000 audit[2214]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.526000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff7d2dbe0 a2=0 a3=1 items=0 ppid=2062 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.526000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 31 00:52:09.528000 audit[2217]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.528000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffbb22de0 a2=0 a3=1 items=0 ppid=2062 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.528000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 31 00:52:09.530000 audit[2221]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.530000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffff72e8a0 a2=0 a3=1 items=0 ppid=2062 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.530000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 31 00:52:09.531000 audit[2223]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.531000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd11680c0 a2=0 a3=1 items=0 ppid=2062 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.531000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 31 00:52:09.534000 audit[2227]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.534000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcdc33c10 a2=0 a3=1 items=0 ppid=2062 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.534000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 31 00:52:09.538000 audit[2233]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.538000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff7804900 a2=0 a3=1 items=0 ppid=2062 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.538000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 31 00:52:09.539000 audit[2235]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.539000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1eb5f70 a2=0 a3=1 items=0 ppid=2062 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.539000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 31 00:52:09.541000 audit[2240]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.541000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcbbc0ee0 a2=0 a3=1 items=0 ppid=2062 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.541000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 31 00:52:09.543000 audit[2242]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.543000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd5c8fd90 a2=0 a3=1 items=0 ppid=2062 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.543000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 31 00:52:09.546000 audit[2247]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.546000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff2475c60 a2=0 a3=1 items=0 ppid=2062 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.546000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 31 00:52:09.550000 audit[2254]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.550000 audit[2254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffbaa7c20 a2=0 a3=1 items=0 ppid=2062 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.550000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 31 00:52:09.553000 audit[2258]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.553000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc26b5720 a2=0 a3=1 items=0 ppid=2062 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.553000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 31 00:52:09.554000 audit[2259]: NETFILTER_CFG table=filter:79 family=2 entries=14 op=nft_register_rule pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:09.555000 audit[2260]: NETFILTER_CFG table=nat:80 family=10 entries=1 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.555000 audit[2260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe86e7c30 a2=0 a3=1 items=0 ppid=2062 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 31 00:52:09.554000 audit[2259]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcd754e00 a2=0 a3=1 items=0 ppid=2062 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.554000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:09.563000 audit[2259]: NETFILTER_CFG table=nat:81 family=2 entries=20 op=nft_register_rule pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:09.563000 audit[2259]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffcd754e00 a2=0 a3=1 items=0 ppid=2062 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.563000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:09.570000 audit[2262]: NETFILTER_CFG table=nat:82 family=10 entries=2 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.570000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffffa214350 a2=0 a3=1 items=0 ppid=2062 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.570000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 31 00:52:09.574000 audit[2265]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.574000 audit[2265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffeecbc6f0 a2=0 a3=1 items=0 ppid=2062 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.574000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 31 00:52:09.575000 audit[2266]: NETFILTER_CFG table=nat:84 family=10 entries=1 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.575000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe29b5aa0 a2=0 a3=1 items=0 ppid=2062 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.575000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 31 00:52:09.577000 audit[2268]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.577000 audit[2268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffff707e560 a2=0 a3=1 items=0 ppid=2062 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.577000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 31 00:52:09.578000 audit[2269]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.578000 audit[2269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff94f48e0 a2=0 a3=1 items=0 ppid=2062 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.578000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 31 00:52:09.580000 audit[2271]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_rule pid=2271 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.580000 audit[2271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd0c9c830 a2=0 a3=1 items=0 ppid=2062 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.580000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 31 00:52:09.583000 audit[2274]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2274 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 31 00:52:09.583000 audit[2274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe0dacec0 a2=0 a3=1 items=0 ppid=2062 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 31 00:52:09.585000 audit[2276]: NETFILTER_CFG table=filter:89 family=10 entries=3 op=nft_register_rule pid=2276 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 31 00:52:09.585000 audit[2276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffcb779780 a2=0 a3=1 items=0 ppid=2062 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.585000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:09.586000 audit[2276]: NETFILTER_CFG table=nat:90 family=10 entries=7 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 31 00:52:09.586000 audit[2276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffcb779780 a2=0 a3=1 items=0 ppid=2062 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.586000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:09.619000 audit[2306]: NETFILTER_CFG table=filter:91 family=10 entries=6 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 31 00:52:09.619000 audit[2306]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffc83fd5e0 a2=0 a3=1 items=0 ppid=2062 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.619000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:09.625000 audit[2306]: NETFILTER_CFG table=nat:92 family=10 entries=10 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 31 00:52:09.625000 audit[2306]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffc83fd5e0 a2=0 a3=1 items=0 ppid=2062 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:09.625000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:09.817794 kubelet[1951]: E1031 00:52:09.817761 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:09.818050 kubelet[1951]: E1031 00:52:09.818031 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:09.829191 kubelet[1951]: I1031 00:52:09.829039 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-5hqxt" podStartSLOduration=1.829017012 podStartE2EDuration="1.829017012s" podCreationTimestamp="2025-10-31 00:52:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 00:52:09.828870344 +0000 UTC m=+6.154262368" watchObservedRunningTime="2025-10-31 00:52:09.829017012 +0000 UTC m=+6.154409036" Oct 31 00:52:10.745618 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2203414374.mount: Deactivated successfully. Oct 31 00:52:10.818174 kubelet[1951]: E1031 00:52:10.816895 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:11.393552 env[1221]: time="2025-10-31T00:52:11.393480759Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:11.394843 env[1221]: time="2025-10-31T00:52:11.394801703Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:11.396556 env[1221]: time="2025-10-31T00:52:11.396522355Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:11.397968 env[1221]: time="2025-10-31T00:52:11.397921992Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:11.398398 env[1221]: time="2025-10-31T00:52:11.398369668Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b\"" Oct 31 00:52:11.402174 env[1221]: time="2025-10-31T00:52:11.402139587Z" level=info msg="CreateContainer within sandbox \"a7f961423faa747b6decd49d976b23c9355097465a0c9a4a3b25d1818eb27009\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 31 00:52:11.412272 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount148278862.mount: Deactivated successfully. Oct 31 00:52:11.413092 env[1221]: time="2025-10-31T00:52:11.413039235Z" level=info msg="CreateContainer within sandbox \"a7f961423faa747b6decd49d976b23c9355097465a0c9a4a3b25d1818eb27009\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"5e6f82e57cfd8f4a39911cc0157efa9c58789787b0e76d1260202bc591147356\"" Oct 31 00:52:11.413792 env[1221]: time="2025-10-31T00:52:11.413685745Z" level=info msg="StartContainer for \"5e6f82e57cfd8f4a39911cc0157efa9c58789787b0e76d1260202bc591147356\"" Oct 31 00:52:11.440539 systemd[1]: run-containerd-runc-k8s.io-5e6f82e57cfd8f4a39911cc0157efa9c58789787b0e76d1260202bc591147356-runc.fLowPW.mount: Deactivated successfully. Oct 31 00:52:11.442820 systemd[1]: Started cri-containerd-5e6f82e57cfd8f4a39911cc0157efa9c58789787b0e76d1260202bc591147356.scope. Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.456000 audit: BPF prog-id=117 op=LOAD Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2096 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:11.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565366638326535376366643866346133393931316363303135376566 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2096 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:11.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565366638326535376366643866346133393931316363303135376566 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit: BPF prog-id=118 op=LOAD Oct 31 00:52:11.457000 audit[2314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2096 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:11.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565366638326535376366643866346133393931316363303135376566 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit: BPF prog-id=119 op=LOAD Oct 31 00:52:11.457000 audit[2314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2096 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:11.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565366638326535376366643866346133393931316363303135376566 Oct 31 00:52:11.457000 audit: BPF prog-id=119 op=UNLOAD Oct 31 00:52:11.457000 audit: BPF prog-id=118 op=UNLOAD Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:11.457000 audit: BPF prog-id=120 op=LOAD Oct 31 00:52:11.457000 audit[2314]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2096 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:11.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565366638326535376366643866346133393931316363303135376566 Oct 31 00:52:11.475812 env[1221]: time="2025-10-31T00:52:11.475733825Z" level=info msg="StartContainer for \"5e6f82e57cfd8f4a39911cc0157efa9c58789787b0e76d1260202bc591147356\" returns successfully" Oct 31 00:52:11.611913 kubelet[1951]: E1031 00:52:11.611866 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:11.823892 kubelet[1951]: E1031 00:52:11.821694 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:16.776039 sudo[1356]: pam_unix(sudo:session): session closed for user root Oct 31 00:52:16.777373 kernel: kauditd_printk_skb: 369 callbacks suppressed Oct 31 00:52:16.777465 kernel: audit: type=1106 audit(1761871936.774:932): pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:52:16.774000 audit[1356]: USER_END pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:52:16.775000 audit[1356]: CRED_DISP pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:52:16.783187 kernel: audit: type=1104 audit(1761871936.775:933): pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 31 00:52:16.784288 sshd[1352]: pam_unix(sshd:session): session closed for user core Oct 31 00:52:16.785000 audit[1352]: USER_END pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:16.788280 systemd[1]: sshd@6-10.0.0.85:22-10.0.0.1:52238.service: Deactivated successfully. Oct 31 00:52:16.789001 systemd[1]: session-7.scope: Deactivated successfully. Oct 31 00:52:16.789190 systemd[1]: session-7.scope: Consumed 7.214s CPU time. Oct 31 00:52:16.789615 systemd-logind[1206]: Session 7 logged out. Waiting for processes to exit. Oct 31 00:52:16.785000 audit[1352]: CRED_DISP pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:16.794212 kernel: audit: type=1106 audit(1761871936.785:934): pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:16.794303 kernel: audit: type=1104 audit(1761871936.785:935): pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:16.791870 systemd-logind[1206]: Removed session 7. Oct 31 00:52:16.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.85:22-10.0.0.1:52238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:16.800839 kernel: audit: type=1131 audit(1761871936.787:936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.85:22-10.0.0.1:52238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:17.979377 update_engine[1208]: I1031 00:52:17.978812 1208 update_attempter.cc:509] Updating boot flags... Oct 31 00:52:18.581081 kubelet[1951]: E1031 00:52:18.581040 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:18.592458 kubelet[1951]: I1031 00:52:18.592392 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-s5ckk" podStartSLOduration=7.649379398 podStartE2EDuration="9.592337778s" podCreationTimestamp="2025-10-31 00:52:09 +0000 UTC" firstStartedPulling="2025-10-31 00:52:09.45648723 +0000 UTC m=+5.781879254" lastFinishedPulling="2025-10-31 00:52:11.39944561 +0000 UTC m=+7.724837634" observedRunningTime="2025-10-31 00:52:11.843175604 +0000 UTC m=+8.168567628" watchObservedRunningTime="2025-10-31 00:52:18.592337778 +0000 UTC m=+14.917729802" Oct 31 00:52:18.900000 audit[2413]: NETFILTER_CFG table=filter:93 family=2 entries=15 op=nft_register_rule pid=2413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:18.900000 audit[2413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe4888770 a2=0 a3=1 items=0 ppid=2062 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:18.907510 kernel: audit: type=1325 audit(1761871938.900:937): table=filter:93 family=2 entries=15 op=nft_register_rule pid=2413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:18.907601 kernel: audit: type=1300 audit(1761871938.900:937): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe4888770 a2=0 a3=1 items=0 ppid=2062 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:18.900000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:18.909402 kernel: audit: type=1327 audit(1761871938.900:937): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:18.910000 audit[2413]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:18.914166 kernel: audit: type=1325 audit(1761871938.910:938): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:18.914248 kernel: audit: type=1300 audit(1761871938.910:938): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe4888770 a2=0 a3=1 items=0 ppid=2062 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:18.910000 audit[2413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe4888770 a2=0 a3=1 items=0 ppid=2062 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:18.910000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:18.931000 audit[2415]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:18.931000 audit[2415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe32994a0 a2=0 a3=1 items=0 ppid=2062 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:18.931000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:18.937000 audit[2415]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:18.937000 audit[2415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe32994a0 a2=0 a3=1 items=0 ppid=2062 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:18.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:22.010000 audit[2417]: NETFILTER_CFG table=filter:97 family=2 entries=16 op=nft_register_rule pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:22.012922 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 31 00:52:22.012989 kernel: audit: type=1325 audit(1761871942.010:941): table=filter:97 family=2 entries=16 op=nft_register_rule pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:22.010000 audit[2417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe898f6c0 a2=0 a3=1 items=0 ppid=2062 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:22.010000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:22.067782 kernel: audit: type=1300 audit(1761871942.010:941): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe898f6c0 a2=0 a3=1 items=0 ppid=2062 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:22.067926 kernel: audit: type=1327 audit(1761871942.010:941): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:22.069000 audit[2417]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:22.073169 kernel: audit: type=1325 audit(1761871942.069:942): table=nat:98 family=2 entries=12 op=nft_register_rule pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:22.069000 audit[2417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe898f6c0 a2=0 a3=1 items=0 ppid=2062 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:22.069000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:22.079256 kernel: audit: type=1300 audit(1761871942.069:942): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe898f6c0 a2=0 a3=1 items=0 ppid=2062 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:22.079338 kernel: audit: type=1327 audit(1761871942.069:942): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:22.089000 audit[2419]: NETFILTER_CFG table=filter:99 family=2 entries=18 op=nft_register_rule pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:22.093157 kernel: audit: type=1325 audit(1761871942.089:943): table=filter:99 family=2 entries=18 op=nft_register_rule pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:22.089000 audit[2419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffedb26d90 a2=0 a3=1 items=0 ppid=2062 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:22.089000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:22.100032 kernel: audit: type=1300 audit(1761871942.089:943): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffedb26d90 a2=0 a3=1 items=0 ppid=2062 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:22.100113 kernel: audit: type=1327 audit(1761871942.089:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:22.100150 kernel: audit: type=1325 audit(1761871942.094:944): table=nat:100 family=2 entries=12 op=nft_register_rule pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:22.094000 audit[2419]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2419 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:22.094000 audit[2419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffedb26d90 a2=0 a3=1 items=0 ppid=2062 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:22.094000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:24.854000 audit[2423]: NETFILTER_CFG table=filter:101 family=2 entries=21 op=nft_register_rule pid=2423 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:24.854000 audit[2423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd05233d0 a2=0 a3=1 items=0 ppid=2062 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:24.854000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:24.860000 audit[2423]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=2423 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:24.860000 audit[2423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd05233d0 a2=0 a3=1 items=0 ppid=2062 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:24.860000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:24.873000 audit[2425]: NETFILTER_CFG table=filter:103 family=2 entries=22 op=nft_register_rule pid=2425 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:24.873000 audit[2425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd19b0c10 a2=0 a3=1 items=0 ppid=2062 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:24.873000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:24.877000 audit[2425]: NETFILTER_CFG table=nat:104 family=2 entries=12 op=nft_register_rule pid=2425 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:24.877000 audit[2425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd19b0c10 a2=0 a3=1 items=0 ppid=2062 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:24.877000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:24.899797 systemd[1]: Created slice kubepods-besteffort-pod94841225_704d_4849_a843_b70873a01373.slice. Oct 31 00:52:24.996930 kubelet[1951]: I1031 00:52:24.996889 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dn8nh\" (UniqueName: \"kubernetes.io/projected/94841225-704d-4849-a843-b70873a01373-kube-api-access-dn8nh\") pod \"calico-typha-5b65cf685b-nh5zq\" (UID: \"94841225-704d-4849-a843-b70873a01373\") " pod="calico-system/calico-typha-5b65cf685b-nh5zq" Oct 31 00:52:24.996930 kubelet[1951]: I1031 00:52:24.996934 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/94841225-704d-4849-a843-b70873a01373-tigera-ca-bundle\") pod \"calico-typha-5b65cf685b-nh5zq\" (UID: \"94841225-704d-4849-a843-b70873a01373\") " pod="calico-system/calico-typha-5b65cf685b-nh5zq" Oct 31 00:52:24.997345 kubelet[1951]: I1031 00:52:24.996951 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/94841225-704d-4849-a843-b70873a01373-typha-certs\") pod \"calico-typha-5b65cf685b-nh5zq\" (UID: \"94841225-704d-4849-a843-b70873a01373\") " pod="calico-system/calico-typha-5b65cf685b-nh5zq" Oct 31 00:52:25.171748 systemd[1]: Created slice kubepods-besteffort-podf48d3755_b0a0_48bb_8e0e_8dfb0d1632bd.slice. Oct 31 00:52:25.198773 kubelet[1951]: I1031 00:52:25.198723 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-var-lib-calico\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.198929 kubelet[1951]: I1031 00:52:25.198807 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-policysync\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.198929 kubelet[1951]: I1031 00:52:25.198830 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-lib-modules\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.198929 kubelet[1951]: I1031 00:52:25.198846 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-xtables-lock\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.198929 kubelet[1951]: I1031 00:52:25.198863 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-cni-bin-dir\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.198929 kubelet[1951]: I1031 00:52:25.198878 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-tigera-ca-bundle\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.199064 kubelet[1951]: I1031 00:52:25.198894 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-cni-net-dir\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.199064 kubelet[1951]: I1031 00:52:25.198914 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-cni-log-dir\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.199064 kubelet[1951]: I1031 00:52:25.198931 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-flexvol-driver-host\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.199064 kubelet[1951]: I1031 00:52:25.198950 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-node-certs\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.199064 kubelet[1951]: I1031 00:52:25.198964 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-var-run-calico\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.199207 kubelet[1951]: I1031 00:52:25.198979 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gdv54\" (UniqueName: \"kubernetes.io/projected/f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd-kube-api-access-gdv54\") pod \"calico-node-9wqpt\" (UID: \"f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd\") " pod="calico-system/calico-node-9wqpt" Oct 31 00:52:25.201965 kubelet[1951]: E1031 00:52:25.201940 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:25.202434 env[1221]: time="2025-10-31T00:52:25.202393108Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5b65cf685b-nh5zq,Uid:94841225-704d-4849-a843-b70873a01373,Namespace:calico-system,Attempt:0,}" Oct 31 00:52:25.222061 env[1221]: time="2025-10-31T00:52:25.221986025Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:25.222061 env[1221]: time="2025-10-31T00:52:25.222037669Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:25.222276 env[1221]: time="2025-10-31T00:52:25.222243366Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:25.222566 env[1221]: time="2025-10-31T00:52:25.222524630Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b9e43d10cbc8e2b45eda330955a656e85f8bbd26181bfaff989bfb1f3e4d48a4 pid=2435 runtime=io.containerd.runc.v2 Oct 31 00:52:25.241418 systemd[1]: Started cri-containerd-b9e43d10cbc8e2b45eda330955a656e85f8bbd26181bfaff989bfb1f3e4d48a4.scope. Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit: BPF prog-id=121 op=LOAD Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2435 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239653433643130636263386532623435656461333330393535613635 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2435 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239653433643130636263386532623435656461333330393535613635 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.253000 audit: BPF prog-id=122 op=LOAD Oct 31 00:52:25.253000 audit[2445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2435 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239653433643130636263386532623435656461333330393535613635 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit: BPF prog-id=123 op=LOAD Oct 31 00:52:25.254000 audit[2445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2435 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239653433643130636263386532623435656461333330393535613635 Oct 31 00:52:25.254000 audit: BPF prog-id=123 op=UNLOAD Oct 31 00:52:25.254000 audit: BPF prog-id=122 op=UNLOAD Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { perfmon } for pid=2445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit[2445]: AVC avc: denied { bpf } for pid=2445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.254000 audit: BPF prog-id=124 op=LOAD Oct 31 00:52:25.254000 audit[2445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2435 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239653433643130636263386532623435656461333330393535613635 Oct 31 00:52:25.273670 env[1221]: time="2025-10-31T00:52:25.273622218Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5b65cf685b-nh5zq,Uid:94841225-704d-4849-a843-b70873a01373,Namespace:calico-system,Attempt:0,} returns sandbox id \"b9e43d10cbc8e2b45eda330955a656e85f8bbd26181bfaff989bfb1f3e4d48a4\"" Oct 31 00:52:25.274421 kubelet[1951]: E1031 00:52:25.274317 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:25.275615 env[1221]: time="2025-10-31T00:52:25.275581822Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Oct 31 00:52:25.300318 kubelet[1951]: E1031 00:52:25.299921 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.300318 kubelet[1951]: W1031 00:52:25.299943 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.300318 kubelet[1951]: E1031 00:52:25.300122 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.300318 kubelet[1951]: W1031 00:52:25.300184 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.300828 kubelet[1951]: E1031 00:52:25.300596 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.300828 kubelet[1951]: E1031 00:52:25.300600 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.300828 kubelet[1951]: E1031 00:52:25.300698 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.300828 kubelet[1951]: W1031 00:52:25.300707 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.300828 kubelet[1951]: E1031 00:52:25.300724 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.301182 kubelet[1951]: E1031 00:52:25.301047 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.301182 kubelet[1951]: W1031 00:52:25.301062 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.301182 kubelet[1951]: E1031 00:52:25.301088 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.301521 kubelet[1951]: E1031 00:52:25.301361 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.301521 kubelet[1951]: W1031 00:52:25.301375 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.301521 kubelet[1951]: E1031 00:52:25.301466 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.301732 kubelet[1951]: E1031 00:52:25.301697 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.301732 kubelet[1951]: W1031 00:52:25.301710 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.301921 kubelet[1951]: E1031 00:52:25.301908 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.302084 kubelet[1951]: E1031 00:52:25.302028 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.302194 kubelet[1951]: W1031 00:52:25.302181 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.302370 kubelet[1951]: E1031 00:52:25.302346 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.302585 kubelet[1951]: E1031 00:52:25.302573 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.302911 kubelet[1951]: W1031 00:52:25.302895 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.303015 kubelet[1951]: E1031 00:52:25.303001 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.303576 kubelet[1951]: E1031 00:52:25.303559 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.303677 kubelet[1951]: W1031 00:52:25.303663 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.303827 kubelet[1951]: E1031 00:52:25.303810 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.304074 kubelet[1951]: E1031 00:52:25.304061 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.304183 kubelet[1951]: W1031 00:52:25.304170 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.304265 kubelet[1951]: E1031 00:52:25.304252 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.304653 kubelet[1951]: E1031 00:52:25.304638 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.304751 kubelet[1951]: W1031 00:52:25.304738 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.305060 kubelet[1951]: E1031 00:52:25.305031 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.305378 kubelet[1951]: E1031 00:52:25.305360 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.305534 kubelet[1951]: W1031 00:52:25.305518 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.305949 kubelet[1951]: E1031 00:52:25.305923 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.306228 kubelet[1951]: E1031 00:52:25.306205 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.306314 kubelet[1951]: W1031 00:52:25.306301 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.306469 kubelet[1951]: E1031 00:52:25.306449 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.306650 kubelet[1951]: E1031 00:52:25.306637 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.306720 kubelet[1951]: W1031 00:52:25.306707 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.306857 kubelet[1951]: E1031 00:52:25.306824 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.307010 kubelet[1951]: E1031 00:52:25.306993 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.307073 kubelet[1951]: W1031 00:52:25.307062 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.307159 kubelet[1951]: E1031 00:52:25.307146 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.307513 kubelet[1951]: E1031 00:52:25.307496 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.307600 kubelet[1951]: W1031 00:52:25.307587 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.307669 kubelet[1951]: E1031 00:52:25.307657 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.307914 kubelet[1951]: E1031 00:52:25.307902 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.307985 kubelet[1951]: W1031 00:52:25.307974 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.308062 kubelet[1951]: E1031 00:52:25.308050 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.308300 kubelet[1951]: E1031 00:52:25.308284 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.308397 kubelet[1951]: W1031 00:52:25.308300 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.308397 kubelet[1951]: E1031 00:52:25.308321 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.308591 kubelet[1951]: E1031 00:52:25.308578 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.308633 kubelet[1951]: W1031 00:52:25.308591 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.308633 kubelet[1951]: E1031 00:52:25.308605 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.308799 kubelet[1951]: E1031 00:52:25.308788 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.308841 kubelet[1951]: W1031 00:52:25.308801 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.308841 kubelet[1951]: E1031 00:52:25.308811 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.314189 kubelet[1951]: E1031 00:52:25.314119 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.314283 kubelet[1951]: W1031 00:52:25.314267 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.314377 kubelet[1951]: E1031 00:52:25.314360 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.357835 kubelet[1951]: E1031 00:52:25.357744 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:52:25.374163 kubelet[1951]: E1031 00:52:25.374138 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.374319 kubelet[1951]: W1031 00:52:25.374303 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.374398 kubelet[1951]: E1031 00:52:25.374385 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.374981 kubelet[1951]: E1031 00:52:25.374944 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.375144 kubelet[1951]: W1031 00:52:25.375071 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.375223 kubelet[1951]: E1031 00:52:25.375210 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.375497 kubelet[1951]: E1031 00:52:25.375483 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.375577 kubelet[1951]: W1031 00:52:25.375564 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.375639 kubelet[1951]: E1031 00:52:25.375627 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.375969 kubelet[1951]: E1031 00:52:25.375952 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.376063 kubelet[1951]: W1031 00:52:25.376051 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.376148 kubelet[1951]: E1031 00:52:25.376119 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.376443 kubelet[1951]: E1031 00:52:25.376429 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.376521 kubelet[1951]: W1031 00:52:25.376508 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.376594 kubelet[1951]: E1031 00:52:25.376581 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.377139 kubelet[1951]: E1031 00:52:25.377105 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.377241 kubelet[1951]: W1031 00:52:25.377226 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.377306 kubelet[1951]: E1031 00:52:25.377293 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.377543 kubelet[1951]: E1031 00:52:25.377529 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.377619 kubelet[1951]: W1031 00:52:25.377607 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.377684 kubelet[1951]: E1031 00:52:25.377673 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.377974 kubelet[1951]: E1031 00:52:25.377958 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.378277 kubelet[1951]: W1031 00:52:25.378031 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.378411 kubelet[1951]: E1031 00:52:25.378393 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.378697 kubelet[1951]: E1031 00:52:25.378682 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.378823 kubelet[1951]: W1031 00:52:25.378764 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.378949 kubelet[1951]: E1031 00:52:25.378935 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.379254 kubelet[1951]: E1031 00:52:25.379238 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.379331 kubelet[1951]: W1031 00:52:25.379317 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.379416 kubelet[1951]: E1031 00:52:25.379402 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.379635 kubelet[1951]: E1031 00:52:25.379623 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.379711 kubelet[1951]: W1031 00:52:25.379698 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.379772 kubelet[1951]: E1031 00:52:25.379760 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.379973 kubelet[1951]: E1031 00:52:25.379962 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.380043 kubelet[1951]: W1031 00:52:25.380031 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.380104 kubelet[1951]: E1031 00:52:25.380092 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.380336 kubelet[1951]: E1031 00:52:25.380320 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.380431 kubelet[1951]: W1031 00:52:25.380416 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.380495 kubelet[1951]: E1031 00:52:25.380481 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.380698 kubelet[1951]: E1031 00:52:25.380686 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.380764 kubelet[1951]: W1031 00:52:25.380752 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.380816 kubelet[1951]: E1031 00:52:25.380805 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.380997 kubelet[1951]: E1031 00:52:25.380986 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.381067 kubelet[1951]: W1031 00:52:25.381056 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.381183 kubelet[1951]: E1031 00:52:25.381115 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.381410 kubelet[1951]: E1031 00:52:25.381398 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.381491 kubelet[1951]: W1031 00:52:25.381479 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.381552 kubelet[1951]: E1031 00:52:25.381541 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.381756 kubelet[1951]: E1031 00:52:25.381743 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.381822 kubelet[1951]: W1031 00:52:25.381810 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.381884 kubelet[1951]: E1031 00:52:25.381872 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.382077 kubelet[1951]: E1031 00:52:25.382066 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.382162 kubelet[1951]: W1031 00:52:25.382148 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.382229 kubelet[1951]: E1031 00:52:25.382217 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.382423 kubelet[1951]: E1031 00:52:25.382412 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.382488 kubelet[1951]: W1031 00:52:25.382477 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.382543 kubelet[1951]: E1031 00:52:25.382532 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.382796 kubelet[1951]: E1031 00:52:25.382784 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.382869 kubelet[1951]: W1031 00:52:25.382857 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.382929 kubelet[1951]: E1031 00:52:25.382918 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.406587 kubelet[1951]: E1031 00:52:25.406561 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.406587 kubelet[1951]: W1031 00:52:25.406581 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.406742 kubelet[1951]: E1031 00:52:25.406598 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.406742 kubelet[1951]: I1031 00:52:25.406637 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/a1446d6d-3b62-4890-8f90-ef3bb45fee6d-registration-dir\") pod \"csi-node-driver-d7vjq\" (UID: \"a1446d6d-3b62-4890-8f90-ef3bb45fee6d\") " pod="calico-system/csi-node-driver-d7vjq" Oct 31 00:52:25.406858 kubelet[1951]: E1031 00:52:25.406845 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.406858 kubelet[1951]: W1031 00:52:25.406858 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.406933 kubelet[1951]: E1031 00:52:25.406869 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.406933 kubelet[1951]: I1031 00:52:25.406884 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/a1446d6d-3b62-4890-8f90-ef3bb45fee6d-kubelet-dir\") pod \"csi-node-driver-d7vjq\" (UID: \"a1446d6d-3b62-4890-8f90-ef3bb45fee6d\") " pod="calico-system/csi-node-driver-d7vjq" Oct 31 00:52:25.407133 kubelet[1951]: E1031 00:52:25.407112 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.407185 kubelet[1951]: W1031 00:52:25.407169 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.407212 kubelet[1951]: E1031 00:52:25.407195 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.407255 kubelet[1951]: I1031 00:52:25.407210 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/a1446d6d-3b62-4890-8f90-ef3bb45fee6d-varrun\") pod \"csi-node-driver-d7vjq\" (UID: \"a1446d6d-3b62-4890-8f90-ef3bb45fee6d\") " pod="calico-system/csi-node-driver-d7vjq" Oct 31 00:52:25.407460 kubelet[1951]: E1031 00:52:25.407444 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.407504 kubelet[1951]: W1031 00:52:25.407460 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.407504 kubelet[1951]: E1031 00:52:25.407478 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.407668 kubelet[1951]: E1031 00:52:25.407658 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.407706 kubelet[1951]: W1031 00:52:25.407669 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.407706 kubelet[1951]: E1031 00:52:25.407683 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.407848 kubelet[1951]: E1031 00:52:25.407837 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.407887 kubelet[1951]: W1031 00:52:25.407848 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.407887 kubelet[1951]: E1031 00:52:25.407860 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.408014 kubelet[1951]: E1031 00:52:25.408004 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.408014 kubelet[1951]: W1031 00:52:25.408015 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.408095 kubelet[1951]: E1031 00:52:25.408022 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.408195 kubelet[1951]: E1031 00:52:25.408186 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.408195 kubelet[1951]: W1031 00:52:25.408195 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.408269 kubelet[1951]: E1031 00:52:25.408207 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.408269 kubelet[1951]: I1031 00:52:25.408226 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sgr4h\" (UniqueName: \"kubernetes.io/projected/a1446d6d-3b62-4890-8f90-ef3bb45fee6d-kube-api-access-sgr4h\") pod \"csi-node-driver-d7vjq\" (UID: \"a1446d6d-3b62-4890-8f90-ef3bb45fee6d\") " pod="calico-system/csi-node-driver-d7vjq" Oct 31 00:52:25.408511 kubelet[1951]: E1031 00:52:25.408496 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.408511 kubelet[1951]: W1031 00:52:25.408512 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.408583 kubelet[1951]: E1031 00:52:25.408558 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.408606 kubelet[1951]: I1031 00:52:25.408587 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/a1446d6d-3b62-4890-8f90-ef3bb45fee6d-socket-dir\") pod \"csi-node-driver-d7vjq\" (UID: \"a1446d6d-3b62-4890-8f90-ef3bb45fee6d\") " pod="calico-system/csi-node-driver-d7vjq" Oct 31 00:52:25.408709 kubelet[1951]: E1031 00:52:25.408698 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.408745 kubelet[1951]: W1031 00:52:25.408712 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.408815 kubelet[1951]: E1031 00:52:25.408795 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.408889 kubelet[1951]: E1031 00:52:25.408879 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.408889 kubelet[1951]: W1031 00:52:25.408888 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.408962 kubelet[1951]: E1031 00:52:25.408902 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.409079 kubelet[1951]: E1031 00:52:25.409068 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.409120 kubelet[1951]: W1031 00:52:25.409080 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.409120 kubelet[1951]: E1031 00:52:25.409094 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.409281 kubelet[1951]: E1031 00:52:25.409271 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.409324 kubelet[1951]: W1031 00:52:25.409281 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.409324 kubelet[1951]: E1031 00:52:25.409290 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.409465 kubelet[1951]: E1031 00:52:25.409455 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.409465 kubelet[1951]: W1031 00:52:25.409466 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.409532 kubelet[1951]: E1031 00:52:25.409474 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.409612 kubelet[1951]: E1031 00:52:25.409603 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.409612 kubelet[1951]: W1031 00:52:25.409612 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.409666 kubelet[1951]: E1031 00:52:25.409619 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.473985 kubelet[1951]: E1031 00:52:25.473861 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:25.484568 env[1221]: time="2025-10-31T00:52:25.474977960Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-9wqpt,Uid:f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd,Namespace:calico-system,Attempt:0,}" Oct 31 00:52:25.502815 env[1221]: time="2025-10-31T00:52:25.502718118Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:25.502815 env[1221]: time="2025-10-31T00:52:25.502785843Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:25.502815 env[1221]: time="2025-10-31T00:52:25.502795924Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:25.503052 env[1221]: time="2025-10-31T00:52:25.503006062Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bde329b78d4bcb244f265b1b322f7a72043d5262122b2094de4bf1a81c5c640d pid=2532 runtime=io.containerd.runc.v2 Oct 31 00:52:25.509113 kubelet[1951]: E1031 00:52:25.509068 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.509113 kubelet[1951]: W1031 00:52:25.509102 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.509286 kubelet[1951]: E1031 00:52:25.509123 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.509695 kubelet[1951]: E1031 00:52:25.509671 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.509695 kubelet[1951]: W1031 00:52:25.509686 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.509781 kubelet[1951]: E1031 00:52:25.509703 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.510222 kubelet[1951]: E1031 00:52:25.510198 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.510222 kubelet[1951]: W1031 00:52:25.510213 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.510222 kubelet[1951]: E1031 00:52:25.510229 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.511694 kubelet[1951]: E1031 00:52:25.511669 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.511694 kubelet[1951]: W1031 00:52:25.511688 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.511793 kubelet[1951]: E1031 00:52:25.511705 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.512368 kubelet[1951]: E1031 00:52:25.512329 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.512368 kubelet[1951]: W1031 00:52:25.512346 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.512454 kubelet[1951]: E1031 00:52:25.512414 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.512885 kubelet[1951]: E1031 00:52:25.512866 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.512885 kubelet[1951]: W1031 00:52:25.512881 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.512976 kubelet[1951]: E1031 00:52:25.512948 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.513095 kubelet[1951]: E1031 00:52:25.513078 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.513095 kubelet[1951]: W1031 00:52:25.513090 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.513185 kubelet[1951]: E1031 00:52:25.513146 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.513294 kubelet[1951]: E1031 00:52:25.513276 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.513294 kubelet[1951]: W1031 00:52:25.513287 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.513352 kubelet[1951]: E1031 00:52:25.513335 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.513487 kubelet[1951]: E1031 00:52:25.513465 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.513487 kubelet[1951]: W1031 00:52:25.513481 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.513552 kubelet[1951]: E1031 00:52:25.513528 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.513655 kubelet[1951]: E1031 00:52:25.513638 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.513655 kubelet[1951]: W1031 00:52:25.513649 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.513716 kubelet[1951]: E1031 00:52:25.513694 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.513830 kubelet[1951]: E1031 00:52:25.513811 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.513830 kubelet[1951]: W1031 00:52:25.513823 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.513933 kubelet[1951]: E1031 00:52:25.513838 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.514011 kubelet[1951]: E1031 00:52:25.513996 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.514011 kubelet[1951]: W1031 00:52:25.514005 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.514070 kubelet[1951]: E1031 00:52:25.514017 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.514221 kubelet[1951]: E1031 00:52:25.514205 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.514221 kubelet[1951]: W1031 00:52:25.514217 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.514279 kubelet[1951]: E1031 00:52:25.514227 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.514410 kubelet[1951]: E1031 00:52:25.514385 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.514410 kubelet[1951]: W1031 00:52:25.514395 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.514410 kubelet[1951]: E1031 00:52:25.514407 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.514721 kubelet[1951]: E1031 00:52:25.514661 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.514721 kubelet[1951]: W1031 00:52:25.514670 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.514799 kubelet[1951]: E1031 00:52:25.514727 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.514827 kubelet[1951]: E1031 00:52:25.514811 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.514827 kubelet[1951]: W1031 00:52:25.514818 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.514905 kubelet[1951]: E1031 00:52:25.514866 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.515014 kubelet[1951]: E1031 00:52:25.514989 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.515014 kubelet[1951]: W1031 00:52:25.514999 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.515160 kubelet[1951]: E1031 00:52:25.515065 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.515205 kubelet[1951]: E1031 00:52:25.515124 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.515292 kubelet[1951]: W1031 00:52:25.515179 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.515339 kubelet[1951]: E1031 00:52:25.515304 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.515584 kubelet[1951]: E1031 00:52:25.515561 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.515584 kubelet[1951]: W1031 00:52:25.515578 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.515646 kubelet[1951]: E1031 00:52:25.515597 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.515789 kubelet[1951]: E1031 00:52:25.515775 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.515789 kubelet[1951]: W1031 00:52:25.515787 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.515863 kubelet[1951]: E1031 00:52:25.515797 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.516081 kubelet[1951]: E1031 00:52:25.516057 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.516081 kubelet[1951]: W1031 00:52:25.516078 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.516158 kubelet[1951]: E1031 00:52:25.516099 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.516316 kubelet[1951]: E1031 00:52:25.516301 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.516316 kubelet[1951]: W1031 00:52:25.516314 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.516399 kubelet[1951]: E1031 00:52:25.516325 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.516525 kubelet[1951]: E1031 00:52:25.516511 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.516525 kubelet[1951]: W1031 00:52:25.516523 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.516589 kubelet[1951]: E1031 00:52:25.516537 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.516723 kubelet[1951]: E1031 00:52:25.516708 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.516723 kubelet[1951]: W1031 00:52:25.516721 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.516786 kubelet[1951]: E1031 00:52:25.516732 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.518162 kubelet[1951]: E1031 00:52:25.516920 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.518162 kubelet[1951]: W1031 00:52:25.516933 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.518162 kubelet[1951]: E1031 00:52:25.516942 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.522034 systemd[1]: Started cri-containerd-bde329b78d4bcb244f265b1b322f7a72043d5262122b2094de4bf1a81c5c640d.scope. Oct 31 00:52:25.529385 kubelet[1951]: E1031 00:52:25.529346 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:25.529385 kubelet[1951]: W1031 00:52:25.529379 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:25.529536 kubelet[1951]: E1031 00:52:25.529397 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:25.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit: BPF prog-id=125 op=LOAD Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000117b38 a2=10 a3=0 items=0 ppid=2532 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264653332396237386434626362323434663236356231623332326637 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001175a0 a2=3c a3=0 items=0 ppid=2532 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264653332396237386434626362323434663236356231623332326637 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit: BPF prog-id=126 op=LOAD Oct 31 00:52:25.541000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001178e0 a2=78 a3=0 items=0 ppid=2532 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264653332396237386434626362323434663236356231623332326637 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit: BPF prog-id=127 op=LOAD Oct 31 00:52:25.541000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000117670 a2=78 a3=0 items=0 ppid=2532 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264653332396237386434626362323434663236356231623332326637 Oct 31 00:52:25.541000 audit: BPF prog-id=127 op=UNLOAD Oct 31 00:52:25.541000 audit: BPF prog-id=126 op=UNLOAD Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { perfmon } for pid=2546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit[2546]: AVC avc: denied { bpf } for pid=2546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:25.541000 audit: BPF prog-id=128 op=LOAD Oct 31 00:52:25.541000 audit[2546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000117b40 a2=78 a3=0 items=0 ppid=2532 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264653332396237386434626362323434663236356231623332326637 Oct 31 00:52:25.551547 env[1221]: time="2025-10-31T00:52:25.551509514Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-9wqpt,Uid:f48d3755-b0a0-48bb-8e0e-8dfb0d1632bd,Namespace:calico-system,Attempt:0,} returns sandbox id \"bde329b78d4bcb244f265b1b322f7a72043d5262122b2094de4bf1a81c5c640d\"" Oct 31 00:52:25.552408 kubelet[1951]: E1031 00:52:25.552346 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:25.895000 audit[2592]: NETFILTER_CFG table=filter:105 family=2 entries=22 op=nft_register_rule pid=2592 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:25.895000 audit[2592]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffcbd5e970 a2=0 a3=1 items=0 ppid=2062 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.895000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:25.909000 audit[2592]: NETFILTER_CFG table=nat:106 family=2 entries=12 op=nft_register_rule pid=2592 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:25.909000 audit[2592]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcbd5e970 a2=0 a3=1 items=0 ppid=2062 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:25.909000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:26.728702 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3877581061.mount: Deactivated successfully. Oct 31 00:52:26.782807 kubelet[1951]: E1031 00:52:26.781976 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:52:27.315630 env[1221]: time="2025-10-31T00:52:27.315582879Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:27.317042 env[1221]: time="2025-10-31T00:52:27.316984867Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:27.318613 env[1221]: time="2025-10-31T00:52:27.318580709Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:27.319907 env[1221]: time="2025-10-31T00:52:27.319868887Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:27.320440 env[1221]: time="2025-10-31T00:52:27.320415129Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b\"" Oct 31 00:52:27.325336 env[1221]: time="2025-10-31T00:52:27.325265620Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Oct 31 00:52:27.343952 env[1221]: time="2025-10-31T00:52:27.343901644Z" level=info msg="CreateContainer within sandbox \"b9e43d10cbc8e2b45eda330955a656e85f8bbd26181bfaff989bfb1f3e4d48a4\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 31 00:52:27.353165 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3202764539.mount: Deactivated successfully. Oct 31 00:52:27.355713 env[1221]: time="2025-10-31T00:52:27.355656383Z" level=info msg="CreateContainer within sandbox \"b9e43d10cbc8e2b45eda330955a656e85f8bbd26181bfaff989bfb1f3e4d48a4\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"9dc316b42005bffb3ebd2fe0933161e7684bf11907674c8aa16a0066412bff9f\"" Oct 31 00:52:27.356732 env[1221]: time="2025-10-31T00:52:27.356708543Z" level=info msg="StartContainer for \"9dc316b42005bffb3ebd2fe0933161e7684bf11907674c8aa16a0066412bff9f\"" Oct 31 00:52:27.378398 systemd[1]: Started cri-containerd-9dc316b42005bffb3ebd2fe0933161e7684bf11907674c8aa16a0066412bff9f.scope. Oct 31 00:52:27.405242 kernel: kauditd_printk_skb: 134 callbacks suppressed Oct 31 00:52:27.405354 kernel: audit: type=1400 audit(1761871947.398:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.405381 kernel: audit: type=1400 audit(1761871947.398:988): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.405405 kernel: audit: type=1400 audit(1761871947.398:989): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.405683 kernel: audit: type=1400 audit(1761871947.398:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.407964 kernel: audit: type=1400 audit(1761871947.398:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.412164 kernel: audit: type=1400 audit(1761871947.398:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.412224 kernel: audit: type=1400 audit(1761871947.398:993): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.414125 kernel: audit: type=1400 audit(1761871947.398:994): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.416063 kernel: audit: type=1400 audit(1761871947.398:995): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.417976 kernel: audit: type=1400 audit(1761871947.399:996): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit: BPF prog-id=129 op=LOAD Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2435 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:27.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964633331366234323030356266666233656264326665303933333136 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2435 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:27.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964633331366234323030356266666233656264326665303933333136 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.399000 audit: BPF prog-id=130 op=LOAD Oct 31 00:52:27.399000 audit[2603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2435 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:27.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964633331366234323030356266666233656264326665303933333136 Oct 31 00:52:27.401000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.401000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.401000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.401000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.401000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.401000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.401000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.401000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.401000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.401000 audit: BPF prog-id=131 op=LOAD Oct 31 00:52:27.401000 audit[2603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2435 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:27.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964633331366234323030356266666233656264326665303933333136 Oct 31 00:52:27.403000 audit: BPF prog-id=131 op=UNLOAD Oct 31 00:52:27.403000 audit: BPF prog-id=130 op=UNLOAD Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:27.403000 audit: BPF prog-id=132 op=LOAD Oct 31 00:52:27.403000 audit[2603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2435 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:27.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964633331366234323030356266666233656264326665303933333136 Oct 31 00:52:27.466361 env[1221]: time="2025-10-31T00:52:27.466053663Z" level=info msg="StartContainer for \"9dc316b42005bffb3ebd2fe0933161e7684bf11907674c8aa16a0066412bff9f\" returns successfully" Oct 31 00:52:27.853423 kubelet[1951]: E1031 00:52:27.853390 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:27.901147 kubelet[1951]: E1031 00:52:27.901099 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.901147 kubelet[1951]: W1031 00:52:27.901124 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.901327 kubelet[1951]: E1031 00:52:27.901166 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.901384 kubelet[1951]: E1031 00:52:27.901370 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.901426 kubelet[1951]: W1031 00:52:27.901381 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.901455 kubelet[1951]: E1031 00:52:27.901426 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.901644 kubelet[1951]: E1031 00:52:27.901611 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.901778 kubelet[1951]: W1031 00:52:27.901744 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.901778 kubelet[1951]: E1031 00:52:27.901772 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.902120 kubelet[1951]: E1031 00:52:27.902094 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.902120 kubelet[1951]: W1031 00:52:27.902112 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.902206 kubelet[1951]: E1031 00:52:27.902124 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.902798 kubelet[1951]: E1031 00:52:27.902766 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.902798 kubelet[1951]: W1031 00:52:27.902784 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.902863 kubelet[1951]: E1031 00:52:27.902799 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.903277 kubelet[1951]: E1031 00:52:27.903123 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.903322 kubelet[1951]: W1031 00:52:27.903279 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.903322 kubelet[1951]: E1031 00:52:27.903293 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.903527 kubelet[1951]: E1031 00:52:27.903513 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.903527 kubelet[1951]: W1031 00:52:27.903526 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.903590 kubelet[1951]: E1031 00:52:27.903549 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.903822 kubelet[1951]: E1031 00:52:27.903807 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.903822 kubelet[1951]: W1031 00:52:27.903820 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.903904 kubelet[1951]: E1031 00:52:27.903888 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.904315 kubelet[1951]: E1031 00:52:27.904265 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.904355 kubelet[1951]: W1031 00:52:27.904317 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.904355 kubelet[1951]: E1031 00:52:27.904331 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.904588 kubelet[1951]: E1031 00:52:27.904571 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.904588 kubelet[1951]: W1031 00:52:27.904587 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.904650 kubelet[1951]: E1031 00:52:27.904597 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.905087 kubelet[1951]: E1031 00:52:27.905013 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.905123 kubelet[1951]: W1031 00:52:27.905089 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.905123 kubelet[1951]: E1031 00:52:27.905103 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.905462 kubelet[1951]: E1031 00:52:27.905376 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.905494 kubelet[1951]: W1031 00:52:27.905465 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.905494 kubelet[1951]: E1031 00:52:27.905480 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.905940 kubelet[1951]: E1031 00:52:27.905923 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.905998 kubelet[1951]: W1031 00:52:27.905939 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.905998 kubelet[1951]: E1031 00:52:27.905985 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.906272 kubelet[1951]: E1031 00:52:27.906257 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.906304 kubelet[1951]: W1031 00:52:27.906271 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.906304 kubelet[1951]: E1031 00:52:27.906282 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.906506 kubelet[1951]: E1031 00:52:27.906492 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.906551 kubelet[1951]: W1031 00:52:27.906506 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.906551 kubelet[1951]: E1031 00:52:27.906516 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.931906 kubelet[1951]: E1031 00:52:27.931866 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.931906 kubelet[1951]: W1031 00:52:27.931891 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.931906 kubelet[1951]: E1031 00:52:27.931913 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.932147 kubelet[1951]: E1031 00:52:27.932124 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.932147 kubelet[1951]: W1031 00:52:27.932147 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.932226 kubelet[1951]: E1031 00:52:27.932161 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.932362 kubelet[1951]: E1031 00:52:27.932343 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.932401 kubelet[1951]: W1031 00:52:27.932361 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.932401 kubelet[1951]: E1031 00:52:27.932380 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.932697 kubelet[1951]: E1031 00:52:27.932675 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.932697 kubelet[1951]: W1031 00:52:27.932694 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.932782 kubelet[1951]: E1031 00:52:27.932710 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.932953 kubelet[1951]: E1031 00:52:27.932909 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.932953 kubelet[1951]: W1031 00:52:27.932922 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.932953 kubelet[1951]: E1031 00:52:27.932940 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.933102 kubelet[1951]: E1031 00:52:27.933088 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.933102 kubelet[1951]: W1031 00:52:27.933100 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.933194 kubelet[1951]: E1031 00:52:27.933109 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.933675 kubelet[1951]: E1031 00:52:27.933429 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.933675 kubelet[1951]: W1031 00:52:27.933445 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.933675 kubelet[1951]: E1031 00:52:27.933480 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.933675 kubelet[1951]: E1031 00:52:27.933617 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.933675 kubelet[1951]: W1031 00:52:27.933626 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.933862 kubelet[1951]: E1031 00:52:27.933700 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.933862 kubelet[1951]: E1031 00:52:27.933756 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.933862 kubelet[1951]: W1031 00:52:27.933762 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.933862 kubelet[1951]: E1031 00:52:27.933769 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.933974 kubelet[1951]: E1031 00:52:27.933907 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.933974 kubelet[1951]: W1031 00:52:27.933915 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.933974 kubelet[1951]: E1031 00:52:27.933923 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.934120 kubelet[1951]: E1031 00:52:27.934077 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.934120 kubelet[1951]: W1031 00:52:27.934091 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.934120 kubelet[1951]: E1031 00:52:27.934114 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.934334 kubelet[1951]: E1031 00:52:27.934314 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.934370 kubelet[1951]: W1031 00:52:27.934332 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.934370 kubelet[1951]: E1031 00:52:27.934346 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.934748 kubelet[1951]: E1031 00:52:27.934731 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.934748 kubelet[1951]: W1031 00:52:27.934746 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.934903 kubelet[1951]: E1031 00:52:27.934762 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.935024 kubelet[1951]: E1031 00:52:27.935009 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.935024 kubelet[1951]: W1031 00:52:27.935022 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.935106 kubelet[1951]: E1031 00:52:27.935037 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.935239 kubelet[1951]: E1031 00:52:27.935224 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.935284 kubelet[1951]: W1031 00:52:27.935243 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.935284 kubelet[1951]: E1031 00:52:27.935254 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.935789 kubelet[1951]: E1031 00:52:27.935774 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.935832 kubelet[1951]: W1031 00:52:27.935790 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.935832 kubelet[1951]: E1031 00:52:27.935803 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.936588 kubelet[1951]: E1031 00:52:27.936570 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.936636 kubelet[1951]: W1031 00:52:27.936588 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.936636 kubelet[1951]: E1031 00:52:27.936603 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:27.937425 kubelet[1951]: E1031 00:52:27.937404 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 31 00:52:27.937425 kubelet[1951]: W1031 00:52:27.937423 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 31 00:52:27.937510 kubelet[1951]: E1031 00:52:27.937437 1951 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 31 00:52:28.300850 env[1221]: time="2025-10-31T00:52:28.300775410Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:28.302442 env[1221]: time="2025-10-31T00:52:28.302408449Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:28.305982 env[1221]: time="2025-10-31T00:52:28.305948069Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:28.307522 env[1221]: time="2025-10-31T00:52:28.307472700Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:28.308209 env[1221]: time="2025-10-31T00:52:28.308178192Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640\"" Oct 31 00:52:28.311439 env[1221]: time="2025-10-31T00:52:28.311404428Z" level=info msg="CreateContainer within sandbox \"bde329b78d4bcb244f265b1b322f7a72043d5262122b2094de4bf1a81c5c640d\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 31 00:52:28.323173 env[1221]: time="2025-10-31T00:52:28.323116566Z" level=info msg="CreateContainer within sandbox \"bde329b78d4bcb244f265b1b322f7a72043d5262122b2094de4bf1a81c5c640d\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"30984a3a921c10db0dd26f442fe15a8da62edde9b8c979b151fbda49e3687db9\"" Oct 31 00:52:28.324247 env[1221]: time="2025-10-31T00:52:28.324203766Z" level=info msg="StartContainer for \"30984a3a921c10db0dd26f442fe15a8da62edde9b8c979b151fbda49e3687db9\"" Oct 31 00:52:28.352265 systemd[1]: Started cri-containerd-30984a3a921c10db0dd26f442fe15a8da62edde9b8c979b151fbda49e3687db9.scope. Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40002275a0 a2=3c a3=0 items=0 ppid=2532 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:28.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330393834613361393231633130646230646432366634343266653135 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit: BPF prog-id=133 op=LOAD Oct 31 00:52:28.369000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40002278e0 a2=78 a3=0 items=0 ppid=2532 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:28.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330393834613361393231633130646230646432366634343266653135 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit: BPF prog-id=134 op=LOAD Oct 31 00:52:28.369000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000227670 a2=78 a3=0 items=0 ppid=2532 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:28.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330393834613361393231633130646230646432366634343266653135 Oct 31 00:52:28.369000 audit: BPF prog-id=134 op=UNLOAD Oct 31 00:52:28.369000 audit: BPF prog-id=133 op=UNLOAD Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:28.369000 audit: BPF prog-id=135 op=LOAD Oct 31 00:52:28.369000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000227b40 a2=78 a3=0 items=0 ppid=2532 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:28.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330393834613361393231633130646230646432366634343266653135 Oct 31 00:52:28.386394 env[1221]: time="2025-10-31T00:52:28.386335396Z" level=info msg="StartContainer for \"30984a3a921c10db0dd26f442fe15a8da62edde9b8c979b151fbda49e3687db9\" returns successfully" Oct 31 00:52:28.397992 systemd[1]: cri-containerd-30984a3a921c10db0dd26f442fe15a8da62edde9b8c979b151fbda49e3687db9.scope: Deactivated successfully. Oct 31 00:52:28.406000 audit: BPF prog-id=135 op=UNLOAD Oct 31 00:52:28.418166 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-30984a3a921c10db0dd26f442fe15a8da62edde9b8c979b151fbda49e3687db9-rootfs.mount: Deactivated successfully. Oct 31 00:52:28.430632 env[1221]: time="2025-10-31T00:52:28.430584316Z" level=info msg="shim disconnected" id=30984a3a921c10db0dd26f442fe15a8da62edde9b8c979b151fbda49e3687db9 Oct 31 00:52:28.430632 env[1221]: time="2025-10-31T00:52:28.430631799Z" level=warning msg="cleaning up after shim disconnected" id=30984a3a921c10db0dd26f442fe15a8da62edde9b8c979b151fbda49e3687db9 namespace=k8s.io Oct 31 00:52:28.430875 env[1221]: time="2025-10-31T00:52:28.430642560Z" level=info msg="cleaning up dead shim" Oct 31 00:52:28.437832 env[1221]: time="2025-10-31T00:52:28.437759041Z" level=warning msg="cleanup warnings time=\"2025-10-31T00:52:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2717 runtime=io.containerd.runc.v2\n" Oct 31 00:52:28.781972 kubelet[1951]: E1031 00:52:28.781917 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:52:28.856421 kubelet[1951]: I1031 00:52:28.856394 1951 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Oct 31 00:52:28.856911 kubelet[1951]: E1031 00:52:28.856883 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:28.857205 kubelet[1951]: E1031 00:52:28.857185 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:28.858892 env[1221]: time="2025-10-31T00:52:28.858859199Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Oct 31 00:52:28.876478 kubelet[1951]: I1031 00:52:28.876426 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-5b65cf685b-nh5zq" podStartSLOduration=2.827394096 podStartE2EDuration="4.876408004s" podCreationTimestamp="2025-10-31 00:52:24 +0000 UTC" firstStartedPulling="2025-10-31 00:52:25.275250275 +0000 UTC m=+21.600642259" lastFinishedPulling="2025-10-31 00:52:27.324264143 +0000 UTC m=+23.649656167" observedRunningTime="2025-10-31 00:52:27.870938496 +0000 UTC m=+24.196330520" watchObservedRunningTime="2025-10-31 00:52:28.876408004 +0000 UTC m=+25.201800028" Oct 31 00:52:30.781665 kubelet[1951]: E1031 00:52:30.781602 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:52:31.446317 env[1221]: time="2025-10-31T00:52:31.446264970Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:31.448092 env[1221]: time="2025-10-31T00:52:31.448056246Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:31.450146 env[1221]: time="2025-10-31T00:52:31.450104259Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:31.451374 env[1221]: time="2025-10-31T00:52:31.451347139Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:31.451917 env[1221]: time="2025-10-31T00:52:31.451881774Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2\"" Oct 31 00:52:31.455470 env[1221]: time="2025-10-31T00:52:31.455434044Z" level=info msg="CreateContainer within sandbox \"bde329b78d4bcb244f265b1b322f7a72043d5262122b2094de4bf1a81c5c640d\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 31 00:52:31.476210 env[1221]: time="2025-10-31T00:52:31.476163106Z" level=info msg="CreateContainer within sandbox \"bde329b78d4bcb244f265b1b322f7a72043d5262122b2094de4bf1a81c5c640d\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"422a2b4b4ea92f22a50afe20565d79bc3ba82234ce5dbfd2957eff7ebb83cfe9\"" Oct 31 00:52:31.477852 env[1221]: time="2025-10-31T00:52:31.477829254Z" level=info msg="StartContainer for \"422a2b4b4ea92f22a50afe20565d79bc3ba82234ce5dbfd2957eff7ebb83cfe9\"" Oct 31 00:52:31.496774 systemd[1]: Started cri-containerd-422a2b4b4ea92f22a50afe20565d79bc3ba82234ce5dbfd2957eff7ebb83cfe9.scope. Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2532 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:31.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432326132623462346561393266323261353061666532303536356437 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit: BPF prog-id=136 op=LOAD Oct 31 00:52:31.513000 audit[2744]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2532 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:31.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432326132623462346561393266323261353061666532303536356437 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit: BPF prog-id=137 op=LOAD Oct 31 00:52:31.513000 audit[2744]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2532 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:31.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432326132623462346561393266323261353061666532303536356437 Oct 31 00:52:31.513000 audit: BPF prog-id=137 op=UNLOAD Oct 31 00:52:31.513000 audit: BPF prog-id=136 op=UNLOAD Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { perfmon } for pid=2744 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit[2744]: AVC avc: denied { bpf } for pid=2744 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:31.513000 audit: BPF prog-id=138 op=LOAD Oct 31 00:52:31.513000 audit[2744]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2532 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:31.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432326132623462346561393266323261353061666532303536356437 Oct 31 00:52:31.765812 env[1221]: time="2025-10-31T00:52:31.765665487Z" level=info msg="StartContainer for \"422a2b4b4ea92f22a50afe20565d79bc3ba82234ce5dbfd2957eff7ebb83cfe9\" returns successfully" Oct 31 00:52:31.864261 kubelet[1951]: E1031 00:52:31.864234 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:32.169884 systemd[1]: cri-containerd-422a2b4b4ea92f22a50afe20565d79bc3ba82234ce5dbfd2957eff7ebb83cfe9.scope: Deactivated successfully. Oct 31 00:52:32.175000 audit: BPF prog-id=138 op=UNLOAD Oct 31 00:52:32.188727 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-422a2b4b4ea92f22a50afe20565d79bc3ba82234ce5dbfd2957eff7ebb83cfe9-rootfs.mount: Deactivated successfully. Oct 31 00:52:32.192258 env[1221]: time="2025-10-31T00:52:32.192214668Z" level=info msg="shim disconnected" id=422a2b4b4ea92f22a50afe20565d79bc3ba82234ce5dbfd2957eff7ebb83cfe9 Oct 31 00:52:32.192422 env[1221]: time="2025-10-31T00:52:32.192404400Z" level=warning msg="cleaning up after shim disconnected" id=422a2b4b4ea92f22a50afe20565d79bc3ba82234ce5dbfd2957eff7ebb83cfe9 namespace=k8s.io Oct 31 00:52:32.192481 env[1221]: time="2025-10-31T00:52:32.192469164Z" level=info msg="cleaning up dead shim" Oct 31 00:52:32.199473 kubelet[1951]: I1031 00:52:32.199309 1951 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Oct 31 00:52:32.200945 env[1221]: time="2025-10-31T00:52:32.200907769Z" level=warning msg="cleanup warnings time=\"2025-10-31T00:52:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2786 runtime=io.containerd.runc.v2\n" Oct 31 00:52:32.243969 systemd[1]: Created slice kubepods-burstable-pod741bf90a_a512_43fb_bece_a5b3433973d1.slice. Oct 31 00:52:32.256596 systemd[1]: Created slice kubepods-burstable-pod45299de2_b3de_400b_8c19_f8a3dd1abc5a.slice. Oct 31 00:52:32.264923 systemd[1]: Created slice kubepods-besteffort-pod3bc34509_f978_427a_9bb0_ccd41f4aa6f2.slice. Oct 31 00:52:32.267980 kubelet[1951]: I1031 00:52:32.267948 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/741bf90a-a512-43fb-bece-a5b3433973d1-config-volume\") pod \"coredns-668d6bf9bc-dhzmj\" (UID: \"741bf90a-a512-43fb-bece-a5b3433973d1\") " pod="kube-system/coredns-668d6bf9bc-dhzmj" Oct 31 00:52:32.267980 kubelet[1951]: I1031 00:52:32.267981 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k7m5m\" (UniqueName: \"kubernetes.io/projected/741bf90a-a512-43fb-bece-a5b3433973d1-kube-api-access-k7m5m\") pod \"coredns-668d6bf9bc-dhzmj\" (UID: \"741bf90a-a512-43fb-bece-a5b3433973d1\") " pod="kube-system/coredns-668d6bf9bc-dhzmj" Oct 31 00:52:32.270463 systemd[1]: Created slice kubepods-besteffort-podc8e402bc_f445_4783_b321_f2c849228b0b.slice. Oct 31 00:52:32.274734 systemd[1]: Created slice kubepods-besteffort-pod12689884_11c3_4d99_b0f3_8d3ed54d0141.slice. Oct 31 00:52:32.281232 systemd[1]: Created slice kubepods-besteffort-pod2473b883_d21a_4d6d_b8b5_718e6f47949b.slice. Oct 31 00:52:32.286225 systemd[1]: Created slice kubepods-besteffort-pod6d01af44_c690_41ba_8499_7a4fe98e6228.slice. Oct 31 00:52:32.369097 kubelet[1951]: I1031 00:52:32.369044 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/45299de2-b3de-400b-8c19-f8a3dd1abc5a-config-volume\") pod \"coredns-668d6bf9bc-47vlh\" (UID: \"45299de2-b3de-400b-8c19-f8a3dd1abc5a\") " pod="kube-system/coredns-668d6bf9bc-47vlh" Oct 31 00:52:32.369097 kubelet[1951]: I1031 00:52:32.369093 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/12689884-11c3-4d99-b0f3-8d3ed54d0141-calico-apiserver-certs\") pod \"calico-apiserver-7b7f97cd5d-6rgcm\" (UID: \"12689884-11c3-4d99-b0f3-8d3ed54d0141\") " pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" Oct 31 00:52:32.369341 kubelet[1951]: I1031 00:52:32.369116 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dj25l\" (UniqueName: \"kubernetes.io/projected/12689884-11c3-4d99-b0f3-8d3ed54d0141-kube-api-access-dj25l\") pod \"calico-apiserver-7b7f97cd5d-6rgcm\" (UID: \"12689884-11c3-4d99-b0f3-8d3ed54d0141\") " pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" Oct 31 00:52:32.369341 kubelet[1951]: I1031 00:52:32.369152 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6d01af44-c690-41ba-8499-7a4fe98e6228-whisker-ca-bundle\") pod \"whisker-96cd8b58d-jmxg2\" (UID: \"6d01af44-c690-41ba-8499-7a4fe98e6228\") " pod="calico-system/whisker-96cd8b58d-jmxg2" Oct 31 00:52:32.369341 kubelet[1951]: I1031 00:52:32.369170 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l2xfd\" (UniqueName: \"kubernetes.io/projected/6d01af44-c690-41ba-8499-7a4fe98e6228-kube-api-access-l2xfd\") pod \"whisker-96cd8b58d-jmxg2\" (UID: \"6d01af44-c690-41ba-8499-7a4fe98e6228\") " pod="calico-system/whisker-96cd8b58d-jmxg2" Oct 31 00:52:32.369341 kubelet[1951]: I1031 00:52:32.369187 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c8e402bc-f445-4783-b321-f2c849228b0b-calico-apiserver-certs\") pod \"calico-apiserver-7b7f97cd5d-b6qnj\" (UID: \"c8e402bc-f445-4783-b321-f2c849228b0b\") " pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" Oct 31 00:52:32.369341 kubelet[1951]: I1031 00:52:32.369204 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/6d01af44-c690-41ba-8499-7a4fe98e6228-whisker-backend-key-pair\") pod \"whisker-96cd8b58d-jmxg2\" (UID: \"6d01af44-c690-41ba-8499-7a4fe98e6228\") " pod="calico-system/whisker-96cd8b58d-jmxg2" Oct 31 00:52:32.369466 kubelet[1951]: I1031 00:52:32.369220 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/2473b883-d21a-4d6d-b8b5-718e6f47949b-config\") pod \"goldmane-666569f655-l9hl2\" (UID: \"2473b883-d21a-4d6d-b8b5-718e6f47949b\") " pod="calico-system/goldmane-666569f655-l9hl2" Oct 31 00:52:32.369466 kubelet[1951]: I1031 00:52:32.369253 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3bc34509-f978-427a-9bb0-ccd41f4aa6f2-tigera-ca-bundle\") pod \"calico-kube-controllers-5675d97fbf-5qxcq\" (UID: \"3bc34509-f978-427a-9bb0-ccd41f4aa6f2\") " pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" Oct 31 00:52:32.369466 kubelet[1951]: I1031 00:52:32.369281 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vzv8g\" (UniqueName: \"kubernetes.io/projected/3bc34509-f978-427a-9bb0-ccd41f4aa6f2-kube-api-access-vzv8g\") pod \"calico-kube-controllers-5675d97fbf-5qxcq\" (UID: \"3bc34509-f978-427a-9bb0-ccd41f4aa6f2\") " pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" Oct 31 00:52:32.369466 kubelet[1951]: I1031 00:52:32.369301 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z4z4p\" (UniqueName: \"kubernetes.io/projected/c8e402bc-f445-4783-b321-f2c849228b0b-kube-api-access-z4z4p\") pod \"calico-apiserver-7b7f97cd5d-b6qnj\" (UID: \"c8e402bc-f445-4783-b321-f2c849228b0b\") " pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" Oct 31 00:52:32.369466 kubelet[1951]: I1031 00:52:32.369319 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2473b883-d21a-4d6d-b8b5-718e6f47949b-goldmane-ca-bundle\") pod \"goldmane-666569f655-l9hl2\" (UID: \"2473b883-d21a-4d6d-b8b5-718e6f47949b\") " pod="calico-system/goldmane-666569f655-l9hl2" Oct 31 00:52:32.369581 kubelet[1951]: I1031 00:52:32.369345 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/2473b883-d21a-4d6d-b8b5-718e6f47949b-goldmane-key-pair\") pod \"goldmane-666569f655-l9hl2\" (UID: \"2473b883-d21a-4d6d-b8b5-718e6f47949b\") " pod="calico-system/goldmane-666569f655-l9hl2" Oct 31 00:52:32.369581 kubelet[1951]: I1031 00:52:32.369362 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wbnq4\" (UniqueName: \"kubernetes.io/projected/2473b883-d21a-4d6d-b8b5-718e6f47949b-kube-api-access-wbnq4\") pod \"goldmane-666569f655-l9hl2\" (UID: \"2473b883-d21a-4d6d-b8b5-718e6f47949b\") " pod="calico-system/goldmane-666569f655-l9hl2" Oct 31 00:52:32.369581 kubelet[1951]: I1031 00:52:32.369378 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7gdjl\" (UniqueName: \"kubernetes.io/projected/45299de2-b3de-400b-8c19-f8a3dd1abc5a-kube-api-access-7gdjl\") pod \"coredns-668d6bf9bc-47vlh\" (UID: \"45299de2-b3de-400b-8c19-f8a3dd1abc5a\") " pod="kube-system/coredns-668d6bf9bc-47vlh" Oct 31 00:52:32.555181 kubelet[1951]: E1031 00:52:32.555122 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:32.556845 env[1221]: time="2025-10-31T00:52:32.556511505Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-dhzmj,Uid:741bf90a-a512-43fb-bece-a5b3433973d1,Namespace:kube-system,Attempt:0,}" Oct 31 00:52:32.561904 kubelet[1951]: E1031 00:52:32.561861 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:32.562358 env[1221]: time="2025-10-31T00:52:32.562309426Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-47vlh,Uid:45299de2-b3de-400b-8c19-f8a3dd1abc5a,Namespace:kube-system,Attempt:0,}" Oct 31 00:52:32.568745 env[1221]: time="2025-10-31T00:52:32.568534374Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5675d97fbf-5qxcq,Uid:3bc34509-f978-427a-9bb0-ccd41f4aa6f2,Namespace:calico-system,Attempt:0,}" Oct 31 00:52:32.574084 env[1221]: time="2025-10-31T00:52:32.574034756Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b7f97cd5d-b6qnj,Uid:c8e402bc-f445-4783-b321-f2c849228b0b,Namespace:calico-apiserver,Attempt:0,}" Oct 31 00:52:32.578616 env[1221]: time="2025-10-31T00:52:32.578565798Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b7f97cd5d-6rgcm,Uid:12689884-11c3-4d99-b0f3-8d3ed54d0141,Namespace:calico-apiserver,Attempt:0,}" Oct 31 00:52:32.584613 env[1221]: time="2025-10-31T00:52:32.584457645Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-l9hl2,Uid:2473b883-d21a-4d6d-b8b5-718e6f47949b,Namespace:calico-system,Attempt:0,}" Oct 31 00:52:32.589578 env[1221]: time="2025-10-31T00:52:32.589537481Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-96cd8b58d-jmxg2,Uid:6d01af44-c690-41ba-8499-7a4fe98e6228,Namespace:calico-system,Attempt:0,}" Oct 31 00:52:32.712386 env[1221]: time="2025-10-31T00:52:32.712310483Z" level=error msg="Failed to destroy network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.712999 env[1221]: time="2025-10-31T00:52:32.712958164Z" level=error msg="encountered an error cleaning up failed sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.713059 env[1221]: time="2025-10-31T00:52:32.713034809Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-47vlh,Uid:45299de2-b3de-400b-8c19-f8a3dd1abc5a,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.715280 kubelet[1951]: E1031 00:52:32.715222 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.716767 kubelet[1951]: E1031 00:52:32.716724 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-47vlh" Oct 31 00:52:32.716870 kubelet[1951]: E1031 00:52:32.716779 1951 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-47vlh" Oct 31 00:52:32.716870 kubelet[1951]: E1031 00:52:32.716848 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-47vlh_kube-system(45299de2-b3de-400b-8c19-f8a3dd1abc5a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-47vlh_kube-system(45299de2-b3de-400b-8c19-f8a3dd1abc5a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-47vlh" podUID="45299de2-b3de-400b-8c19-f8a3dd1abc5a" Oct 31 00:52:32.730302 env[1221]: time="2025-10-31T00:52:32.730242040Z" level=error msg="Failed to destroy network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.730653 env[1221]: time="2025-10-31T00:52:32.730616863Z" level=error msg="encountered an error cleaning up failed sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.730712 env[1221]: time="2025-10-31T00:52:32.730677107Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-dhzmj,Uid:741bf90a-a512-43fb-bece-a5b3433973d1,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.730957 kubelet[1951]: E1031 00:52:32.730908 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.731030 kubelet[1951]: E1031 00:52:32.730975 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-dhzmj" Oct 31 00:52:32.731030 kubelet[1951]: E1031 00:52:32.730995 1951 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-dhzmj" Oct 31 00:52:32.731154 kubelet[1951]: E1031 00:52:32.731040 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-dhzmj_kube-system(741bf90a-a512-43fb-bece-a5b3433973d1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-dhzmj_kube-system(741bf90a-a512-43fb-bece-a5b3433973d1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-dhzmj" podUID="741bf90a-a512-43fb-bece-a5b3433973d1" Oct 31 00:52:32.736870 env[1221]: time="2025-10-31T00:52:32.736800208Z" level=error msg="Failed to destroy network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.737230 env[1221]: time="2025-10-31T00:52:32.737200993Z" level=error msg="encountered an error cleaning up failed sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.737288 env[1221]: time="2025-10-31T00:52:32.737252116Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5675d97fbf-5qxcq,Uid:3bc34509-f978-427a-9bb0-ccd41f4aa6f2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.737493 kubelet[1951]: E1031 00:52:32.737457 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.737564 kubelet[1951]: E1031 00:52:32.737523 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" Oct 31 00:52:32.737601 kubelet[1951]: E1031 00:52:32.737570 1951 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" Oct 31 00:52:32.737634 kubelet[1951]: E1031 00:52:32.737607 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5675d97fbf-5qxcq_calico-system(3bc34509-f978-427a-9bb0-ccd41f4aa6f2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5675d97fbf-5qxcq_calico-system(3bc34509-f978-427a-9bb0-ccd41f4aa6f2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" podUID="3bc34509-f978-427a-9bb0-ccd41f4aa6f2" Oct 31 00:52:32.740010 env[1221]: time="2025-10-31T00:52:32.739966005Z" level=error msg="Failed to destroy network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.740400 env[1221]: time="2025-10-31T00:52:32.740366030Z" level=error msg="encountered an error cleaning up failed sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.740449 env[1221]: time="2025-10-31T00:52:32.740419473Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b7f97cd5d-b6qnj,Uid:c8e402bc-f445-4783-b321-f2c849228b0b,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.740669 kubelet[1951]: E1031 00:52:32.740625 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.740720 kubelet[1951]: E1031 00:52:32.740691 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" Oct 31 00:52:32.740720 kubelet[1951]: E1031 00:52:32.740713 1951 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" Oct 31 00:52:32.740771 kubelet[1951]: E1031 00:52:32.740751 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7b7f97cd5d-b6qnj_calico-apiserver(c8e402bc-f445-4783-b321-f2c849228b0b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7b7f97cd5d-b6qnj_calico-apiserver(c8e402bc-f445-4783-b321-f2c849228b0b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" podUID="c8e402bc-f445-4783-b321-f2c849228b0b" Oct 31 00:52:32.748390 env[1221]: time="2025-10-31T00:52:32.748328486Z" level=error msg="Failed to destroy network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.748766 env[1221]: time="2025-10-31T00:52:32.748734871Z" level=error msg="encountered an error cleaning up failed sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.748836 env[1221]: time="2025-10-31T00:52:32.748788834Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b7f97cd5d-6rgcm,Uid:12689884-11c3-4d99-b0f3-8d3ed54d0141,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.749059 kubelet[1951]: E1031 00:52:32.749019 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.749105 kubelet[1951]: E1031 00:52:32.749081 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" Oct 31 00:52:32.749146 kubelet[1951]: E1031 00:52:32.749105 1951 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" Oct 31 00:52:32.749183 kubelet[1951]: E1031 00:52:32.749158 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7b7f97cd5d-6rgcm_calico-apiserver(12689884-11c3-4d99-b0f3-8d3ed54d0141)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7b7f97cd5d-6rgcm_calico-apiserver(12689884-11c3-4d99-b0f3-8d3ed54d0141)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" podUID="12689884-11c3-4d99-b0f3-8d3ed54d0141" Oct 31 00:52:32.758024 env[1221]: time="2025-10-31T00:52:32.757958485Z" level=error msg="Failed to destroy network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.758357 env[1221]: time="2025-10-31T00:52:32.758327668Z" level=error msg="encountered an error cleaning up failed sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.758437 env[1221]: time="2025-10-31T00:52:32.758404953Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-l9hl2,Uid:2473b883-d21a-4d6d-b8b5-718e6f47949b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.758520 env[1221]: time="2025-10-31T00:52:32.758481238Z" level=error msg="Failed to destroy network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.758633 kubelet[1951]: E1031 00:52:32.758602 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.758688 kubelet[1951]: E1031 00:52:32.758656 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-l9hl2" Oct 31 00:52:32.758688 kubelet[1951]: E1031 00:52:32.758678 1951 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-l9hl2" Oct 31 00:52:32.758750 kubelet[1951]: E1031 00:52:32.758718 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-l9hl2_calico-system(2473b883-d21a-4d6d-b8b5-718e6f47949b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-l9hl2_calico-system(2473b883-d21a-4d6d-b8b5-718e6f47949b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-l9hl2" podUID="2473b883-d21a-4d6d-b8b5-718e6f47949b" Oct 31 00:52:32.759764 env[1221]: time="2025-10-31T00:52:32.759731035Z" level=error msg="encountered an error cleaning up failed sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.759822 env[1221]: time="2025-10-31T00:52:32.759789639Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-96cd8b58d-jmxg2,Uid:6d01af44-c690-41ba-8499-7a4fe98e6228,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.760019 kubelet[1951]: E1031 00:52:32.759994 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.760063 kubelet[1951]: E1031 00:52:32.760034 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-96cd8b58d-jmxg2" Oct 31 00:52:32.760095 kubelet[1951]: E1031 00:52:32.760067 1951 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-96cd8b58d-jmxg2" Oct 31 00:52:32.760122 kubelet[1951]: E1031 00:52:32.760101 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-96cd8b58d-jmxg2_calico-system(6d01af44-c690-41ba-8499-7a4fe98e6228)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-96cd8b58d-jmxg2_calico-system(6d01af44-c690-41ba-8499-7a4fe98e6228)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-96cd8b58d-jmxg2" podUID="6d01af44-c690-41ba-8499-7a4fe98e6228" Oct 31 00:52:32.786784 systemd[1]: Created slice kubepods-besteffort-poda1446d6d_3b62_4890_8f90_ef3bb45fee6d.slice. Oct 31 00:52:32.789072 env[1221]: time="2025-10-31T00:52:32.789033899Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-d7vjq,Uid:a1446d6d-3b62-4890-8f90-ef3bb45fee6d,Namespace:calico-system,Attempt:0,}" Oct 31 00:52:32.842444 env[1221]: time="2025-10-31T00:52:32.842312616Z" level=error msg="Failed to destroy network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.842699 env[1221]: time="2025-10-31T00:52:32.842669798Z" level=error msg="encountered an error cleaning up failed sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.842742 env[1221]: time="2025-10-31T00:52:32.842722761Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-d7vjq,Uid:a1446d6d-3b62-4890-8f90-ef3bb45fee6d,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.843000 kubelet[1951]: E1031 00:52:32.842965 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.843059 kubelet[1951]: E1031 00:52:32.843024 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-d7vjq" Oct 31 00:52:32.843059 kubelet[1951]: E1031 00:52:32.843044 1951 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-d7vjq" Oct 31 00:52:32.843119 kubelet[1951]: E1031 00:52:32.843079 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-d7vjq_calico-system(a1446d6d-3b62-4890-8f90-ef3bb45fee6d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-d7vjq_calico-system(a1446d6d-3b62-4890-8f90-ef3bb45fee6d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:52:32.867809 env[1221]: time="2025-10-31T00:52:32.867767320Z" level=info msg="StopPodSandbox for \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\"" Oct 31 00:52:32.868644 kubelet[1951]: I1031 00:52:32.868609 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:52:32.869417 kubelet[1951]: I1031 00:52:32.869393 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:52:32.869916 env[1221]: time="2025-10-31T00:52:32.869880652Z" level=info msg="StopPodSandbox for \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\"" Oct 31 00:52:32.870754 kubelet[1951]: I1031 00:52:32.870730 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:52:32.871265 env[1221]: time="2025-10-31T00:52:32.871119689Z" level=info msg="StopPodSandbox for \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\"" Oct 31 00:52:32.874094 kubelet[1951]: I1031 00:52:32.874056 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:52:32.874525 env[1221]: time="2025-10-31T00:52:32.874491219Z" level=info msg="StopPodSandbox for \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\"" Oct 31 00:52:32.875460 kubelet[1951]: I1031 00:52:32.875433 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:52:32.875892 env[1221]: time="2025-10-31T00:52:32.875856584Z" level=info msg="StopPodSandbox for \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\"" Oct 31 00:52:32.880915 kubelet[1951]: E1031 00:52:32.880879 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:32.883384 env[1221]: time="2025-10-31T00:52:32.883337570Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Oct 31 00:52:32.885506 kubelet[1951]: I1031 00:52:32.885477 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:52:32.886028 env[1221]: time="2025-10-31T00:52:32.885984494Z" level=info msg="StopPodSandbox for \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\"" Oct 31 00:52:32.886782 kubelet[1951]: I1031 00:52:32.886755 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:52:32.887287 env[1221]: time="2025-10-31T00:52:32.887252613Z" level=info msg="StopPodSandbox for \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\"" Oct 31 00:52:32.888541 kubelet[1951]: I1031 00:52:32.888511 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:52:32.888913 env[1221]: time="2025-10-31T00:52:32.888881635Z" level=info msg="StopPodSandbox for \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\"" Oct 31 00:52:32.912351 env[1221]: time="2025-10-31T00:52:32.912292212Z" level=error msg="StopPodSandbox for \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\" failed" error="failed to destroy network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.912598 kubelet[1951]: E1031 00:52:32.912550 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:52:32.912672 kubelet[1951]: E1031 00:52:32.912624 1951 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7"} Oct 31 00:52:32.912711 kubelet[1951]: E1031 00:52:32.912684 1951 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2473b883-d21a-4d6d-b8b5-718e6f47949b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 00:52:32.912768 kubelet[1951]: E1031 00:52:32.912707 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2473b883-d21a-4d6d-b8b5-718e6f47949b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-l9hl2" podUID="2473b883-d21a-4d6d-b8b5-718e6f47949b" Oct 31 00:52:32.924533 env[1221]: time="2025-10-31T00:52:32.924470930Z" level=error msg="StopPodSandbox for \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\" failed" error="failed to destroy network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.925178 kubelet[1951]: E1031 00:52:32.925091 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:52:32.925266 kubelet[1951]: E1031 00:52:32.925195 1951 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111"} Oct 31 00:52:32.925266 kubelet[1951]: E1031 00:52:32.925235 1951 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"12689884-11c3-4d99-b0f3-8d3ed54d0141\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 00:52:32.925366 kubelet[1951]: E1031 00:52:32.925267 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"12689884-11c3-4d99-b0f3-8d3ed54d0141\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" podUID="12689884-11c3-4d99-b0f3-8d3ed54d0141" Oct 31 00:52:32.927503 env[1221]: time="2025-10-31T00:52:32.927452556Z" level=error msg="StopPodSandbox for \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\" failed" error="failed to destroy network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.927705 kubelet[1951]: E1031 00:52:32.927669 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:52:32.927780 kubelet[1951]: E1031 00:52:32.927719 1951 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d"} Oct 31 00:52:32.927780 kubelet[1951]: E1031 00:52:32.927751 1951 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"741bf90a-a512-43fb-bece-a5b3433973d1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 00:52:32.927780 kubelet[1951]: E1031 00:52:32.927771 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"741bf90a-a512-43fb-bece-a5b3433973d1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-dhzmj" podUID="741bf90a-a512-43fb-bece-a5b3433973d1" Oct 31 00:52:32.938647 env[1221]: time="2025-10-31T00:52:32.938591009Z" level=error msg="StopPodSandbox for \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\" failed" error="failed to destroy network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.939150 kubelet[1951]: E1031 00:52:32.939076 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:52:32.939251 kubelet[1951]: E1031 00:52:32.939163 1951 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28"} Oct 31 00:52:32.939251 kubelet[1951]: E1031 00:52:32.939195 1951 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3bc34509-f978-427a-9bb0-ccd41f4aa6f2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 00:52:32.939251 kubelet[1951]: E1031 00:52:32.939223 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3bc34509-f978-427a-9bb0-ccd41f4aa6f2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" podUID="3bc34509-f978-427a-9bb0-ccd41f4aa6f2" Oct 31 00:52:32.942207 env[1221]: time="2025-10-31T00:52:32.941749126Z" level=error msg="StopPodSandbox for \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\" failed" error="failed to destroy network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.942357 kubelet[1951]: E1031 00:52:32.942082 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:52:32.942357 kubelet[1951]: E1031 00:52:32.942145 1951 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f"} Oct 31 00:52:32.942357 kubelet[1951]: E1031 00:52:32.942184 1951 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6d01af44-c690-41ba-8499-7a4fe98e6228\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 00:52:32.942357 kubelet[1951]: E1031 00:52:32.942207 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6d01af44-c690-41ba-8499-7a4fe98e6228\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-96cd8b58d-jmxg2" podUID="6d01af44-c690-41ba-8499-7a4fe98e6228" Oct 31 00:52:32.959378 env[1221]: time="2025-10-31T00:52:32.959319540Z" level=error msg="StopPodSandbox for \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\" failed" error="failed to destroy network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.959815 kubelet[1951]: E1031 00:52:32.959766 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:52:32.959923 kubelet[1951]: E1031 00:52:32.959828 1951 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92"} Oct 31 00:52:32.959923 kubelet[1951]: E1031 00:52:32.959872 1951 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"45299de2-b3de-400b-8c19-f8a3dd1abc5a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 00:52:32.959923 kubelet[1951]: E1031 00:52:32.959897 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"45299de2-b3de-400b-8c19-f8a3dd1abc5a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-47vlh" podUID="45299de2-b3de-400b-8c19-f8a3dd1abc5a" Oct 31 00:52:32.960707 env[1221]: time="2025-10-31T00:52:32.960662463Z" level=error msg="StopPodSandbox for \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\" failed" error="failed to destroy network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.960861 kubelet[1951]: E1031 00:52:32.960829 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:52:32.960861 kubelet[1951]: E1031 00:52:32.960862 1951 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36"} Oct 31 00:52:32.960946 kubelet[1951]: E1031 00:52:32.960883 1951 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c8e402bc-f445-4783-b321-f2c849228b0b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 00:52:32.960946 kubelet[1951]: E1031 00:52:32.960898 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c8e402bc-f445-4783-b321-f2c849228b0b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" podUID="c8e402bc-f445-4783-b321-f2c849228b0b" Oct 31 00:52:32.961093 env[1221]: time="2025-10-31T00:52:32.960850755Z" level=error msg="StopPodSandbox for \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\" failed" error="failed to destroy network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 31 00:52:32.961302 kubelet[1951]: E1031 00:52:32.961282 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:52:32.961360 kubelet[1951]: E1031 00:52:32.961309 1951 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e"} Oct 31 00:52:32.961360 kubelet[1951]: E1031 00:52:32.961329 1951 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a1446d6d-3b62-4890-8f90-ef3bb45fee6d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 31 00:52:32.961360 kubelet[1951]: E1031 00:52:32.961344 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a1446d6d-3b62-4890-8f90-ef3bb45fee6d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:52:37.271991 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2783319863.mount: Deactivated successfully. Oct 31 00:52:37.580783 env[1221]: time="2025-10-31T00:52:37.580657959Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:37.584166 env[1221]: time="2025-10-31T00:52:37.584109898Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:37.585533 env[1221]: time="2025-10-31T00:52:37.585488970Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:37.588042 env[1221]: time="2025-10-31T00:52:37.588005341Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 31 00:52:37.588513 env[1221]: time="2025-10-31T00:52:37.588472365Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b\"" Oct 31 00:52:37.608713 env[1221]: time="2025-10-31T00:52:37.608669935Z" level=info msg="CreateContainer within sandbox \"bde329b78d4bcb244f265b1b322f7a72043d5262122b2094de4bf1a81c5c640d\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 31 00:52:37.637368 env[1221]: time="2025-10-31T00:52:37.637304263Z" level=info msg="CreateContainer within sandbox \"bde329b78d4bcb244f265b1b322f7a72043d5262122b2094de4bf1a81c5c640d\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"f6cf387b193f7b2e2c22f23551a5545499e54dcc8aea8132933b39b93a7faa0d\"" Oct 31 00:52:37.638571 env[1221]: time="2025-10-31T00:52:37.638304875Z" level=info msg="StartContainer for \"f6cf387b193f7b2e2c22f23551a5545499e54dcc8aea8132933b39b93a7faa0d\"" Oct 31 00:52:37.673521 systemd[1]: Started cri-containerd-f6cf387b193f7b2e2c22f23551a5545499e54dcc8aea8132933b39b93a7faa0d.scope. Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.696249 kernel: kauditd_printk_skb: 135 callbacks suppressed Oct 31 00:52:37.696346 kernel: audit: type=1400 audit(1761871957.692:1019): avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.696374 kernel: audit: type=1300 audit(1761871957.692:1019): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2532 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:37.692000 audit[3229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2532 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:37.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636636633383762313933663762326532633232663233353531613535 Oct 31 00:52:37.702930 kernel: audit: type=1327 audit(1761871957.692:1019): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636636633383762313933663762326532633232663233353531613535 Oct 31 00:52:37.703021 kernel: audit: type=1400 audit(1761871957.692:1020): avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.705040 kernel: audit: type=1400 audit(1761871957.692:1020): avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.709043 kernel: audit: type=1400 audit(1761871957.692:1020): avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.712056 kernel: audit: type=1400 audit(1761871957.692:1020): avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.712121 kernel: audit: type=1400 audit(1761871957.692:1020): avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.716548 kernel: audit: type=1400 audit(1761871957.692:1020): avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.716620 kernel: audit: type=1400 audit(1761871957.692:1020): avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit: BPF prog-id=139 op=LOAD Oct 31 00:52:37.692000 audit[3229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2532 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:37.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636636633383762313933663762326532633232663233353531613535 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.692000 audit: BPF prog-id=140 op=LOAD Oct 31 00:52:37.692000 audit[3229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2532 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:37.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636636633383762313933663762326532633232663233353531613535 Oct 31 00:52:37.695000 audit: BPF prog-id=140 op=UNLOAD Oct 31 00:52:37.695000 audit: BPF prog-id=139 op=UNLOAD Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:37.695000 audit: BPF prog-id=141 op=LOAD Oct 31 00:52:37.695000 audit[3229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2532 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:37.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636636633383762313933663762326532633232663233353531613535 Oct 31 00:52:37.750313 env[1221]: time="2025-10-31T00:52:37.750171208Z" level=info msg="StartContainer for \"f6cf387b193f7b2e2c22f23551a5545499e54dcc8aea8132933b39b93a7faa0d\" returns successfully" Oct 31 00:52:37.754759 kubelet[1951]: I1031 00:52:37.754714 1951 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Oct 31 00:52:37.755156 kubelet[1951]: E1031 00:52:37.755112 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:37.841000 audit[3263]: NETFILTER_CFG table=filter:107 family=2 entries=21 op=nft_register_rule pid=3263 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:37.841000 audit[3263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd41a2ee0 a2=0 a3=1 items=0 ppid=2062 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:37.841000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:37.854000 audit[3263]: NETFILTER_CFG table=nat:108 family=2 entries=19 op=nft_register_chain pid=3263 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:37.854000 audit[3263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd41a2ee0 a2=0 a3=1 items=0 ppid=2062 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:37.854000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:37.883567 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 31 00:52:37.883699 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 31 00:52:37.904914 kubelet[1951]: E1031 00:52:37.904867 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:37.905552 kubelet[1951]: E1031 00:52:37.905479 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:38.135381 kubelet[1951]: I1031 00:52:38.135222 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-9wqpt" podStartSLOduration=1.09807061 podStartE2EDuration="13.13520115s" podCreationTimestamp="2025-10-31 00:52:25 +0000 UTC" firstStartedPulling="2025-10-31 00:52:25.552772019 +0000 UTC m=+21.878164003" lastFinishedPulling="2025-10-31 00:52:37.589902519 +0000 UTC m=+33.915294543" observedRunningTime="2025-10-31 00:52:37.92764803 +0000 UTC m=+34.253040094" watchObservedRunningTime="2025-10-31 00:52:38.13520115 +0000 UTC m=+34.460593134" Oct 31 00:52:38.138501 env[1221]: time="2025-10-31T00:52:38.138448513Z" level=info msg="StopPodSandbox for \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\"" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.225 [INFO][3311] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.226 [INFO][3311] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" iface="eth0" netns="/var/run/netns/cni-b2daeeea-9b03-1eac-6ba0-d4707b311269" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.226 [INFO][3311] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" iface="eth0" netns="/var/run/netns/cni-b2daeeea-9b03-1eac-6ba0-d4707b311269" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.227 [INFO][3311] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" iface="eth0" netns="/var/run/netns/cni-b2daeeea-9b03-1eac-6ba0-d4707b311269" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.227 [INFO][3311] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.227 [INFO][3311] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.313 [INFO][3319] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" HandleID="k8s-pod-network.38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Workload="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.313 [INFO][3319] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.313 [INFO][3319] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.324 [WARNING][3319] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" HandleID="k8s-pod-network.38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Workload="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.324 [INFO][3319] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" HandleID="k8s-pod-network.38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Workload="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.326 [INFO][3319] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:38.329861 env[1221]: 2025-10-31 00:52:38.328 [INFO][3311] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:52:38.332061 systemd[1]: run-netns-cni\x2db2daeeea\x2d9b03\x2d1eac\x2d6ba0\x2dd4707b311269.mount: Deactivated successfully. Oct 31 00:52:38.332379 env[1221]: time="2025-10-31T00:52:38.332085208Z" level=info msg="TearDown network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\" successfully" Oct 31 00:52:38.332379 env[1221]: time="2025-10-31T00:52:38.332147772Z" level=info msg="StopPodSandbox for \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\" returns successfully" Oct 31 00:52:38.409903 kubelet[1951]: I1031 00:52:38.409786 1951 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6d01af44-c690-41ba-8499-7a4fe98e6228-whisker-ca-bundle\") pod \"6d01af44-c690-41ba-8499-7a4fe98e6228\" (UID: \"6d01af44-c690-41ba-8499-7a4fe98e6228\") " Oct 31 00:52:38.409903 kubelet[1951]: I1031 00:52:38.409833 1951 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/6d01af44-c690-41ba-8499-7a4fe98e6228-whisker-backend-key-pair\") pod \"6d01af44-c690-41ba-8499-7a4fe98e6228\" (UID: \"6d01af44-c690-41ba-8499-7a4fe98e6228\") " Oct 31 00:52:38.409903 kubelet[1951]: I1031 00:52:38.409866 1951 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-l2xfd\" (UniqueName: \"kubernetes.io/projected/6d01af44-c690-41ba-8499-7a4fe98e6228-kube-api-access-l2xfd\") pod \"6d01af44-c690-41ba-8499-7a4fe98e6228\" (UID: \"6d01af44-c690-41ba-8499-7a4fe98e6228\") " Oct 31 00:52:38.410602 kubelet[1951]: I1031 00:52:38.410505 1951 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/6d01af44-c690-41ba-8499-7a4fe98e6228-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "6d01af44-c690-41ba-8499-7a4fe98e6228" (UID: "6d01af44-c690-41ba-8499-7a4fe98e6228"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Oct 31 00:52:38.415407 kubelet[1951]: I1031 00:52:38.415352 1951 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6d01af44-c690-41ba-8499-7a4fe98e6228-kube-api-access-l2xfd" (OuterVolumeSpecName: "kube-api-access-l2xfd") pod "6d01af44-c690-41ba-8499-7a4fe98e6228" (UID: "6d01af44-c690-41ba-8499-7a4fe98e6228"). InnerVolumeSpecName "kube-api-access-l2xfd". PluginName "kubernetes.io/projected", VolumeGIDValue "" Oct 31 00:52:38.416876 systemd[1]: var-lib-kubelet-pods-6d01af44\x2dc690\x2d41ba\x2d8499\x2d7a4fe98e6228-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dl2xfd.mount: Deactivated successfully. Oct 31 00:52:38.418841 kubelet[1951]: I1031 00:52:38.418785 1951 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6d01af44-c690-41ba-8499-7a4fe98e6228-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "6d01af44-c690-41ba-8499-7a4fe98e6228" (UID: "6d01af44-c690-41ba-8499-7a4fe98e6228"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Oct 31 00:52:38.419441 systemd[1]: var-lib-kubelet-pods-6d01af44\x2dc690\x2d41ba\x2d8499\x2d7a4fe98e6228-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Oct 31 00:52:38.510517 kubelet[1951]: I1031 00:52:38.510468 1951 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6d01af44-c690-41ba-8499-7a4fe98e6228-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Oct 31 00:52:38.510517 kubelet[1951]: I1031 00:52:38.510506 1951 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/6d01af44-c690-41ba-8499-7a4fe98e6228-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Oct 31 00:52:38.510517 kubelet[1951]: I1031 00:52:38.510518 1951 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-l2xfd\" (UniqueName: \"kubernetes.io/projected/6d01af44-c690-41ba-8499-7a4fe98e6228-kube-api-access-l2xfd\") on node \"localhost\" DevicePath \"\"" Oct 31 00:52:38.907065 kubelet[1951]: E1031 00:52:38.907029 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:38.914671 systemd[1]: Removed slice kubepods-besteffort-pod6d01af44_c690_41ba_8499_7a4fe98e6228.slice. Oct 31 00:52:39.065777 systemd[1]: Created slice kubepods-besteffort-poda8fc4166_ef9c_4e92_9cd9_cff4ec9f9c94.slice. Oct 31 00:52:39.115308 kubelet[1951]: I1031 00:52:39.115269 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94-whisker-backend-key-pair\") pod \"whisker-6795c95d78-ss2p9\" (UID: \"a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94\") " pod="calico-system/whisker-6795c95d78-ss2p9" Oct 31 00:52:39.115491 kubelet[1951]: I1031 00:52:39.115474 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94-whisker-ca-bundle\") pod \"whisker-6795c95d78-ss2p9\" (UID: \"a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94\") " pod="calico-system/whisker-6795c95d78-ss2p9" Oct 31 00:52:39.115615 kubelet[1951]: I1031 00:52:39.115601 1951 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k9mnf\" (UniqueName: \"kubernetes.io/projected/a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94-kube-api-access-k9mnf\") pod \"whisker-6795c95d78-ss2p9\" (UID: \"a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94\") " pod="calico-system/whisker-6795c95d78-ss2p9" Oct 31 00:52:39.362000 audit[3406]: AVC avc: denied { write } for pid=3406 comm="tee" name="fd" dev="proc" ino=21591 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 00:52:39.362000 audit[3406]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc7c827f1 a2=241 a3=1b6 items=1 ppid=3383 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.362000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 31 00:52:39.362000 audit: PATH item=0 name="/dev/fd/63" inode=21588 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 00:52:39.362000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 00:52:39.364000 audit[3407]: AVC avc: denied { write } for pid=3407 comm="tee" name="fd" dev="proc" ino=21597 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 00:52:39.364000 audit[3407]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc0c217f2 a2=241 a3=1b6 items=1 ppid=3373 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.364000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 31 00:52:39.364000 audit: PATH item=0 name="/dev/fd/63" inode=20655 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 00:52:39.364000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 00:52:39.368511 env[1221]: time="2025-10-31T00:52:39.368457893Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6795c95d78-ss2p9,Uid:a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94,Namespace:calico-system,Attempt:0,}" Oct 31 00:52:39.370000 audit[3413]: AVC avc: denied { write } for pid=3413 comm="tee" name="fd" dev="proc" ino=20666 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 00:52:39.370000 audit[3413]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd180f7f3 a2=241 a3=1b6 items=1 ppid=3371 pid=3413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.370000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 31 00:52:39.370000 audit: PATH item=0 name="/dev/fd/63" inode=18863 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 00:52:39.370000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 00:52:39.378000 audit[3423]: AVC avc: denied { write } for pid=3423 comm="tee" name="fd" dev="proc" ino=21606 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 00:52:39.378000 audit[3423]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc5aa87e2 a2=241 a3=1b6 items=1 ppid=3372 pid=3423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.378000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 31 00:52:39.378000 audit: PATH item=0 name="/dev/fd/63" inode=21601 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 00:52:39.378000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 00:52:39.400000 audit[3444]: AVC avc: denied { write } for pid=3444 comm="tee" name="fd" dev="proc" ino=21635 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 00:52:39.400000 audit[3444]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcea817f1 a2=241 a3=1b6 items=1 ppid=3382 pid=3444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.400000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 31 00:52:39.400000 audit: PATH item=0 name="/dev/fd/63" inode=21608 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 00:52:39.400000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 00:52:39.414000 audit[3430]: AVC avc: denied { write } for pid=3430 comm="tee" name="fd" dev="proc" ino=18874 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 00:52:39.414000 audit[3430]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffef99e7e1 a2=241 a3=1b6 items=1 ppid=3378 pid=3430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.414000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 31 00:52:39.414000 audit: PATH item=0 name="/dev/fd/63" inode=20087 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 00:52:39.414000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 00:52:39.415000 audit[3446]: AVC avc: denied { write } for pid=3446 comm="tee" name="fd" dev="proc" ino=20099 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 31 00:52:39.415000 audit[3446]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe99f37f1 a2=241 a3=1b6 items=1 ppid=3377 pid=3446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.415000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 31 00:52:39.415000 audit: PATH item=0 name="/dev/fd/63" inode=20090 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 31 00:52:39.415000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 31 00:52:39.590525 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 31 00:52:39.590622 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibcb233f363a: link becomes ready Oct 31 00:52:39.590194 systemd-networkd[1055]: calibcb233f363a: Link UP Oct 31 00:52:39.594802 systemd-networkd[1055]: calibcb233f363a: Gained carrier Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.422 [INFO][3449] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.439 [INFO][3449] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--6795c95d78--ss2p9-eth0 whisker-6795c95d78- calico-system a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94 901 0 2025-10-31 00:52:39 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:6795c95d78 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-6795c95d78-ss2p9 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calibcb233f363a [] [] }} ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Namespace="calico-system" Pod="whisker-6795c95d78-ss2p9" WorkloadEndpoint="localhost-k8s-whisker--6795c95d78--ss2p9-" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.439 [INFO][3449] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Namespace="calico-system" Pod="whisker-6795c95d78-ss2p9" WorkloadEndpoint="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.515 [INFO][3475] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" HandleID="k8s-pod-network.528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Workload="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.515 [INFO][3475] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" HandleID="k8s-pod-network.528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Workload="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400034b040), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-6795c95d78-ss2p9", "timestamp":"2025-10-31 00:52:39.515619299 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.515 [INFO][3475] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.516 [INFO][3475] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.516 [INFO][3475] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.534 [INFO][3475] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" host="localhost" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.544 [INFO][3475] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.552 [INFO][3475] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.557 [INFO][3475] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.560 [INFO][3475] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.560 [INFO][3475] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" host="localhost" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.562 [INFO][3475] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0 Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.567 [INFO][3475] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" host="localhost" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.575 [INFO][3475] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" host="localhost" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.575 [INFO][3475] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" host="localhost" Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.575 [INFO][3475] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:39.607118 env[1221]: 2025-10-31 00:52:39.575 [INFO][3475] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" HandleID="k8s-pod-network.528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Workload="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" Oct 31 00:52:39.607868 env[1221]: 2025-10-31 00:52:39.577 [INFO][3449] cni-plugin/k8s.go 418: Populated endpoint ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Namespace="calico-system" Pod="whisker-6795c95d78-ss2p9" WorkloadEndpoint="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6795c95d78--ss2p9-eth0", GenerateName:"whisker-6795c95d78-", Namespace:"calico-system", SelfLink:"", UID:"a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94", ResourceVersion:"901", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6795c95d78", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-6795c95d78-ss2p9", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calibcb233f363a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:39.607868 env[1221]: 2025-10-31 00:52:39.577 [INFO][3449] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Namespace="calico-system" Pod="whisker-6795c95d78-ss2p9" WorkloadEndpoint="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" Oct 31 00:52:39.607868 env[1221]: 2025-10-31 00:52:39.577 [INFO][3449] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibcb233f363a ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Namespace="calico-system" Pod="whisker-6795c95d78-ss2p9" WorkloadEndpoint="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" Oct 31 00:52:39.607868 env[1221]: 2025-10-31 00:52:39.591 [INFO][3449] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Namespace="calico-system" Pod="whisker-6795c95d78-ss2p9" WorkloadEndpoint="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" Oct 31 00:52:39.607868 env[1221]: 2025-10-31 00:52:39.591 [INFO][3449] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Namespace="calico-system" Pod="whisker-6795c95d78-ss2p9" WorkloadEndpoint="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6795c95d78--ss2p9-eth0", GenerateName:"whisker-6795c95d78-", Namespace:"calico-system", SelfLink:"", UID:"a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94", ResourceVersion:"901", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6795c95d78", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0", Pod:"whisker-6795c95d78-ss2p9", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calibcb233f363a", MAC:"ae:fd:2b:ef:44:ef", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:39.607868 env[1221]: 2025-10-31 00:52:39.605 [INFO][3449] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0" Namespace="calico-system" Pod="whisker-6795c95d78-ss2p9" WorkloadEndpoint="localhost-k8s-whisker--6795c95d78--ss2p9-eth0" Oct 31 00:52:39.620965 env[1221]: time="2025-10-31T00:52:39.620839943Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:39.620965 env[1221]: time="2025-10-31T00:52:39.620919307Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:39.620965 env[1221]: time="2025-10-31T00:52:39.620947588Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:39.622393 env[1221]: time="2025-10-31T00:52:39.621181400Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0 pid=3520 runtime=io.containerd.runc.v2 Oct 31 00:52:39.635402 systemd[1]: Started cri-containerd-528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0.scope. Oct 31 00:52:39.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.656000 audit: BPF prog-id=142 op=LOAD Oct 31 00:52:39.656000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.656000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3520 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386232393231626266366339393430626366316138616266623238 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3520 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386232393231626266366339393430626366316138616266623238 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.657000 audit: BPF prog-id=143 op=LOAD Oct 31 00:52:39.657000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3520 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386232393231626266366339393430626366316138616266623238 Oct 31 00:52:39.658000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.658000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.658000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.658000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.658000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.658000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.658000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.658000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.658000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.658000 audit: BPF prog-id=144 op=LOAD Oct 31 00:52:39.658000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3520 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386232393231626266366339393430626366316138616266623238 Oct 31 00:52:39.658000 audit: BPF prog-id=144 op=UNLOAD Oct 31 00:52:39.658000 audit: BPF prog-id=143 op=UNLOAD Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.659000 audit: BPF prog-id=145 op=LOAD Oct 31 00:52:39.659000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3520 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386232393231626266366339393430626366316138616266623238 Oct 31 00:52:39.667441 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit: BPF prog-id=146 op=LOAD Oct 31 00:52:39.691000 audit[3565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7fad608 a2=98 a3=fffff7fad5f8 items=0 ppid=3386 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.691000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 31 00:52:39.691000 audit: BPF prog-id=146 op=UNLOAD Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.691000 audit: BPF prog-id=147 op=LOAD Oct 31 00:52:39.691000 audit[3565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7fad4b8 a2=74 a3=95 items=0 ppid=3386 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.691000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 31 00:52:39.692000 audit: BPF prog-id=147 op=UNLOAD Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit: BPF prog-id=148 op=LOAD Oct 31 00:52:39.692000 audit[3565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7fad4e8 a2=40 a3=fffff7fad518 items=0 ppid=3386 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.692000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 31 00:52:39.692000 audit: BPF prog-id=148 op=UNLOAD Oct 31 00:52:39.692000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.692000 audit[3565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffff7fad600 a2=50 a3=0 items=0 ppid=3386 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.692000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit: BPF prog-id=149 op=LOAD Oct 31 00:52:39.694000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc9b915a8 a2=98 a3=ffffc9b91598 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.694000 audit: BPF prog-id=149 op=UNLOAD Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit: BPF prog-id=150 op=LOAD Oct 31 00:52:39.694000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc9b91238 a2=74 a3=95 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.694000 audit: BPF prog-id=150 op=UNLOAD Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.694000 audit: BPF prog-id=151 op=LOAD Oct 31 00:52:39.694000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc9b91298 a2=94 a3=2 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.694000 audit: BPF prog-id=151 op=UNLOAD Oct 31 00:52:39.698460 env[1221]: time="2025-10-31T00:52:39.698415560Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6795c95d78-ss2p9,Uid:a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94,Namespace:calico-system,Attempt:0,} returns sandbox id \"528b2921bbf6c9940bcf1a8abfb2827f6e1046fbf8e29ab2ca7c985024b3b3f0\"" Oct 31 00:52:39.700070 env[1221]: time="2025-10-31T00:52:39.700039200Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit: BPF prog-id=152 op=LOAD Oct 31 00:52:39.781000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc9b91258 a2=40 a3=ffffc9b91288 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.781000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.781000 audit: BPF prog-id=152 op=UNLOAD Oct 31 00:52:39.781000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.781000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc9b91370 a2=50 a3=0 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.781000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.785616 kubelet[1951]: I1031 00:52:39.785571 1951 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="6d01af44-c690-41ba-8499-7a4fe98e6228" path="/var/lib/kubelet/pods/6d01af44-c690-41ba-8499-7a4fe98e6228/volumes" Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b912c8 a2=28 a3=ffffc9b913f8 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b912f8 a2=28 a3=ffffc9b91428 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b911a8 a2=28 a3=ffffc9b912d8 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b91318 a2=28 a3=ffffc9b91448 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b912f8 a2=28 a3=ffffc9b91428 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b912e8 a2=28 a3=ffffc9b91418 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b91318 a2=28 a3=ffffc9b91448 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b912f8 a2=28 a3=ffffc9b91428 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b91318 a2=28 a3=ffffc9b91448 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc9b912e8 a2=28 a3=ffffc9b91418 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc9b91368 a2=28 a3=ffffc9b914a8 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc9b910a0 a2=50 a3=0 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.789000 audit: BPF prog-id=153 op=LOAD Oct 31 00:52:39.789000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc9b910a8 a2=94 a3=5 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.789000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.790000 audit: BPF prog-id=153 op=UNLOAD Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc9b911b0 a2=50 a3=0 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.790000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc9b912f8 a2=4 a3=3 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.790000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { confidentiality } for pid=3566 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 00:52:39.790000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc9b912d8 a2=94 a3=6 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.790000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { confidentiality } for pid=3566 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 00:52:39.790000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc9b90aa8 a2=94 a3=83 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.790000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.790000 audit[3566]: AVC avc: denied { confidentiality } for pid=3566 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 00:52:39.790000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc9b90aa8 a2=94 a3=83 items=0 ppid=3386 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.790000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit: BPF prog-id=154 op=LOAD Oct 31 00:52:39.800000 audit[3569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc321ab8 a2=98 a3=ffffcc321aa8 items=0 ppid=3386 pid=3569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.800000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 31 00:52:39.800000 audit: BPF prog-id=154 op=UNLOAD Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit: BPF prog-id=155 op=LOAD Oct 31 00:52:39.800000 audit[3569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc321968 a2=74 a3=95 items=0 ppid=3386 pid=3569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.800000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 31 00:52:39.800000 audit: BPF prog-id=155 op=UNLOAD Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { perfmon } for pid=3569 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit[3569]: AVC avc: denied { bpf } for pid=3569 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.800000 audit: BPF prog-id=156 op=LOAD Oct 31 00:52:39.800000 audit[3569]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcc321998 a2=40 a3=ffffcc3219c8 items=0 ppid=3386 pid=3569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.800000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Oct 31 00:52:39.800000 audit: BPF prog-id=156 op=UNLOAD Oct 31 00:52:39.852737 systemd-networkd[1055]: vxlan.calico: Link UP Oct 31 00:52:39.852746 systemd-networkd[1055]: vxlan.calico: Gained carrier Oct 31 00:52:39.868000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.868000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.868000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.868000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.868000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.868000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.868000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.868000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.868000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.868000 audit: BPF prog-id=157 op=LOAD Oct 31 00:52:39.868000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc09f2d08 a2=98 a3=ffffc09f2cf8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.868000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit: BPF prog-id=157 op=UNLOAD Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit: BPF prog-id=158 op=LOAD Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc09f29e8 a2=74 a3=95 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit: BPF prog-id=158 op=UNLOAD Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit: BPF prog-id=159 op=LOAD Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc09f2a48 a2=94 a3=2 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit: BPF prog-id=159 op=UNLOAD Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc09f2a78 a2=28 a3=ffffc09f2ba8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc09f2aa8 a2=28 a3=ffffc09f2bd8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc09f2958 a2=28 a3=ffffc09f2a88 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc09f2ac8 a2=28 a3=ffffc09f2bf8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc09f2aa8 a2=28 a3=ffffc09f2bd8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc09f2a98 a2=28 a3=ffffc09f2bc8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc09f2ac8 a2=28 a3=ffffc09f2bf8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc09f2aa8 a2=28 a3=ffffc09f2bd8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc09f2ac8 a2=28 a3=ffffc09f2bf8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc09f2a98 a2=28 a3=ffffc09f2bc8 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffc09f2b18 a2=28 a3=ffffc09f2c58 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.869000 audit: BPF prog-id=160 op=LOAD Oct 31 00:52:39.869000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc09f2938 a2=40 a3=ffffc09f2968 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.870000 audit: BPF prog-id=160 op=UNLOAD Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffc09f2960 a2=50 a3=0 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffc09f2960 a2=50 a3=0 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit: BPF prog-id=161 op=LOAD Oct 31 00:52:39.870000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc09f20c8 a2=94 a3=2 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.870000 audit: BPF prog-id=161 op=UNLOAD Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { perfmon } for pid=3596 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit[3596]: AVC avc: denied { bpf } for pid=3596 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.870000 audit: BPF prog-id=162 op=LOAD Oct 31 00:52:39.870000 audit[3596]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc09f2258 a2=94 a3=30 items=0 ppid=3386 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 31 00:52:39.875000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.875000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.875000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.875000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.875000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.875000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.875000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.875000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.875000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.875000 audit: BPF prog-id=163 op=LOAD Oct 31 00:52:39.875000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe5d58958 a2=98 a3=ffffe5d58948 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.875000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.876000 audit: BPF prog-id=163 op=UNLOAD Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit: BPF prog-id=164 op=LOAD Oct 31 00:52:39.876000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe5d585e8 a2=74 a3=95 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.876000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.876000 audit: BPF prog-id=164 op=UNLOAD Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.876000 audit: BPF prog-id=165 op=LOAD Oct 31 00:52:39.876000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe5d58648 a2=94 a3=2 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.876000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.876000 audit: BPF prog-id=165 op=UNLOAD Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit: BPF prog-id=166 op=LOAD Oct 31 00:52:39.968000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe5d58608 a2=40 a3=ffffe5d58638 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.968000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.968000 audit: BPF prog-id=166 op=UNLOAD Oct 31 00:52:39.968000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.968000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe5d58720 a2=50 a3=0 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.968000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe5d58678 a2=28 a3=ffffe5d587a8 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe5d586a8 a2=28 a3=ffffe5d587d8 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe5d58558 a2=28 a3=ffffe5d58688 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe5d586c8 a2=28 a3=ffffe5d587f8 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe5d586a8 a2=28 a3=ffffe5d587d8 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe5d58698 a2=28 a3=ffffe5d587c8 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe5d586c8 a2=28 a3=ffffe5d587f8 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe5d586a8 a2=28 a3=ffffe5d587d8 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe5d586c8 a2=28 a3=ffffe5d587f8 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe5d58698 a2=28 a3=ffffe5d587c8 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe5d58718 a2=28 a3=ffffe5d58858 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe5d58450 a2=50 a3=0 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit: BPF prog-id=167 op=LOAD Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe5d58458 a2=94 a3=5 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit: BPF prog-id=167 op=UNLOAD Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe5d58560 a2=50 a3=0 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffe5d586a8 a2=4 a3=3 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { confidentiality } for pid=3598 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe5d58688 a2=94 a3=6 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.977000 audit[3598]: AVC avc: denied { confidentiality } for pid=3598 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 00:52:39.977000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe5d57e58 a2=94 a3=83 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.977000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { perfmon } for pid=3598 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { confidentiality } for pid=3598 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Oct 31 00:52:39.978000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe5d57e58 a2=94 a3=83 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe5d59898 a2=10 a3=ffffe5d59988 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe5d59758 a2=10 a3=ffffe5d59848 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe5d596c8 a2=10 a3=ffffe5d59848 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.978000 audit[3598]: AVC avc: denied { bpf } for pid=3598 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:39.978000 audit[3598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe5d596c8 a2=10 a3=ffffe5d59848 items=0 ppid=3386 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:39.978000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 31 00:52:39.989000 audit: BPF prog-id=162 op=UNLOAD Oct 31 00:52:40.030000 audit[3628]: NETFILTER_CFG table=mangle:109 family=2 entries=16 op=nft_register_chain pid=3628 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:40.030000 audit[3628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffffeebe350 a2=0 a3=ffffb1a56fa8 items=0 ppid=3386 pid=3628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:40.030000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:40.037000 audit[3632]: NETFILTER_CFG table=nat:110 family=2 entries=15 op=nft_register_chain pid=3632 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:40.037000 audit[3632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffd569ea30 a2=0 a3=ffff800a3fa8 items=0 ppid=3386 pid=3632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:40.037000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:40.040000 audit[3627]: NETFILTER_CFG table=raw:111 family=2 entries=21 op=nft_register_chain pid=3627 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:40.040000 audit[3627]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffdbbacfa0 a2=0 a3=ffffb78eafa8 items=0 ppid=3386 pid=3627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:40.040000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:40.045513 env[1221]: time="2025-10-31T00:52:40.045453114Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:40.058512 env[1221]: time="2025-10-31T00:52:40.058399085Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 31 00:52:40.058715 kubelet[1951]: E1031 00:52:40.058674 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 00:52:40.058955 kubelet[1951]: E1031 00:52:40.058729 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 00:52:40.059151 kubelet[1951]: E1031 00:52:40.059053 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:8198d7d63758426fa7625a9bf0338b75,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-k9mnf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6795c95d78-ss2p9_calico-system(a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:40.060987 env[1221]: time="2025-10-31T00:52:40.060943165Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 31 00:52:40.042000 audit[3629]: NETFILTER_CFG table=filter:112 family=2 entries=94 op=nft_register_chain pid=3629 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:40.042000 audit[3629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=ffffce15b2f0 a2=0 a3=ffff91fcafa8 items=0 ppid=3386 pid=3629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:40.042000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:40.458600 env[1221]: time="2025-10-31T00:52:40.458514535Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:40.459992 env[1221]: time="2025-10-31T00:52:40.459944323Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 31 00:52:40.460608 kubelet[1951]: E1031 00:52:40.460221 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 00:52:40.460608 kubelet[1951]: E1031 00:52:40.460280 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 00:52:40.460786 kubelet[1951]: E1031 00:52:40.460400 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k9mnf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6795c95d78-ss2p9_calico-system(a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:40.461794 kubelet[1951]: E1031 00:52:40.461704 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6795c95d78-ss2p9" podUID="a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94" Oct 31 00:52:40.912643 kubelet[1951]: E1031 00:52:40.912603 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6795c95d78-ss2p9" podUID="a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94" Oct 31 00:52:40.939000 audit[3644]: NETFILTER_CFG table=filter:113 family=2 entries=20 op=nft_register_rule pid=3644 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:40.939000 audit[3644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffed10eee0 a2=0 a3=1 items=0 ppid=2062 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:40.939000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:40.946000 audit[3644]: NETFILTER_CFG table=nat:114 family=2 entries=14 op=nft_register_rule pid=3644 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:40.946000 audit[3644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffed10eee0 a2=0 a3=1 items=0 ppid=2062 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:40.946000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:41.040348 systemd-networkd[1055]: calibcb233f363a: Gained IPv6LL Oct 31 00:52:41.424274 systemd-networkd[1055]: vxlan.calico: Gained IPv6LL Oct 31 00:52:44.783141 env[1221]: time="2025-10-31T00:52:44.783058466Z" level=info msg="StopPodSandbox for \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\"" Oct 31 00:52:44.784496 env[1221]: time="2025-10-31T00:52:44.784457165Z" level=info msg="StopPodSandbox for \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\"" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.856 [INFO][3670] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.862 [INFO][3670] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" iface="eth0" netns="/var/run/netns/cni-db3000e9-28be-85bd-a61d-c3a1a7cf0cc0" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.862 [INFO][3670] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" iface="eth0" netns="/var/run/netns/cni-db3000e9-28be-85bd-a61d-c3a1a7cf0cc0" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.862 [INFO][3670] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" iface="eth0" netns="/var/run/netns/cni-db3000e9-28be-85bd-a61d-c3a1a7cf0cc0" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.862 [INFO][3670] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.862 [INFO][3670] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.891 [INFO][3686] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" HandleID="k8s-pod-network.30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.891 [INFO][3686] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.892 [INFO][3686] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.900 [WARNING][3686] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" HandleID="k8s-pod-network.30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.900 [INFO][3686] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" HandleID="k8s-pod-network.30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.902 [INFO][3686] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:44.908052 env[1221]: 2025-10-31 00:52:44.903 [INFO][3670] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:52:44.911024 env[1221]: time="2025-10-31T00:52:44.910467996Z" level=info msg="TearDown network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\" successfully" Oct 31 00:52:44.911024 env[1221]: time="2025-10-31T00:52:44.910505197Z" level=info msg="StopPodSandbox for \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\" returns successfully" Oct 31 00:52:44.910331 systemd[1]: run-netns-cni\x2ddb3000e9\x2d28be\x2d85bd\x2da61d\x2dc3a1a7cf0cc0.mount: Deactivated successfully. Oct 31 00:52:44.911646 env[1221]: time="2025-10-31T00:52:44.911609724Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5675d97fbf-5qxcq,Uid:3bc34509-f978-427a-9bb0-ccd41f4aa6f2,Namespace:calico-system,Attempt:1,}" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.877 [INFO][3671] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.877 [INFO][3671] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" iface="eth0" netns="/var/run/netns/cni-c7f5baa8-5bfe-a33a-f045-b7df036198c9" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.877 [INFO][3671] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" iface="eth0" netns="/var/run/netns/cni-c7f5baa8-5bfe-a33a-f045-b7df036198c9" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.877 [INFO][3671] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" iface="eth0" netns="/var/run/netns/cni-c7f5baa8-5bfe-a33a-f045-b7df036198c9" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.877 [INFO][3671] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.877 [INFO][3671] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.898 [INFO][3693] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" HandleID="k8s-pod-network.f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.898 [INFO][3693] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.902 [INFO][3693] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.914 [WARNING][3693] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" HandleID="k8s-pod-network.f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.914 [INFO][3693] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" HandleID="k8s-pod-network.f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.915 [INFO][3693] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:44.919104 env[1221]: 2025-10-31 00:52:44.917 [INFO][3671] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:52:44.921656 env[1221]: time="2025-10-31T00:52:44.921257691Z" level=info msg="TearDown network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\" successfully" Oct 31 00:52:44.921656 env[1221]: time="2025-10-31T00:52:44.921295852Z" level=info msg="StopPodSandbox for \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\" returns successfully" Oct 31 00:52:44.921324 systemd[1]: run-netns-cni\x2dc7f5baa8\x2d5bfe\x2da33a\x2df045\x2db7df036198c9.mount: Deactivated successfully. Oct 31 00:52:44.922854 env[1221]: time="2025-10-31T00:52:44.922805676Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b7f97cd5d-6rgcm,Uid:12689884-11c3-4d99-b0f3-8d3ed54d0141,Namespace:calico-apiserver,Attempt:1,}" Oct 31 00:52:45.202374 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 31 00:52:45.202509 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali87f6d984ec4: link becomes ready Oct 31 00:52:45.202660 systemd-networkd[1055]: cali87f6d984ec4: Link UP Oct 31 00:52:45.202798 systemd-networkd[1055]: cali87f6d984ec4: Gained carrier Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.077 [INFO][3703] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0 calico-kube-controllers-5675d97fbf- calico-system 3bc34509-f978-427a-9bb0-ccd41f4aa6f2 935 0 2025-10-31 00:52:25 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5675d97fbf projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-5675d97fbf-5qxcq eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali87f6d984ec4 [] [] }} ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Namespace="calico-system" Pod="calico-kube-controllers-5675d97fbf-5qxcq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.078 [INFO][3703] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Namespace="calico-system" Pod="calico-kube-controllers-5675d97fbf-5qxcq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.113 [INFO][3738] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" HandleID="k8s-pod-network.65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.113 [INFO][3738] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" HandleID="k8s-pod-network.65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000335390), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-5675d97fbf-5qxcq", "timestamp":"2025-10-31 00:52:45.113728682 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.114 [INFO][3738] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.114 [INFO][3738] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.114 [INFO][3738] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.123 [INFO][3738] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" host="localhost" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.155 [INFO][3738] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.174 [INFO][3738] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.179 [INFO][3738] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.181 [INFO][3738] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.181 [INFO][3738] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" host="localhost" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.183 [INFO][3738] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5 Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.188 [INFO][3738] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" host="localhost" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.195 [INFO][3738] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" host="localhost" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.195 [INFO][3738] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" host="localhost" Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.195 [INFO][3738] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:45.216511 env[1221]: 2025-10-31 00:52:45.195 [INFO][3738] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" HandleID="k8s-pod-network.65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:45.217154 env[1221]: 2025-10-31 00:52:45.197 [INFO][3703] cni-plugin/k8s.go 418: Populated endpoint ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Namespace="calico-system" Pod="calico-kube-controllers-5675d97fbf-5qxcq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0", GenerateName:"calico-kube-controllers-5675d97fbf-", Namespace:"calico-system", SelfLink:"", UID:"3bc34509-f978-427a-9bb0-ccd41f4aa6f2", ResourceVersion:"935", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5675d97fbf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-5675d97fbf-5qxcq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali87f6d984ec4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:45.217154 env[1221]: 2025-10-31 00:52:45.198 [INFO][3703] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Namespace="calico-system" Pod="calico-kube-controllers-5675d97fbf-5qxcq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:45.217154 env[1221]: 2025-10-31 00:52:45.198 [INFO][3703] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali87f6d984ec4 ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Namespace="calico-system" Pod="calico-kube-controllers-5675d97fbf-5qxcq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:45.217154 env[1221]: 2025-10-31 00:52:45.203 [INFO][3703] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Namespace="calico-system" Pod="calico-kube-controllers-5675d97fbf-5qxcq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:45.217154 env[1221]: 2025-10-31 00:52:45.203 [INFO][3703] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Namespace="calico-system" Pod="calico-kube-controllers-5675d97fbf-5qxcq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0", GenerateName:"calico-kube-controllers-5675d97fbf-", Namespace:"calico-system", SelfLink:"", UID:"3bc34509-f978-427a-9bb0-ccd41f4aa6f2", ResourceVersion:"935", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5675d97fbf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5", Pod:"calico-kube-controllers-5675d97fbf-5qxcq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali87f6d984ec4", MAC:"9a:9e:4e:f9:9f:1a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:45.217154 env[1221]: 2025-10-31 00:52:45.213 [INFO][3703] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5" Namespace="calico-system" Pod="calico-kube-controllers-5675d97fbf-5qxcq" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:52:45.227000 audit[3767]: NETFILTER_CFG table=filter:115 family=2 entries=36 op=nft_register_chain pid=3767 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:45.228467 kernel: kauditd_printk_skb: 659 callbacks suppressed Oct 31 00:52:45.228669 kernel: audit: type=1325 audit(1761871965.227:1156): table=filter:115 family=2 entries=36 op=nft_register_chain pid=3767 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:45.227000 audit[3767]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19576 a0=3 a1=ffffc061dfe0 a2=0 a3=ffffb75dffa8 items=0 ppid=3386 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.232567 env[1221]: time="2025-10-31T00:52:45.232482160Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:45.232567 env[1221]: time="2025-10-31T00:52:45.232525042Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:45.232567 env[1221]: time="2025-10-31T00:52:45.232535562Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:45.232974 env[1221]: time="2025-10-31T00:52:45.232923698Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5 pid=3774 runtime=io.containerd.runc.v2 Oct 31 00:52:45.234072 kernel: audit: type=1300 audit(1761871965.227:1156): arch=c00000b7 syscall=211 success=yes exit=19576 a0=3 a1=ffffc061dfe0 a2=0 a3=ffffb75dffa8 items=0 ppid=3386 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.234178 kernel: audit: type=1327 audit(1761871965.227:1156): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:45.227000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:45.248961 systemd[1]: Started cri-containerd-65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5.scope. Oct 31 00:52:45.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.272115 kernel: audit: type=1400 audit(1761871965.267:1157): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.272291 kernel: audit: type=1400 audit(1761871965.267:1158): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.272328 kernel: audit: type=1400 audit(1761871965.267:1159): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.274154 kernel: audit: type=1400 audit(1761871965.267:1160): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276565 kernel: audit: type=1400 audit(1761871965.267:1161): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278696 kernel: audit: type=1400 audit(1761871965.267:1162): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280750 kernel: audit: type=1400 audit(1761871965.267:1163): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.269000 audit: BPF prog-id=168 op=LOAD Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3774 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343639626337353664646261393134663033323861396638646438 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3774 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343639626337353664646261393134663033323861396638646438 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.276000 audit: BPF prog-id=169 op=LOAD Oct 31 00:52:45.276000 audit[3784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3774 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343639626337353664646261393134663033323861396638646438 Oct 31 00:52:45.278000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.278000 audit: BPF prog-id=170 op=LOAD Oct 31 00:52:45.278000 audit[3784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3774 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343639626337353664646261393134663033323861396638646438 Oct 31 00:52:45.280000 audit: BPF prog-id=170 op=UNLOAD Oct 31 00:52:45.280000 audit: BPF prog-id=169 op=UNLOAD Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { perfmon } for pid=3784 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit[3784]: AVC avc: denied { bpf } for pid=3784 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.280000 audit: BPF prog-id=171 op=LOAD Oct 31 00:52:45.280000 audit[3784]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3774 pid=3784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635343639626337353664646261393134663033323861396638646438 Oct 31 00:52:45.283725 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 00:52:45.300903 env[1221]: time="2025-10-31T00:52:45.300840928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5675d97fbf-5qxcq,Uid:3bc34509-f978-427a-9bb0-ccd41f4aa6f2,Namespace:calico-system,Attempt:1,} returns sandbox id \"65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5\"" Oct 31 00:52:45.302643 env[1221]: time="2025-10-31T00:52:45.302603400Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 31 00:52:45.306193 systemd-networkd[1055]: calidd5935c707f: Link UP Oct 31 00:52:45.309153 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidd5935c707f: link becomes ready Oct 31 00:52:45.309378 systemd-networkd[1055]: calidd5935c707f: Gained carrier Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.096 [INFO][3722] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0 calico-apiserver-7b7f97cd5d- calico-apiserver 12689884-11c3-4d99-b0f3-8d3ed54d0141 936 0 2025-10-31 00:52:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7b7f97cd5d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7b7f97cd5d-6rgcm eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calidd5935c707f [] [] }} ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-6rgcm" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.097 [INFO][3722] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-6rgcm" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.125 [INFO][3746] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" HandleID="k8s-pod-network.ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.125 [INFO][3746] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" HandleID="k8s-pod-network.ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000493050), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7b7f97cd5d-6rgcm", "timestamp":"2025-10-31 00:52:45.125735216 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.125 [INFO][3746] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.196 [INFO][3746] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.196 [INFO][3746] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.225 [INFO][3746] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" host="localhost" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.249 [INFO][3746] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.262 [INFO][3746] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.265 [INFO][3746] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.268 [INFO][3746] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.268 [INFO][3746] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" host="localhost" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.281 [INFO][3746] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582 Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.286 [INFO][3746] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" host="localhost" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.299 [INFO][3746] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" host="localhost" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.299 [INFO][3746] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" host="localhost" Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.299 [INFO][3746] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:45.327016 env[1221]: 2025-10-31 00:52:45.299 [INFO][3746] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" HandleID="k8s-pod-network.ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:45.327986 env[1221]: 2025-10-31 00:52:45.302 [INFO][3722] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-6rgcm" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0", GenerateName:"calico-apiserver-7b7f97cd5d-", Namespace:"calico-apiserver", SelfLink:"", UID:"12689884-11c3-4d99-b0f3-8d3ed54d0141", ResourceVersion:"936", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b7f97cd5d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7b7f97cd5d-6rgcm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd5935c707f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:45.327986 env[1221]: 2025-10-31 00:52:45.302 [INFO][3722] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-6rgcm" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:45.327986 env[1221]: 2025-10-31 00:52:45.303 [INFO][3722] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidd5935c707f ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-6rgcm" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:45.327986 env[1221]: 2025-10-31 00:52:45.307 [INFO][3722] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-6rgcm" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:45.327986 env[1221]: 2025-10-31 00:52:45.313 [INFO][3722] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-6rgcm" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0", GenerateName:"calico-apiserver-7b7f97cd5d-", Namespace:"calico-apiserver", SelfLink:"", UID:"12689884-11c3-4d99-b0f3-8d3ed54d0141", ResourceVersion:"936", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b7f97cd5d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582", Pod:"calico-apiserver-7b7f97cd5d-6rgcm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd5935c707f", MAC:"b2:58:c3:c9:18:df", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:45.327986 env[1221]: 2025-10-31 00:52:45.323 [INFO][3722] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-6rgcm" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:52:45.337355 env[1221]: time="2025-10-31T00:52:45.337285705Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:45.337355 env[1221]: time="2025-10-31T00:52:45.337324787Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:45.337355 env[1221]: time="2025-10-31T00:52:45.337338067Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:45.337560 env[1221]: time="2025-10-31T00:52:45.337464512Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582 pid=3823 runtime=io.containerd.runc.v2 Oct 31 00:52:45.337000 audit[3824]: NETFILTER_CFG table=filter:116 family=2 entries=54 op=nft_register_chain pid=3824 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:45.337000 audit[3824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29396 a0=3 a1=ffffcb866f60 a2=0 a3=ffff8c7b9fa8 items=0 ppid=3386 pid=3824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.337000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:45.348059 systemd[1]: Started cri-containerd-ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582.scope. Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.365000 audit: BPF prog-id=172 op=LOAD Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333033663430633562346334363164643661656539646466663364 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333033663430633562346334363164643661656539646466663364 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit: BPF prog-id=173 op=LOAD Oct 31 00:52:45.366000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333033663430633562346334363164643661656539646466663364 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit: BPF prog-id=174 op=LOAD Oct 31 00:52:45.366000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333033663430633562346334363164643661656539646466663364 Oct 31 00:52:45.366000 audit: BPF prog-id=174 op=UNLOAD Oct 31 00:52:45.366000 audit: BPF prog-id=173 op=UNLOAD Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:45.366000 audit: BPF prog-id=175 op=LOAD Oct 31 00:52:45.366000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564333033663430633562346334363164643661656539646466663364 Oct 31 00:52:45.367211 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 00:52:45.385502 env[1221]: time="2025-10-31T00:52:45.385454644Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b7f97cd5d-6rgcm,Uid:12689884-11c3-4d99-b0f3-8d3ed54d0141,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582\"" Oct 31 00:52:45.499490 env[1221]: time="2025-10-31T00:52:45.499323561Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:45.503911 env[1221]: time="2025-10-31T00:52:45.503851107Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 31 00:52:45.504533 kubelet[1951]: E1031 00:52:45.504360 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 00:52:45.504533 kubelet[1951]: E1031 00:52:45.504427 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 00:52:45.505492 kubelet[1951]: E1031 00:52:45.504644 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vzv8g,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5675d97fbf-5qxcq_calico-system(3bc34509-f978-427a-9bb0-ccd41f4aa6f2): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:45.505609 env[1221]: time="2025-10-31T00:52:45.504977513Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 00:52:45.506462 kubelet[1951]: E1031 00:52:45.506349 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" podUID="3bc34509-f978-427a-9bb0-ccd41f4aa6f2" Oct 31 00:52:45.782756 env[1221]: time="2025-10-31T00:52:45.782713601Z" level=info msg="StopPodSandbox for \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\"" Oct 31 00:52:45.837790 env[1221]: time="2025-10-31T00:52:45.837738141Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:45.850294 env[1221]: time="2025-10-31T00:52:45.850218134Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 00:52:45.850711 kubelet[1951]: E1031 00:52:45.850665 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:52:45.850711 kubelet[1951]: E1031 00:52:45.850723 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:52:45.850931 kubelet[1951]: E1031 00:52:45.850888 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dj25l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-7b7f97cd5d-6rgcm_calico-apiserver(12689884-11c3-4d99-b0f3-8d3ed54d0141): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:45.852116 kubelet[1951]: E1031 00:52:45.852070 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" podUID="12689884-11c3-4d99-b0f3-8d3ed54d0141" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.870 [INFO][3867] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.871 [INFO][3867] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" iface="eth0" netns="/var/run/netns/cni-01b0a657-f609-d577-fc15-8749ceff21c1" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.871 [INFO][3867] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" iface="eth0" netns="/var/run/netns/cni-01b0a657-f609-d577-fc15-8749ceff21c1" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.871 [INFO][3867] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" iface="eth0" netns="/var/run/netns/cni-01b0a657-f609-d577-fc15-8749ceff21c1" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.871 [INFO][3867] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.871 [INFO][3867] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.900 [INFO][3876] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" HandleID="k8s-pod-network.516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.900 [INFO][3876] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.900 [INFO][3876] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.913 [WARNING][3876] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" HandleID="k8s-pod-network.516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.913 [INFO][3876] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" HandleID="k8s-pod-network.516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.917 [INFO][3876] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:45.920961 env[1221]: 2025-10-31 00:52:45.919 [INFO][3867] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:52:45.922054 env[1221]: time="2025-10-31T00:52:45.921086005Z" level=info msg="TearDown network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\" successfully" Oct 31 00:52:45.922054 env[1221]: time="2025-10-31T00:52:45.921117206Z" level=info msg="StopPodSandbox for \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\" returns successfully" Oct 31 00:52:45.922054 env[1221]: time="2025-10-31T00:52:45.921753712Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b7f97cd5d-b6qnj,Uid:c8e402bc-f445-4783-b321-f2c849228b0b,Namespace:calico-apiserver,Attempt:1,}" Oct 31 00:52:45.923544 systemd[1]: run-netns-cni\x2d01b0a657\x2df609\x2dd577\x2dfc15\x2d8749ceff21c1.mount: Deactivated successfully. Oct 31 00:52:45.929781 kubelet[1951]: E1031 00:52:45.929680 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" podUID="3bc34509-f978-427a-9bb0-ccd41f4aa6f2" Oct 31 00:52:45.933299 kubelet[1951]: E1031 00:52:45.932654 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" podUID="12689884-11c3-4d99-b0f3-8d3ed54d0141" Oct 31 00:52:45.966000 audit[3898]: NETFILTER_CFG table=filter:117 family=2 entries=20 op=nft_register_rule pid=3898 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:45.966000 audit[3898]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd494eeb0 a2=0 a3=1 items=0 ppid=2062 pid=3898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.966000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:45.972000 audit[3898]: NETFILTER_CFG table=nat:118 family=2 entries=14 op=nft_register_rule pid=3898 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:45.972000 audit[3898]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffd494eeb0 a2=0 a3=1 items=0 ppid=2062 pid=3898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:45.972000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:46.048828 systemd-networkd[1055]: calie5e17720853: Link UP Oct 31 00:52:46.050735 systemd-networkd[1055]: calie5e17720853: Gained carrier Oct 31 00:52:46.051211 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie5e17720853: link becomes ready Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:45.986 [INFO][3885] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0 calico-apiserver-7b7f97cd5d- calico-apiserver c8e402bc-f445-4783-b321-f2c849228b0b 955 0 2025-10-31 00:52:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7b7f97cd5d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7b7f97cd5d-b6qnj eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie5e17720853 [] [] }} ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-b6qnj" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:45.986 [INFO][3885] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-b6qnj" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.009 [INFO][3901] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" HandleID="k8s-pod-network.8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.009 [INFO][3901] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" HandleID="k8s-pod-network.8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c2fd0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7b7f97cd5d-b6qnj", "timestamp":"2025-10-31 00:52:46.009517027 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.009 [INFO][3901] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.009 [INFO][3901] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.009 [INFO][3901] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.019 [INFO][3901] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" host="localhost" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.025 [INFO][3901] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.029 [INFO][3901] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.030 [INFO][3901] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.032 [INFO][3901] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.032 [INFO][3901] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" host="localhost" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.034 [INFO][3901] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2 Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.038 [INFO][3901] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" host="localhost" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.044 [INFO][3901] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" host="localhost" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.044 [INFO][3901] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" host="localhost" Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.044 [INFO][3901] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:46.079935 env[1221]: 2025-10-31 00:52:46.044 [INFO][3901] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" HandleID="k8s-pod-network.8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:46.080563 env[1221]: 2025-10-31 00:52:46.046 [INFO][3885] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-b6qnj" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0", GenerateName:"calico-apiserver-7b7f97cd5d-", Namespace:"calico-apiserver", SelfLink:"", UID:"c8e402bc-f445-4783-b321-f2c849228b0b", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b7f97cd5d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7b7f97cd5d-b6qnj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie5e17720853", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:46.080563 env[1221]: 2025-10-31 00:52:46.046 [INFO][3885] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-b6qnj" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:46.080563 env[1221]: 2025-10-31 00:52:46.046 [INFO][3885] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie5e17720853 ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-b6qnj" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:46.080563 env[1221]: 2025-10-31 00:52:46.051 [INFO][3885] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-b6qnj" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:46.080563 env[1221]: 2025-10-31 00:52:46.051 [INFO][3885] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-b6qnj" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0", GenerateName:"calico-apiserver-7b7f97cd5d-", Namespace:"calico-apiserver", SelfLink:"", UID:"c8e402bc-f445-4783-b321-f2c849228b0b", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b7f97cd5d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2", Pod:"calico-apiserver-7b7f97cd5d-b6qnj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie5e17720853", MAC:"32:ee:ad:95:43:9b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:46.080563 env[1221]: 2025-10-31 00:52:46.078 [INFO][3885] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2" Namespace="calico-apiserver" Pod="calico-apiserver-7b7f97cd5d-b6qnj" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:52:46.096440 env[1221]: time="2025-10-31T00:52:46.096339186Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:46.096440 env[1221]: time="2025-10-31T00:52:46.096400389Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:46.096650 env[1221]: time="2025-10-31T00:52:46.096605237Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:46.096991 env[1221]: time="2025-10-31T00:52:46.096930650Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2 pid=3924 runtime=io.containerd.runc.v2 Oct 31 00:52:46.114926 systemd[1]: Started cri-containerd-8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2.scope. Oct 31 00:52:46.129000 audit[3955]: NETFILTER_CFG table=filter:119 family=2 entries=45 op=nft_register_chain pid=3955 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:46.129000 audit[3955]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24264 a0=3 a1=ffffe35bed80 a2=0 a3=ffffa8abafa8 items=0 ppid=3386 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:46.129000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.133000 audit: BPF prog-id=176 op=LOAD Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3924 pid=3935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:46.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861366335376532393330653438323037316163323831346336336133 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3924 pid=3935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:46.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861366335376532393330653438323037316163323831346336336133 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit: BPF prog-id=177 op=LOAD Oct 31 00:52:46.134000 audit[3935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3924 pid=3935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:46.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861366335376532393330653438323037316163323831346336336133 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit: BPF prog-id=178 op=LOAD Oct 31 00:52:46.134000 audit[3935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3924 pid=3935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:46.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861366335376532393330653438323037316163323831346336336133 Oct 31 00:52:46.134000 audit: BPF prog-id=178 op=UNLOAD Oct 31 00:52:46.134000 audit: BPF prog-id=177 op=UNLOAD Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { perfmon } for pid=3935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit[3935]: AVC avc: denied { bpf } for pid=3935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:46.134000 audit: BPF prog-id=179 op=LOAD Oct 31 00:52:46.134000 audit[3935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3924 pid=3935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:46.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861366335376532393330653438323037316163323831346336336133 Oct 31 00:52:46.136509 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 00:52:46.153543 env[1221]: time="2025-10-31T00:52:46.153503157Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b7f97cd5d-b6qnj,Uid:c8e402bc-f445-4783-b321-f2c849228b0b,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2\"" Oct 31 00:52:46.155091 env[1221]: time="2025-10-31T00:52:46.155061739Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 00:52:46.491310 env[1221]: time="2025-10-31T00:52:46.491162126Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:46.494041 env[1221]: time="2025-10-31T00:52:46.493915396Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 00:52:46.494314 kubelet[1951]: E1031 00:52:46.494253 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:52:46.494314 kubelet[1951]: E1031 00:52:46.494306 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:52:46.494512 kubelet[1951]: E1031 00:52:46.494474 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-z4z4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-7b7f97cd5d-b6qnj_calico-apiserver(c8e402bc-f445-4783-b321-f2c849228b0b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:46.495757 kubelet[1951]: E1031 00:52:46.495708 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" podUID="c8e402bc-f445-4783-b321-f2c849228b0b" Oct 31 00:52:46.673290 systemd-networkd[1055]: calidd5935c707f: Gained IPv6LL Oct 31 00:52:46.782298 env[1221]: time="2025-10-31T00:52:46.782255429Z" level=info msg="StopPodSandbox for \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\"" Oct 31 00:52:46.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.85:22-10.0.0.1:36696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:46.897751 systemd[1]: Started sshd@7-10.0.0.85:22-10.0.0.1:36696.service. Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.838 [INFO][3973] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.838 [INFO][3973] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" iface="eth0" netns="/var/run/netns/cni-940d2b66-61c7-547f-bb72-a9fe8725b585" Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.839 [INFO][3973] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" iface="eth0" netns="/var/run/netns/cni-940d2b66-61c7-547f-bb72-a9fe8725b585" Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.839 [INFO][3973] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" iface="eth0" netns="/var/run/netns/cni-940d2b66-61c7-547f-bb72-a9fe8725b585" Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.839 [INFO][3973] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.839 [INFO][3973] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.875 [INFO][3982] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" HandleID="k8s-pod-network.485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.875 [INFO][3982] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.875 [INFO][3982] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.887 [WARNING][3982] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" HandleID="k8s-pod-network.485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.887 [INFO][3982] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" HandleID="k8s-pod-network.485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.890 [INFO][3982] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:46.898888 env[1221]: 2025-10-31 00:52:46.892 [INFO][3973] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:52:46.899543 env[1221]: time="2025-10-31T00:52:46.899489927Z" level=info msg="TearDown network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\" successfully" Oct 31 00:52:46.899578 env[1221]: time="2025-10-31T00:52:46.899562890Z" level=info msg="StopPodSandbox for \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\" returns successfully" Oct 31 00:52:46.900320 env[1221]: time="2025-10-31T00:52:46.900251677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-d7vjq,Uid:a1446d6d-3b62-4890-8f90-ef3bb45fee6d,Namespace:calico-system,Attempt:1,}" Oct 31 00:52:46.910549 systemd[1]: run-netns-cni\x2d940d2b66\x2d61c7\x2d547f\x2dbb72\x2da9fe8725b585.mount: Deactivated successfully. Oct 31 00:52:46.937253 kubelet[1951]: E1031 00:52:46.936729 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" podUID="12689884-11c3-4d99-b0f3-8d3ed54d0141" Oct 31 00:52:46.937253 kubelet[1951]: E1031 00:52:46.937063 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" podUID="3bc34509-f978-427a-9bb0-ccd41f4aa6f2" Oct 31 00:52:46.943232 kubelet[1951]: E1031 00:52:46.937027 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" podUID="c8e402bc-f445-4783-b321-f2c849228b0b" Oct 31 00:52:46.950000 audit[3991]: USER_ACCT pid=3991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:46.950986 sshd[3991]: Accepted publickey for core from 10.0.0.1 port 36696 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:52:46.952000 audit[3991]: CRED_ACQ pid=3991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:46.952000 audit[3991]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe052ff70 a2=3 a3=1 items=0 ppid=1 pid=3991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:46.952000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:52:46.953361 sshd[3991]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:52:46.959564 systemd-logind[1206]: New session 8 of user core. Oct 31 00:52:46.960206 systemd[1]: Started session-8.scope. Oct 31 00:52:46.965000 audit[3991]: USER_START pid=3991 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:46.967000 audit[4007]: CRED_ACQ pid=4007 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:46.977000 audit[4009]: NETFILTER_CFG table=filter:120 family=2 entries=20 op=nft_register_rule pid=4009 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:46.977000 audit[4009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff81375c0 a2=0 a3=1 items=0 ppid=2062 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:46.977000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:46.983000 audit[4009]: NETFILTER_CFG table=nat:121 family=2 entries=14 op=nft_register_rule pid=4009 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:46.983000 audit[4009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffff81375c0 a2=0 a3=1 items=0 ppid=2062 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:46.983000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:47.050638 systemd-networkd[1055]: cali0715ae90684: Link UP Oct 31 00:52:47.055326 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 31 00:52:47.055456 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0715ae90684: link becomes ready Oct 31 00:52:47.052879 systemd-networkd[1055]: cali0715ae90684: Gained carrier Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:46.970 [INFO][3993] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--d7vjq-eth0 csi-node-driver- calico-system a1446d6d-3b62-4890-8f90-ef3bb45fee6d 998 0 2025-10-31 00:52:25 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-d7vjq eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali0715ae90684 [] [] }} ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Namespace="calico-system" Pod="csi-node-driver-d7vjq" WorkloadEndpoint="localhost-k8s-csi--node--driver--d7vjq-" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:46.970 [INFO][3993] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Namespace="calico-system" Pod="csi-node-driver-d7vjq" WorkloadEndpoint="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.000 [INFO][4011] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" HandleID="k8s-pod-network.dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.000 [INFO][4011] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" HandleID="k8s-pod-network.dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c2130), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-d7vjq", "timestamp":"2025-10-31 00:52:47.000325767 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.000 [INFO][4011] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.000 [INFO][4011] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.000 [INFO][4011] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.010 [INFO][4011] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" host="localhost" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.019 [INFO][4011] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.024 [INFO][4011] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.029 [INFO][4011] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.032 [INFO][4011] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.032 [INFO][4011] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" host="localhost" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.034 [INFO][4011] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9 Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.037 [INFO][4011] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" host="localhost" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.046 [INFO][4011] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" host="localhost" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.046 [INFO][4011] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" host="localhost" Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.046 [INFO][4011] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:47.067724 env[1221]: 2025-10-31 00:52:47.046 [INFO][4011] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" HandleID="k8s-pod-network.dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:47.068453 env[1221]: 2025-10-31 00:52:47.048 [INFO][3993] cni-plugin/k8s.go 418: Populated endpoint ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Namespace="calico-system" Pod="csi-node-driver-d7vjq" WorkloadEndpoint="localhost-k8s-csi--node--driver--d7vjq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--d7vjq-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a1446d6d-3b62-4890-8f90-ef3bb45fee6d", ResourceVersion:"998", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-d7vjq", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0715ae90684", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:47.068453 env[1221]: 2025-10-31 00:52:47.049 [INFO][3993] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Namespace="calico-system" Pod="csi-node-driver-d7vjq" WorkloadEndpoint="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:47.068453 env[1221]: 2025-10-31 00:52:47.049 [INFO][3993] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0715ae90684 ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Namespace="calico-system" Pod="csi-node-driver-d7vjq" WorkloadEndpoint="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:47.068453 env[1221]: 2025-10-31 00:52:47.056 [INFO][3993] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Namespace="calico-system" Pod="csi-node-driver-d7vjq" WorkloadEndpoint="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:47.068453 env[1221]: 2025-10-31 00:52:47.056 [INFO][3993] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Namespace="calico-system" Pod="csi-node-driver-d7vjq" WorkloadEndpoint="localhost-k8s-csi--node--driver--d7vjq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--d7vjq-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a1446d6d-3b62-4890-8f90-ef3bb45fee6d", ResourceVersion:"998", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9", Pod:"csi-node-driver-d7vjq", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0715ae90684", MAC:"42:de:6f:6b:9c:a9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:47.068453 env[1221]: 2025-10-31 00:52:47.065 [INFO][3993] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9" Namespace="calico-system" Pod="csi-node-driver-d7vjq" WorkloadEndpoint="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:52:47.082000 audit[4035]: NETFILTER_CFG table=filter:122 family=2 entries=48 op=nft_register_chain pid=4035 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:47.082000 audit[4035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23140 a0=3 a1=ffffff22d560 a2=0 a3=ffff993d9fa8 items=0 ppid=3386 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:47.082000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:47.086807 env[1221]: time="2025-10-31T00:52:47.086730827Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:47.086807 env[1221]: time="2025-10-31T00:52:47.086778749Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:47.086807 env[1221]: time="2025-10-31T00:52:47.086789909Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:47.087162 env[1221]: time="2025-10-31T00:52:47.086940875Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9 pid=4044 runtime=io.containerd.runc.v2 Oct 31 00:52:47.101608 systemd[1]: Started cri-containerd-dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9.scope. Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit: BPF prog-id=180 op=LOAD Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4044 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:47.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613130356166366261633963616561663362356533633134333465 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4044 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:47.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613130356166366261633963616561663362356533633134333465 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.118000 audit: BPF prog-id=181 op=LOAD Oct 31 00:52:47.118000 audit[4052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4044 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:47.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613130356166366261633963616561663362356533633134333465 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit: BPF prog-id=182 op=LOAD Oct 31 00:52:47.119000 audit[4052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4044 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:47.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613130356166366261633963616561663362356533633134333465 Oct 31 00:52:47.119000 audit: BPF prog-id=182 op=UNLOAD Oct 31 00:52:47.119000 audit: BPF prog-id=181 op=UNLOAD Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:47.119000 audit: BPF prog-id=183 op=LOAD Oct 31 00:52:47.119000 audit[4052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4044 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:47.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613130356166366261633963616561663362356533633134333465 Oct 31 00:52:47.120870 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 00:52:47.133094 env[1221]: time="2025-10-31T00:52:47.133055640Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-d7vjq,Uid:a1446d6d-3b62-4890-8f90-ef3bb45fee6d,Namespace:calico-system,Attempt:1,} returns sandbox id \"dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9\"" Oct 31 00:52:47.136443 env[1221]: time="2025-10-31T00:52:47.136401450Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 31 00:52:47.174795 sshd[3991]: pam_unix(sshd:session): session closed for user core Oct 31 00:52:47.175000 audit[3991]: USER_END pid=3991 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:47.175000 audit[3991]: CRED_DISP pid=3991 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:47.177317 systemd[1]: session-8.scope: Deactivated successfully. Oct 31 00:52:47.178044 systemd-logind[1206]: Session 8 logged out. Waiting for processes to exit. Oct 31 00:52:47.178203 systemd[1]: sshd@7-10.0.0.85:22-10.0.0.1:36696.service: Deactivated successfully. Oct 31 00:52:47.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.85:22-10.0.0.1:36696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:47.179266 systemd-logind[1206]: Removed session 8. Oct 31 00:52:47.185267 systemd-networkd[1055]: cali87f6d984ec4: Gained IPv6LL Oct 31 00:52:47.478146 env[1221]: time="2025-10-31T00:52:47.478002735Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:47.480002 env[1221]: time="2025-10-31T00:52:47.479947051Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 31 00:52:47.484028 kubelet[1951]: E1031 00:52:47.483983 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 00:52:47.484188 kubelet[1951]: E1031 00:52:47.484035 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 00:52:47.484423 kubelet[1951]: E1031 00:52:47.484387 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sgr4h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d7vjq_calico-system(a1446d6d-3b62-4890-8f90-ef3bb45fee6d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:47.486619 env[1221]: time="2025-10-31T00:52:47.486592511Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 31 00:52:47.632349 systemd-networkd[1055]: calie5e17720853: Gained IPv6LL Oct 31 00:52:47.694378 env[1221]: time="2025-10-31T00:52:47.694327279Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:47.696302 env[1221]: time="2025-10-31T00:52:47.696254154Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 31 00:52:47.696628 kubelet[1951]: E1031 00:52:47.696588 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 00:52:47.696707 kubelet[1951]: E1031 00:52:47.696638 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 00:52:47.696790 kubelet[1951]: E1031 00:52:47.696752 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sgr4h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d7vjq_calico-system(a1446d6d-3b62-4890-8f90-ef3bb45fee6d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:47.697988 kubelet[1951]: E1031 00:52:47.697936 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:52:47.783232 env[1221]: time="2025-10-31T00:52:47.783098712Z" level=info msg="StopPodSandbox for \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\"" Oct 31 00:52:47.783825 env[1221]: time="2025-10-31T00:52:47.783786538Z" level=info msg="StopPodSandbox for \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\"" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.854 [INFO][4109] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.854 [INFO][4109] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" iface="eth0" netns="/var/run/netns/cni-de376dc4-c6f8-4923-df36-f62141a3ad0a" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.854 [INFO][4109] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" iface="eth0" netns="/var/run/netns/cni-de376dc4-c6f8-4923-df36-f62141a3ad0a" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.854 [INFO][4109] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" iface="eth0" netns="/var/run/netns/cni-de376dc4-c6f8-4923-df36-f62141a3ad0a" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.854 [INFO][4109] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.854 [INFO][4109] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.885 [INFO][4126] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" HandleID="k8s-pod-network.088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.885 [INFO][4126] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.885 [INFO][4126] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.894 [WARNING][4126] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" HandleID="k8s-pod-network.088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.894 [INFO][4126] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" HandleID="k8s-pod-network.088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.896 [INFO][4126] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:47.905599 env[1221]: 2025-10-31 00:52:47.899 [INFO][4109] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:52:47.905599 env[1221]: time="2025-10-31T00:52:47.903428419Z" level=info msg="TearDown network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\" successfully" Oct 31 00:52:47.905599 env[1221]: time="2025-10-31T00:52:47.903468661Z" level=info msg="StopPodSandbox for \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\" returns successfully" Oct 31 00:52:47.905599 env[1221]: time="2025-10-31T00:52:47.904157848Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-l9hl2,Uid:2473b883-d21a-4d6d-b8b5-718e6f47949b,Namespace:calico-system,Attempt:1,}" Oct 31 00:52:47.911841 systemd[1]: run-netns-cni\x2dde376dc4\x2dc6f8\x2d4923\x2ddf36\x2df62141a3ad0a.mount: Deactivated successfully. Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.842 [INFO][4096] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.843 [INFO][4096] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" iface="eth0" netns="/var/run/netns/cni-c1f329c3-bc81-d334-1552-c8fb93d2de4f" Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.843 [INFO][4096] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" iface="eth0" netns="/var/run/netns/cni-c1f329c3-bc81-d334-1552-c8fb93d2de4f" Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.843 [INFO][4096] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" iface="eth0" netns="/var/run/netns/cni-c1f329c3-bc81-d334-1552-c8fb93d2de4f" Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.843 [INFO][4096] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.843 [INFO][4096] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.903 [INFO][4119] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" HandleID="k8s-pod-network.88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.903 [INFO][4119] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.903 [INFO][4119] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.914 [WARNING][4119] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" HandleID="k8s-pod-network.88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.914 [INFO][4119] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" HandleID="k8s-pod-network.88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.915 [INFO][4119] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:47.921141 env[1221]: 2025-10-31 00:52:47.918 [INFO][4096] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:52:47.923945 env[1221]: time="2025-10-31T00:52:47.923295597Z" level=info msg="TearDown network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\" successfully" Oct 31 00:52:47.923945 env[1221]: time="2025-10-31T00:52:47.923339638Z" level=info msg="StopPodSandbox for \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\" returns successfully" Oct 31 00:52:47.924094 kubelet[1951]: E1031 00:52:47.923635 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:47.924073 systemd[1]: run-netns-cni\x2dc1f329c3\x2dbc81\x2dd334\x2d1552\x2dc8fb93d2de4f.mount: Deactivated successfully. Oct 31 00:52:47.925379 env[1221]: time="2025-10-31T00:52:47.925342597Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-dhzmj,Uid:741bf90a-a512-43fb-bece-a5b3433973d1,Namespace:kube-system,Attempt:1,}" Oct 31 00:52:47.948761 kubelet[1951]: E1031 00:52:47.946322 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" podUID="c8e402bc-f445-4783-b321-f2c849228b0b" Oct 31 00:52:47.948761 kubelet[1951]: E1031 00:52:47.947036 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:52:48.079198 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 31 00:52:48.079335 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaf545ce5fa8: link becomes ready Oct 31 00:52:48.077745 systemd-networkd[1055]: caliaf545ce5fa8: Link UP Oct 31 00:52:48.078882 systemd-networkd[1055]: caliaf545ce5fa8: Gained carrier Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.006 [INFO][4137] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--666569f655--l9hl2-eth0 goldmane-666569f655- calico-system 2473b883-d21a-4d6d-b8b5-718e6f47949b 1026 0 2025-10-31 00:52:22 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-666569f655-l9hl2 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] caliaf545ce5fa8 [] [] }} ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Namespace="calico-system" Pod="goldmane-666569f655-l9hl2" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--l9hl2-" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.006 [INFO][4137] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Namespace="calico-system" Pod="goldmane-666569f655-l9hl2" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.034 [INFO][4169] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" HandleID="k8s-pod-network.a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.034 [INFO][4169] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" HandleID="k8s-pod-network.a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40005a0a60), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-666569f655-l9hl2", "timestamp":"2025-10-31 00:52:48.034276348 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.034 [INFO][4169] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.034 [INFO][4169] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.034 [INFO][4169] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.045 [INFO][4169] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" host="localhost" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.050 [INFO][4169] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.054 [INFO][4169] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.056 [INFO][4169] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.058 [INFO][4169] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.058 [INFO][4169] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" host="localhost" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.061 [INFO][4169] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55 Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.064 [INFO][4169] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" host="localhost" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.070 [INFO][4169] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" host="localhost" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.070 [INFO][4169] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" host="localhost" Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.070 [INFO][4169] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:48.098412 env[1221]: 2025-10-31 00:52:48.070 [INFO][4169] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" HandleID="k8s-pod-network.a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:48.099051 env[1221]: 2025-10-31 00:52:48.073 [INFO][4137] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Namespace="calico-system" Pod="goldmane-666569f655-l9hl2" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--l9hl2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--l9hl2-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"2473b883-d21a-4d6d-b8b5-718e6f47949b", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-666569f655-l9hl2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliaf545ce5fa8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:48.099051 env[1221]: 2025-10-31 00:52:48.073 [INFO][4137] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Namespace="calico-system" Pod="goldmane-666569f655-l9hl2" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:48.099051 env[1221]: 2025-10-31 00:52:48.073 [INFO][4137] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliaf545ce5fa8 ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Namespace="calico-system" Pod="goldmane-666569f655-l9hl2" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:48.099051 env[1221]: 2025-10-31 00:52:48.082 [INFO][4137] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Namespace="calico-system" Pod="goldmane-666569f655-l9hl2" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:48.099051 env[1221]: 2025-10-31 00:52:48.082 [INFO][4137] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Namespace="calico-system" Pod="goldmane-666569f655-l9hl2" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--l9hl2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--l9hl2-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"2473b883-d21a-4d6d-b8b5-718e6f47949b", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55", Pod:"goldmane-666569f655-l9hl2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliaf545ce5fa8", MAC:"52:0c:bb:f9:e7:7c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:48.099051 env[1221]: 2025-10-31 00:52:48.095 [INFO][4137] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55" Namespace="calico-system" Pod="goldmane-666569f655-l9hl2" WorkloadEndpoint="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:52:48.106000 audit[4194]: NETFILTER_CFG table=filter:123 family=2 entries=60 op=nft_register_chain pid=4194 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:48.106000 audit[4194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29932 a0=3 a1=fffff36fc770 a2=0 a3=ffffb286dfa8 items=0 ppid=3386 pid=4194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.106000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:48.113981 env[1221]: time="2025-10-31T00:52:48.113905513Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:48.113981 env[1221]: time="2025-10-31T00:52:48.113951635Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:48.114186 env[1221]: time="2025-10-31T00:52:48.113962315Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:48.114487 env[1221]: time="2025-10-31T00:52:48.114442574Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55 pid=4202 runtime=io.containerd.runc.v2 Oct 31 00:52:48.124798 systemd[1]: Started cri-containerd-a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55.scope. Oct 31 00:52:48.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.143000 audit: BPF prog-id=184 op=LOAD Oct 31 00:52:48.143000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.143000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4202 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131323832393162613138623064376639353664353033303232656261 Oct 31 00:52:48.143000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.143000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4202 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131323832393162613138623064376639353664353033303232656261 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.144000 audit: BPF prog-id=185 op=LOAD Oct 31 00:52:48.144000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4202 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131323832393162613138623064376639353664353033303232656261 Oct 31 00:52:48.146000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.146000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.146000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.146000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.146000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.146000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.146000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.146000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.146000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.146000 audit: BPF prog-id=186 op=LOAD Oct 31 00:52:48.146000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4202 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131323832393162613138623064376639353664353033303232656261 Oct 31 00:52:48.147000 audit: BPF prog-id=186 op=UNLOAD Oct 31 00:52:48.147000 audit: BPF prog-id=185 op=UNLOAD Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.147000 audit: BPF prog-id=187 op=LOAD Oct 31 00:52:48.147000 audit[4210]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4202 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131323832393162613138623064376639353664353033303232656261 Oct 31 00:52:48.149293 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 00:52:48.171370 env[1221]: time="2025-10-31T00:52:48.171326229Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-l9hl2,Uid:2473b883-d21a-4d6d-b8b5-718e6f47949b,Namespace:calico-system,Attempt:1,} returns sandbox id \"a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55\"" Oct 31 00:52:48.175124 env[1221]: time="2025-10-31T00:52:48.175076812Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 31 00:52:48.189078 systemd-networkd[1055]: cali67dfed34f6c: Link UP Oct 31 00:52:48.191565 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali67dfed34f6c: link becomes ready Oct 31 00:52:48.190207 systemd-networkd[1055]: cali67dfed34f6c: Gained carrier Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.008 [INFO][4149] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0 coredns-668d6bf9bc- kube-system 741bf90a-a512-43fb-bece-a5b3433973d1 1025 0 2025-10-31 00:52:09 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-dhzmj eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali67dfed34f6c [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Namespace="kube-system" Pod="coredns-668d6bf9bc-dhzmj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dhzmj-" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.009 [INFO][4149] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Namespace="kube-system" Pod="coredns-668d6bf9bc-dhzmj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.034 [INFO][4167] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" HandleID="k8s-pod-network.c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.034 [INFO][4167] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" HandleID="k8s-pod-network.c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004cea0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-dhzmj", "timestamp":"2025-10-31 00:52:48.034358631 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.034 [INFO][4167] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.072 [INFO][4167] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.072 [INFO][4167] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.146 [INFO][4167] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" host="localhost" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.154 [INFO][4167] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.161 [INFO][4167] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.163 [INFO][4167] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.165 [INFO][4167] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.165 [INFO][4167] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" host="localhost" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.167 [INFO][4167] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337 Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.173 [INFO][4167] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" host="localhost" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.179 [INFO][4167] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" host="localhost" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.179 [INFO][4167] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" host="localhost" Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.179 [INFO][4167] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:48.207401 env[1221]: 2025-10-31 00:52:48.179 [INFO][4167] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" HandleID="k8s-pod-network.c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:48.208290 env[1221]: 2025-10-31 00:52:48.182 [INFO][4149] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Namespace="kube-system" Pod="coredns-668d6bf9bc-dhzmj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"741bf90a-a512-43fb-bece-a5b3433973d1", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-dhzmj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali67dfed34f6c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:48.208290 env[1221]: 2025-10-31 00:52:48.183 [INFO][4149] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Namespace="kube-system" Pod="coredns-668d6bf9bc-dhzmj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:48.208290 env[1221]: 2025-10-31 00:52:48.183 [INFO][4149] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali67dfed34f6c ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Namespace="kube-system" Pod="coredns-668d6bf9bc-dhzmj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:48.208290 env[1221]: 2025-10-31 00:52:48.191 [INFO][4149] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Namespace="kube-system" Pod="coredns-668d6bf9bc-dhzmj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:48.208290 env[1221]: 2025-10-31 00:52:48.192 [INFO][4149] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Namespace="kube-system" Pod="coredns-668d6bf9bc-dhzmj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"741bf90a-a512-43fb-bece-a5b3433973d1", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337", Pod:"coredns-668d6bf9bc-dhzmj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali67dfed34f6c", MAC:"f2:66:8c:40:2c:d2", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:48.208290 env[1221]: 2025-10-31 00:52:48.203 [INFO][4149] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337" Namespace="kube-system" Pod="coredns-668d6bf9bc-dhzmj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:52:48.217567 env[1221]: time="2025-10-31T00:52:48.217496594Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:48.217567 env[1221]: time="2025-10-31T00:52:48.217543756Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:48.217567 env[1221]: time="2025-10-31T00:52:48.217560477Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:48.217733 env[1221]: time="2025-10-31T00:52:48.217668481Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337 pid=4253 runtime=io.containerd.runc.v2 Oct 31 00:52:48.219000 audit[4256]: NETFILTER_CFG table=filter:124 family=2 entries=62 op=nft_register_chain pid=4256 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:48.219000 audit[4256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28492 a0=3 a1=ffffcf20b2f0 a2=0 a3=ffff958d2fa8 items=0 ppid=3386 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.219000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:48.229163 systemd[1]: Started cri-containerd-c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337.scope. Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.247000 audit: BPF prog-id=188 op=LOAD Oct 31 00:52:48.248000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.248000 audit[4264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4253 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335336661373439666538323835316663653162363762666131353037 Oct 31 00:52:48.248000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.248000 audit[4264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4253 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335336661373439666538323835316663653162363762666131353037 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit: BPF prog-id=189 op=LOAD Oct 31 00:52:48.249000 audit[4264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4253 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335336661373439666538323835316663653162363762666131353037 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.249000 audit: BPF prog-id=190 op=LOAD Oct 31 00:52:48.249000 audit[4264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4253 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335336661373439666538323835316663653162363762666131353037 Oct 31 00:52:48.250000 audit: BPF prog-id=190 op=UNLOAD Oct 31 00:52:48.250000 audit: BPF prog-id=189 op=UNLOAD Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.250000 audit: BPF prog-id=191 op=LOAD Oct 31 00:52:48.250000 audit[4264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4253 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335336661373439666538323835316663653162363762666131353037 Oct 31 00:52:48.252032 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 00:52:48.269712 env[1221]: time="2025-10-31T00:52:48.269666869Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-dhzmj,Uid:741bf90a-a512-43fb-bece-a5b3433973d1,Namespace:kube-system,Attempt:1,} returns sandbox id \"c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337\"" Oct 31 00:52:48.270999 kubelet[1951]: E1031 00:52:48.270638 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:48.275583 env[1221]: time="2025-10-31T00:52:48.275544254Z" level=info msg="CreateContainer within sandbox \"c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 31 00:52:48.292299 env[1221]: time="2025-10-31T00:52:48.292252733Z" level=info msg="CreateContainer within sandbox \"c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"6bc0ca9691161eafc22c616496ffca3406e5941173f9cc4fca827abb4e6fc342\"" Oct 31 00:52:48.293188 env[1221]: time="2025-10-31T00:52:48.292944439Z" level=info msg="StartContainer for \"6bc0ca9691161eafc22c616496ffca3406e5941173f9cc4fca827abb4e6fc342\"" Oct 31 00:52:48.307859 systemd[1]: Started cri-containerd-6bc0ca9691161eafc22c616496ffca3406e5941173f9cc4fca827abb4e6fc342.scope. Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit: BPF prog-id=192 op=LOAD Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4253 pid=4295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633063613936393131363165616663323263363136343936666663 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4253 pid=4295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633063613936393131363165616663323263363136343936666663 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit: BPF prog-id=193 op=LOAD Oct 31 00:52:48.330000 audit[4295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4253 pid=4295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633063613936393131363165616663323263363136343936666663 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.330000 audit: BPF prog-id=194 op=LOAD Oct 31 00:52:48.330000 audit[4295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4253 pid=4295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633063613936393131363165616663323263363136343936666663 Oct 31 00:52:48.331000 audit: BPF prog-id=194 op=UNLOAD Oct 31 00:52:48.331000 audit: BPF prog-id=193 op=UNLOAD Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { perfmon } for pid=4295 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit[4295]: AVC avc: denied { bpf } for pid=4295 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:48.331000 audit: BPF prog-id=195 op=LOAD Oct 31 00:52:48.331000 audit[4295]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4253 pid=4295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633063613936393131363165616663323263363136343936666663 Oct 31 00:52:48.348581 env[1221]: time="2025-10-31T00:52:48.348493723Z" level=info msg="StartContainer for \"6bc0ca9691161eafc22c616496ffca3406e5941173f9cc4fca827abb4e6fc342\" returns successfully" Oct 31 00:52:48.404000 audit[4306]: AVC avc: denied { getattr } for pid=4306 comm="coredns" path="cgroup:[4026532213]" dev="nsfs" ino=4026532213 scontext=system_u:system_r:svirt_lxc_net_t:s0:c272,c895 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Oct 31 00:52:48.404000 audit[4306]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056828 a2=4000156578 a3=0 items=0 ppid=4253 pid=4306 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c272,c895 key=(null) Oct 31 00:52:48.404000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Oct 31 00:52:48.528330 systemd-networkd[1055]: cali0715ae90684: Gained IPv6LL Oct 31 00:52:48.599546 env[1221]: time="2025-10-31T00:52:48.599414158Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:48.607171 env[1221]: time="2025-10-31T00:52:48.607090452Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 31 00:52:48.607482 kubelet[1951]: E1031 00:52:48.607423 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 00:52:48.607656 kubelet[1951]: E1031 00:52:48.607487 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 00:52:48.607656 kubelet[1951]: E1031 00:52:48.607614 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wbnq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-l9hl2_calico-system(2473b883-d21a-4d6d-b8b5-718e6f47949b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:48.609570 kubelet[1951]: E1031 00:52:48.608788 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-l9hl2" podUID="2473b883-d21a-4d6d-b8b5-718e6f47949b" Oct 31 00:52:48.783747 env[1221]: time="2025-10-31T00:52:48.783708925Z" level=info msg="StopPodSandbox for \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\"" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.837 [INFO][4340] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.837 [INFO][4340] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" iface="eth0" netns="/var/run/netns/cni-42f5c7b7-be86-534d-25d0-c96638f85d21" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.838 [INFO][4340] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" iface="eth0" netns="/var/run/netns/cni-42f5c7b7-be86-534d-25d0-c96638f85d21" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.838 [INFO][4340] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" iface="eth0" netns="/var/run/netns/cni-42f5c7b7-be86-534d-25d0-c96638f85d21" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.838 [INFO][4340] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.838 [INFO][4340] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.868 [INFO][4350] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" HandleID="k8s-pod-network.b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.869 [INFO][4350] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.869 [INFO][4350] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.879 [WARNING][4350] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" HandleID="k8s-pod-network.b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.879 [INFO][4350] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" HandleID="k8s-pod-network.b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.881 [INFO][4350] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:48.885411 env[1221]: 2025-10-31 00:52:48.883 [INFO][4340] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:52:48.886169 env[1221]: time="2025-10-31T00:52:48.886109761Z" level=info msg="TearDown network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\" successfully" Oct 31 00:52:48.886270 env[1221]: time="2025-10-31T00:52:48.886248566Z" level=info msg="StopPodSandbox for \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\" returns successfully" Oct 31 00:52:48.886654 kubelet[1951]: E1031 00:52:48.886618 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:48.888107 env[1221]: time="2025-10-31T00:52:48.887352969Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-47vlh,Uid:45299de2-b3de-400b-8c19-f8a3dd1abc5a,Namespace:kube-system,Attempt:1,}" Oct 31 00:52:48.918808 systemd[1]: run-netns-cni\x2d42f5c7b7\x2dbe86\x2d534d\x2d25d0\x2dc96638f85d21.mount: Deactivated successfully. Oct 31 00:52:48.949633 kubelet[1951]: E1031 00:52:48.949587 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-l9hl2" podUID="2473b883-d21a-4d6d-b8b5-718e6f47949b" Oct 31 00:52:48.957417 kubelet[1951]: E1031 00:52:48.957380 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:48.960781 kubelet[1951]: E1031 00:52:48.960729 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:52:48.971000 audit[4382]: NETFILTER_CFG table=filter:125 family=2 entries=20 op=nft_register_rule pid=4382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:48.971000 audit[4382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffda4e4a30 a2=0 a3=1 items=0 ppid=2062 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.971000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:48.977000 audit[4382]: NETFILTER_CFG table=nat:126 family=2 entries=14 op=nft_register_rule pid=4382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:48.977000 audit[4382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffda4e4a30 a2=0 a3=1 items=0 ppid=2062 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:48.977000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:49.004000 audit[4385]: NETFILTER_CFG table=filter:127 family=2 entries=17 op=nft_register_rule pid=4385 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:49.004000 audit[4385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffdeac6920 a2=0 a3=1 items=0 ppid=2062 pid=4385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.004000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:49.010000 audit[4385]: NETFILTER_CFG table=nat:128 family=2 entries=35 op=nft_register_chain pid=4385 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:49.010000 audit[4385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffdeac6920 a2=0 a3=1 items=0 ppid=2062 pid=4385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.010000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:49.040473 systemd-networkd[1055]: cali28a92a2a204: Link UP Oct 31 00:52:49.042563 systemd-networkd[1055]: cali28a92a2a204: Gained carrier Oct 31 00:52:49.043211 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali28a92a2a204: link becomes ready Oct 31 00:52:49.050305 kubelet[1951]: I1031 00:52:49.050229 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-dhzmj" podStartSLOduration=40.050210995 podStartE2EDuration="40.050210995s" podCreationTimestamp="2025-10-31 00:52:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 00:52:48.990380148 +0000 UTC m=+45.315772172" watchObservedRunningTime="2025-10-31 00:52:49.050210995 +0000 UTC m=+45.375603019" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:48.937 [INFO][4358] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--47vlh-eth0 coredns-668d6bf9bc- kube-system 45299de2-b3de-400b-8c19-f8a3dd1abc5a 1059 0 2025-10-31 00:52:09 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-47vlh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali28a92a2a204 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Namespace="kube-system" Pod="coredns-668d6bf9bc-47vlh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--47vlh-" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:48.937 [INFO][4358] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Namespace="kube-system" Pod="coredns-668d6bf9bc-47vlh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:48.984 [INFO][4375] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" HandleID="k8s-pod-network.c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:48.984 [INFO][4375] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" HandleID="k8s-pod-network.c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001376e0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-47vlh", "timestamp":"2025-10-31 00:52:48.984108228 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:48.984 [INFO][4375] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:48.984 [INFO][4375] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:48.984 [INFO][4375] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:48.997 [INFO][4375] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" host="localhost" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.007 [INFO][4375] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.013 [INFO][4375] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.016 [INFO][4375] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.018 [INFO][4375] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.018 [INFO][4375] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" host="localhost" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.020 [INFO][4375] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2 Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.025 [INFO][4375] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" host="localhost" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.033 [INFO][4375] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" host="localhost" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.033 [INFO][4375] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" host="localhost" Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.033 [INFO][4375] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:52:49.052943 env[1221]: 2025-10-31 00:52:49.034 [INFO][4375] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" HandleID="k8s-pod-network.c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:49.053733 env[1221]: 2025-10-31 00:52:49.036 [INFO][4358] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Namespace="kube-system" Pod="coredns-668d6bf9bc-47vlh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--47vlh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"45299de2-b3de-400b-8c19-f8a3dd1abc5a", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-47vlh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali28a92a2a204", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:49.053733 env[1221]: 2025-10-31 00:52:49.036 [INFO][4358] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Namespace="kube-system" Pod="coredns-668d6bf9bc-47vlh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:49.053733 env[1221]: 2025-10-31 00:52:49.036 [INFO][4358] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali28a92a2a204 ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Namespace="kube-system" Pod="coredns-668d6bf9bc-47vlh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:49.053733 env[1221]: 2025-10-31 00:52:49.040 [INFO][4358] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Namespace="kube-system" Pod="coredns-668d6bf9bc-47vlh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:49.053733 env[1221]: 2025-10-31 00:52:49.040 [INFO][4358] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Namespace="kube-system" Pod="coredns-668d6bf9bc-47vlh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--47vlh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"45299de2-b3de-400b-8c19-f8a3dd1abc5a", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2", Pod:"coredns-668d6bf9bc-47vlh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali28a92a2a204", MAC:"fe:b7:9c:5c:3c:89", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:52:49.053733 env[1221]: 2025-10-31 00:52:49.050 [INFO][4358] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2" Namespace="kube-system" Pod="coredns-668d6bf9bc-47vlh" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:52:49.067687 env[1221]: time="2025-10-31T00:52:49.067476321Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 31 00:52:49.067687 env[1221]: time="2025-10-31T00:52:49.067527203Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 31 00:52:49.067687 env[1221]: time="2025-10-31T00:52:49.067537843Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 31 00:52:49.067903 env[1221]: time="2025-10-31T00:52:49.067706330Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2 pid=4403 runtime=io.containerd.runc.v2 Oct 31 00:52:49.071000 audit[4408]: NETFILTER_CFG table=filter:129 family=2 entries=56 op=nft_register_chain pid=4408 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 31 00:52:49.071000 audit[4408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25096 a0=3 a1=ffffee14e200 a2=0 a3=ffff9f117fa8 items=0 ppid=3386 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.071000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 31 00:52:49.084177 systemd[1]: Started cri-containerd-c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2.scope. Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.096000 audit: BPF prog-id=196 op=LOAD Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338393163396666376262663162343133356532323834353335633764 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338393163396666376262663162343133356532323834353335633764 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit: BPF prog-id=197 op=LOAD Oct 31 00:52:49.097000 audit[4412]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338393163396666376262663162343133356532323834353335633764 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit: BPF prog-id=198 op=LOAD Oct 31 00:52:49.097000 audit[4412]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338393163396666376262663162343133356532323834353335633764 Oct 31 00:52:49.097000 audit: BPF prog-id=198 op=UNLOAD Oct 31 00:52:49.097000 audit: BPF prog-id=197 op=UNLOAD Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { perfmon } for pid=4412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit[4412]: AVC avc: denied { bpf } for pid=4412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.097000 audit: BPF prog-id=199 op=LOAD Oct 31 00:52:49.097000 audit[4412]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4403 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338393163396666376262663162343133356532323834353335633764 Oct 31 00:52:49.099256 systemd-resolved[1158]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Oct 31 00:52:49.104231 systemd-networkd[1055]: caliaf545ce5fa8: Gained IPv6LL Oct 31 00:52:49.117924 env[1221]: time="2025-10-31T00:52:49.117881847Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-47vlh,Uid:45299de2-b3de-400b-8c19-f8a3dd1abc5a,Namespace:kube-system,Attempt:1,} returns sandbox id \"c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2\"" Oct 31 00:52:49.118704 kubelet[1951]: E1031 00:52:49.118684 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:49.120883 env[1221]: time="2025-10-31T00:52:49.120847318Z" level=info msg="CreateContainer within sandbox \"c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 31 00:52:49.136765 env[1221]: time="2025-10-31T00:52:49.136665549Z" level=info msg="CreateContainer within sandbox \"c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"96491ed1e7a5ddb73fd0f571aa2f965e1ce44c638a9ab6485470f2771bed56f1\"" Oct 31 00:52:49.138968 env[1221]: time="2025-10-31T00:52:49.138938354Z" level=info msg="StartContainer for \"96491ed1e7a5ddb73fd0f571aa2f965e1ce44c638a9ab6485470f2771bed56f1\"" Oct 31 00:52:49.154750 systemd[1]: Started cri-containerd-96491ed1e7a5ddb73fd0f571aa2f965e1ce44c638a9ab6485470f2771bed56f1.scope. Oct 31 00:52:49.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit: BPF prog-id=200 op=LOAD Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4403 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343931656431653761356464623733666430663537316161326639 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4403 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343931656431653761356464623733666430663537316161326639 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.172000 audit: BPF prog-id=201 op=LOAD Oct 31 00:52:49.172000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4403 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343931656431653761356464623733666430663537316161326639 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit: BPF prog-id=202 op=LOAD Oct 31 00:52:49.174000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4403 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343931656431653761356464623733666430663537316161326639 Oct 31 00:52:49.174000 audit: BPF prog-id=202 op=UNLOAD Oct 31 00:52:49.174000 audit: BPF prog-id=201 op=UNLOAD Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 31 00:52:49.174000 audit: BPF prog-id=203 op=LOAD Oct 31 00:52:49.174000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4403 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343931656431653761356464623733666430663537316161326639 Oct 31 00:52:49.191431 env[1221]: time="2025-10-31T00:52:49.190872617Z" level=info msg="StartContainer for \"96491ed1e7a5ddb73fd0f571aa2f965e1ce44c638a9ab6485470f2771bed56f1\" returns successfully" Oct 31 00:52:49.200000 audit[4455]: AVC avc: denied { getattr } for pid=4455 comm="coredns" path="cgroup:[4026532261]" dev="nsfs" ino=4026532261 scontext=system_u:system_r:svirt_lxc_net_t:s0:c357,c606 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Oct 31 00:52:49.200000 audit[4455]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40000567b0 a2=40001ce578 a3=0 items=0 ppid=4403 pid=4455 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c357,c606 key=(null) Oct 31 00:52:49.200000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Oct 31 00:52:49.552272 systemd-networkd[1055]: cali67dfed34f6c: Gained IPv6LL Oct 31 00:52:49.912353 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3958334548.mount: Deactivated successfully. Oct 31 00:52:49.958007 kubelet[1951]: E1031 00:52:49.956584 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:49.958007 kubelet[1951]: E1031 00:52:49.956781 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:49.958007 kubelet[1951]: E1031 00:52:49.957150 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-l9hl2" podUID="2473b883-d21a-4d6d-b8b5-718e6f47949b" Oct 31 00:52:49.994164 kubelet[1951]: I1031 00:52:49.994084 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-47vlh" podStartSLOduration=40.994067984 podStartE2EDuration="40.994067984s" podCreationTimestamp="2025-10-31 00:52:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-10-31 00:52:49.973004716 +0000 UTC m=+46.298396740" watchObservedRunningTime="2025-10-31 00:52:49.994067984 +0000 UTC m=+46.319460008" Oct 31 00:52:49.997000 audit[4478]: NETFILTER_CFG table=filter:130 family=2 entries=14 op=nft_register_rule pid=4478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:49.997000 audit[4478]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffffbeafcf0 a2=0 a3=1 items=0 ppid=2062 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:49.997000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:50.009000 audit[4478]: NETFILTER_CFG table=nat:131 family=2 entries=44 op=nft_register_rule pid=4478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:50.009000 audit[4478]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=fffffbeafcf0 a2=0 a3=1 items=0 ppid=2062 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:50.009000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:50.959542 kubelet[1951]: E1031 00:52:50.959501 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:50.959875 kubelet[1951]: E1031 00:52:50.959635 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:50.992000 audit[4486]: NETFILTER_CFG table=filter:132 family=2 entries=14 op=nft_register_rule pid=4486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:50.995966 kernel: kauditd_printk_skb: 571 callbacks suppressed Oct 31 00:52:50.996030 kernel: audit: type=1325 audit(1761871970.992:1346): table=filter:132 family=2 entries=14 op=nft_register_rule pid=4486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:50.996070 kernel: audit: type=1300 audit(1761871970.992:1346): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff9bbd360 a2=0 a3=1 items=0 ppid=2062 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:50.992000 audit[4486]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff9bbd360 a2=0 a3=1 items=0 ppid=2062 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:50.992000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:51.001747 kernel: audit: type=1327 audit(1761871970.992:1346): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:51.013000 audit[4486]: NETFILTER_CFG table=nat:133 family=2 entries=56 op=nft_register_chain pid=4486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:51.013000 audit[4486]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=fffff9bbd360 a2=0 a3=1 items=0 ppid=2062 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:51.020439 kernel: audit: type=1325 audit(1761871971.013:1347): table=nat:133 family=2 entries=56 op=nft_register_chain pid=4486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:52:51.020514 kernel: audit: type=1300 audit(1761871971.013:1347): arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=fffff9bbd360 a2=0 a3=1 items=0 ppid=2062 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:51.020548 kernel: audit: type=1327 audit(1761871971.013:1347): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:51.013000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:52:51.025276 systemd-networkd[1055]: cali28a92a2a204: Gained IPv6LL Oct 31 00:52:51.962517 kubelet[1951]: E1031 00:52:51.962146 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:52.179531 systemd[1]: Started sshd@8-10.0.0.85:22-10.0.0.1:46492.service. Oct 31 00:52:52.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.85:22-10.0.0.1:46492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:52.183142 kernel: audit: type=1130 audit(1761871972.178:1348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.85:22-10.0.0.1:46492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:52.226000 audit[4489]: USER_ACCT pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:52.230523 sshd[4489]: Accepted publickey for core from 10.0.0.1 port 46492 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:52:52.231163 kernel: audit: type=1101 audit(1761871972.226:1349): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:52.230000 audit[4489]: CRED_ACQ pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:52.232956 sshd[4489]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:52:52.236137 kernel: audit: type=1103 audit(1761871972.230:1350): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:52.236185 kernel: audit: type=1006 audit(1761871972.232:1351): pid=4489 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 31 00:52:52.232000 audit[4489]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf614240 a2=3 a3=1 items=0 ppid=1 pid=4489 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:52.232000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:52:52.238909 systemd-logind[1206]: New session 9 of user core. Oct 31 00:52:52.239846 systemd[1]: Started session-9.scope. Oct 31 00:52:52.242000 audit[4489]: USER_START pid=4489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:52.243000 audit[4491]: CRED_ACQ pid=4491 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:52.433637 sshd[4489]: pam_unix(sshd:session): session closed for user core Oct 31 00:52:52.433000 audit[4489]: USER_END pid=4489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:52.433000 audit[4489]: CRED_DISP pid=4489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:52.435902 systemd[1]: session-9.scope: Deactivated successfully. Oct 31 00:52:52.436479 systemd-logind[1206]: Session 9 logged out. Waiting for processes to exit. Oct 31 00:52:52.436643 systemd[1]: sshd@8-10.0.0.85:22-10.0.0.1:46492.service: Deactivated successfully. Oct 31 00:52:52.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.85:22-10.0.0.1:46492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:52.437631 systemd-logind[1206]: Removed session 9. Oct 31 00:52:52.964447 kubelet[1951]: E1031 00:52:52.964415 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:52:55.783641 env[1221]: time="2025-10-31T00:52:55.783404486Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 31 00:52:56.124389 env[1221]: time="2025-10-31T00:52:56.124269530Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:56.125742 env[1221]: time="2025-10-31T00:52:56.125688377Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 31 00:52:56.125955 kubelet[1951]: E1031 00:52:56.125917 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 00:52:56.126200 kubelet[1951]: E1031 00:52:56.125964 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 00:52:56.126438 kubelet[1951]: E1031 00:52:56.126082 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:8198d7d63758426fa7625a9bf0338b75,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-k9mnf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6795c95d78-ss2p9_calico-system(a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:56.129848 env[1221]: time="2025-10-31T00:52:56.129811112Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 31 00:52:56.463134 env[1221]: time="2025-10-31T00:52:56.462928107Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:56.464388 env[1221]: time="2025-10-31T00:52:56.464342033Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 31 00:52:56.464599 kubelet[1951]: E1031 00:52:56.464568 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 00:52:56.464658 kubelet[1951]: E1031 00:52:56.464613 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 00:52:56.464785 kubelet[1951]: E1031 00:52:56.464747 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k9mnf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6795c95d78-ss2p9_calico-system(a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:56.466204 kubelet[1951]: E1031 00:52:56.466167 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6795c95d78-ss2p9" podUID="a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94" Oct 31 00:52:57.444044 systemd[1]: Started sshd@9-10.0.0.85:22-10.0.0.1:46530.service. Oct 31 00:52:57.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.85:22-10.0.0.1:46530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:57.446633 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 31 00:52:57.446709 kernel: audit: type=1130 audit(1761871977.443:1357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.85:22-10.0.0.1:46530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:57.489000 audit[4506]: USER_ACCT pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.490545 sshd[4506]: Accepted publickey for core from 10.0.0.1 port 46530 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:52:57.492818 sshd[4506]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:52:57.491000 audit[4506]: CRED_ACQ pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.496494 kernel: audit: type=1101 audit(1761871977.489:1358): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.496573 kernel: audit: type=1103 audit(1761871977.491:1359): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.496601 kernel: audit: type=1006 audit(1761871977.491:1360): pid=4506 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 31 00:52:57.497049 systemd-logind[1206]: New session 10 of user core. Oct 31 00:52:57.497333 kernel: audit: type=1300 audit(1761871977.491:1360): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1dd17d0 a2=3 a3=1 items=0 ppid=1 pid=4506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:57.491000 audit[4506]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1dd17d0 a2=3 a3=1 items=0 ppid=1 pid=4506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:57.498079 systemd[1]: Started session-10.scope. Oct 31 00:52:57.500179 kernel: audit: type=1327 audit(1761871977.491:1360): proctitle=737368643A20636F7265205B707269765D Oct 31 00:52:57.491000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:52:57.503000 audit[4506]: USER_START pid=4506 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.504000 audit[4508]: CRED_ACQ pid=4508 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.510014 kernel: audit: type=1105 audit(1761871977.503:1361): pid=4506 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.510082 kernel: audit: type=1103 audit(1761871977.504:1362): pid=4508 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.650419 sshd[4506]: pam_unix(sshd:session): session closed for user core Oct 31 00:52:57.654140 systemd[1]: Started sshd@10-10.0.0.85:22-10.0.0.1:46544.service. Oct 31 00:52:57.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.85:22-10.0.0.1:46544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:57.659186 kernel: audit: type=1130 audit(1761871977.653:1363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.85:22-10.0.0.1:46544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:57.661000 audit[4506]: USER_END pid=4506 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.663000 audit[4506]: CRED_DISP pid=4506 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.670200 kernel: audit: type=1106 audit(1761871977.661:1364): pid=4506 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.85:22-10.0.0.1:46530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:57.668788 systemd[1]: sshd@9-10.0.0.85:22-10.0.0.1:46530.service: Deactivated successfully. Oct 31 00:52:57.669655 systemd[1]: session-10.scope: Deactivated successfully. Oct 31 00:52:57.670909 systemd-logind[1206]: Session 10 logged out. Waiting for processes to exit. Oct 31 00:52:57.672019 systemd-logind[1206]: Removed session 10. Oct 31 00:52:57.700000 audit[4519]: USER_ACCT pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.701686 sshd[4519]: Accepted publickey for core from 10.0.0.1 port 46544 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:52:57.703000 audit[4519]: CRED_ACQ pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.704000 audit[4519]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7d99900 a2=3 a3=1 items=0 ppid=1 pid=4519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:57.704000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:52:57.705505 sshd[4519]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:52:57.710728 systemd[1]: Started session-11.scope. Oct 31 00:52:57.711235 systemd-logind[1206]: New session 11 of user core. Oct 31 00:52:57.716000 audit[4519]: USER_START pid=4519 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.718000 audit[4522]: CRED_ACQ pid=4522 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.890395 sshd[4519]: pam_unix(sshd:session): session closed for user core Oct 31 00:52:57.895559 systemd[1]: Started sshd@11-10.0.0.85:22-10.0.0.1:46560.service. Oct 31 00:52:57.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.85:22-10.0.0.1:46560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:57.895000 audit[4519]: USER_END pid=4519 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.898000 audit[4519]: CRED_DISP pid=4519 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.905336 systemd-logind[1206]: Session 11 logged out. Waiting for processes to exit. Oct 31 00:52:57.910225 systemd[1]: sshd@10-10.0.0.85:22-10.0.0.1:46544.service: Deactivated successfully. Oct 31 00:52:57.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.85:22-10.0.0.1:46544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:57.911123 systemd[1]: session-11.scope: Deactivated successfully. Oct 31 00:52:57.912947 systemd-logind[1206]: Removed session 11. Oct 31 00:52:57.939000 audit[4531]: USER_ACCT pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.940539 sshd[4531]: Accepted publickey for core from 10.0.0.1 port 46560 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:52:57.940000 audit[4531]: CRED_ACQ pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.940000 audit[4531]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1dcf9c0 a2=3 a3=1 items=0 ppid=1 pid=4531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:52:57.940000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:52:57.941996 sshd[4531]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:52:57.946064 systemd-logind[1206]: New session 12 of user core. Oct 31 00:52:57.946442 systemd[1]: Started session-12.scope. Oct 31 00:52:57.951000 audit[4531]: USER_START pid=4531 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:57.953000 audit[4534]: CRED_ACQ pid=4534 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:58.080304 sshd[4531]: pam_unix(sshd:session): session closed for user core Oct 31 00:52:58.080000 audit[4531]: USER_END pid=4531 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:58.080000 audit[4531]: CRED_DISP pid=4531 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:52:58.083088 systemd-logind[1206]: Session 12 logged out. Waiting for processes to exit. Oct 31 00:52:58.083429 systemd[1]: sshd@11-10.0.0.85:22-10.0.0.1:46560.service: Deactivated successfully. Oct 31 00:52:58.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.85:22-10.0.0.1:46560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:52:58.084183 systemd[1]: session-12.scope: Deactivated successfully. Oct 31 00:52:58.084797 systemd-logind[1206]: Removed session 12. Oct 31 00:52:58.783387 env[1221]: time="2025-10-31T00:52:58.783166479Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 00:52:59.015080 env[1221]: time="2025-10-31T00:52:59.014979194Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:52:59.016072 env[1221]: time="2025-10-31T00:52:59.016020867Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 00:52:59.016292 kubelet[1951]: E1031 00:52:59.016260 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:52:59.016553 kubelet[1951]: E1031 00:52:59.016306 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:52:59.016553 kubelet[1951]: E1031 00:52:59.016425 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dj25l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-7b7f97cd5d-6rgcm_calico-apiserver(12689884-11c3-4d99-b0f3-8d3ed54d0141): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 00:52:59.017798 kubelet[1951]: E1031 00:52:59.017538 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" podUID="12689884-11c3-4d99-b0f3-8d3ed54d0141" Oct 31 00:53:00.782759 env[1221]: time="2025-10-31T00:53:00.782425850Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 31 00:53:00.964000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:00.964000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7341 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:00.964000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=401152d3b0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:53:00.964000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:00.964000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4010853260 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:53:00.964000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:53:00.964000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4011524990 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:53:00.964000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:53:00.964000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:53:00.977000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:00.977000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=401173eec0 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:53:00.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:53:00.977000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7341 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:00.977000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40115f2870 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:53:00.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:53:00.992000 audit[1822]: AVC avc: denied { watch } for pid=1822 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:00.992000 audit[1822]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=401152d440 a2=fc6 a3=0 items=0 ppid=1676 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c725,c831 key=(null) Oct 31 00:53:00.992000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 31 00:53:01.023000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:01.023000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000659480 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:53:01.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:53:01.024000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7341 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:01.024000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c74810 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:53:01.024000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:53:01.121760 env[1221]: time="2025-10-31T00:53:01.121628267Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:01.122996 env[1221]: time="2025-10-31T00:53:01.122932307Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 31 00:53:01.123230 kubelet[1951]: E1031 00:53:01.123174 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 00:53:01.123486 kubelet[1951]: E1031 00:53:01.123233 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 00:53:01.124623 kubelet[1951]: E1031 00:53:01.124549 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vzv8g,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5675d97fbf-5qxcq_calico-system(3bc34509-f978-427a-9bb0-ccd41f4aa6f2): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:01.129224 kubelet[1951]: E1031 00:53:01.125712 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" podUID="3bc34509-f978-427a-9bb0-ccd41f4aa6f2" Oct 31 00:53:02.783669 env[1221]: time="2025-10-31T00:53:02.783577046Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 00:53:02.997074 env[1221]: time="2025-10-31T00:53:02.996864197Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:02.997993 env[1221]: time="2025-10-31T00:53:02.997887548Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 00:53:02.998150 kubelet[1951]: E1031 00:53:02.998099 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:53:02.998434 kubelet[1951]: E1031 00:53:02.998154 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:53:02.998434 kubelet[1951]: E1031 00:53:02.998347 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-z4z4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-7b7f97cd5d-b6qnj_calico-apiserver(c8e402bc-f445-4783-b321-f2c849228b0b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:02.998887 env[1221]: time="2025-10-31T00:53:02.998860697Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 31 00:53:02.999956 kubelet[1951]: E1031 00:53:02.999923 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" podUID="c8e402bc-f445-4783-b321-f2c849228b0b" Oct 31 00:53:03.085235 systemd[1]: Started sshd@12-10.0.0.85:22-10.0.0.1:50502.service. Oct 31 00:53:03.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.85:22-10.0.0.1:50502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:03.086866 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 31 00:53:03.086915 kernel: audit: type=1130 audit(1761871983.084:1392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.85:22-10.0.0.1:50502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:03.122000 audit[4557]: USER_ACCT pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.124142 sshd[4557]: Accepted publickey for core from 10.0.0.1 port 50502 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:03.125621 sshd[4557]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:03.124000 audit[4557]: CRED_ACQ pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.128631 kernel: audit: type=1101 audit(1761871983.122:1393): pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.128697 kernel: audit: type=1103 audit(1761871983.124:1394): pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.130332 kernel: audit: type=1006 audit(1761871983.124:1395): pid=4557 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 31 00:53:03.124000 audit[4557]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd04d6c70 a2=3 a3=1 items=0 ppid=1 pid=4557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:03.133167 kernel: audit: type=1300 audit(1761871983.124:1395): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd04d6c70 a2=3 a3=1 items=0 ppid=1 pid=4557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:03.124000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:03.134168 kernel: audit: type=1327 audit(1761871983.124:1395): proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:03.135365 systemd-logind[1206]: New session 13 of user core. Oct 31 00:53:03.136297 systemd[1]: Started session-13.scope. Oct 31 00:53:03.138000 audit[4557]: USER_START pid=4557 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.143774 kernel: audit: type=1105 audit(1761871983.138:1396): pid=4557 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.143864 kernel: audit: type=1103 audit(1761871983.142:1397): pid=4559 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.142000 audit[4559]: CRED_ACQ pid=4559 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.205259 env[1221]: time="2025-10-31T00:53:03.205211169Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:03.223181 env[1221]: time="2025-10-31T00:53:03.223097026Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 31 00:53:03.223383 kubelet[1951]: E1031 00:53:03.223326 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 00:53:03.223383 kubelet[1951]: E1031 00:53:03.223378 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 00:53:03.224038 kubelet[1951]: E1031 00:53:03.223632 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sgr4h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d7vjq_calico-system(a1446d6d-3b62-4890-8f90-ef3bb45fee6d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:03.225443 env[1221]: time="2025-10-31T00:53:03.223691924Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 31 00:53:03.286555 sshd[4557]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:03.287000 audit[4557]: USER_END pid=4557 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.287000 audit[4557]: CRED_DISP pid=4557 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.293626 kernel: audit: type=1106 audit(1761871983.287:1398): pid=4557 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.293706 kernel: audit: type=1104 audit(1761871983.287:1399): pid=4557 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:03.294032 systemd[1]: sshd@12-10.0.0.85:22-10.0.0.1:50502.service: Deactivated successfully. Oct 31 00:53:03.294820 systemd[1]: session-13.scope: Deactivated successfully. Oct 31 00:53:03.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.85:22-10.0.0.1:50502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:03.295492 systemd-logind[1206]: Session 13 logged out. Waiting for processes to exit. Oct 31 00:53:03.296323 systemd-logind[1206]: Removed session 13. Oct 31 00:53:03.427000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:03.427000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000659da0 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:53:03.427000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:53:03.428000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:03.428000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40003d7a60 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:53:03.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:53:03.428000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:03.428000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000cde700 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:53:03.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:53:03.428000 audit[1814]: AVC avc: denied { watch } for pid=1814 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 31 00:53:03.428000 audit[1814]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001d7aac0 a2=fc6 a3=0 items=0 ppid=1660 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c259,c770 key=(null) Oct 31 00:53:03.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 31 00:53:03.431778 env[1221]: time="2025-10-31T00:53:03.431730886Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:03.434259 env[1221]: time="2025-10-31T00:53:03.434200320Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 31 00:53:03.434442 kubelet[1951]: E1031 00:53:03.434407 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 00:53:03.434499 kubelet[1951]: E1031 00:53:03.434457 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 00:53:03.435883 kubelet[1951]: E1031 00:53:03.434734 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wbnq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-l9hl2_calico-system(2473b883-d21a-4d6d-b8b5-718e6f47949b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:03.436061 env[1221]: time="2025-10-31T00:53:03.435270192Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 31 00:53:03.437618 kubelet[1951]: E1031 00:53:03.436601 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-l9hl2" podUID="2473b883-d21a-4d6d-b8b5-718e6f47949b" Oct 31 00:53:03.654335 env[1221]: time="2025-10-31T00:53:03.654263203Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:03.655312 env[1221]: time="2025-10-31T00:53:03.655258673Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 31 00:53:03.655578 kubelet[1951]: E1031 00:53:03.655516 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 00:53:03.655641 kubelet[1951]: E1031 00:53:03.655584 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 00:53:03.655763 kubelet[1951]: E1031 00:53:03.655708 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sgr4h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d7vjq_calico-system(a1446d6d-3b62-4890-8f90-ef3bb45fee6d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:03.657826 kubelet[1951]: E1031 00:53:03.657749 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:53:03.779656 env[1221]: time="2025-10-31T00:53:03.779604203Z" level=info msg="StopPodSandbox for \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\"" Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.826 [WARNING][4581] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--l9hl2-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"2473b883-d21a-4d6d-b8b5-718e6f47949b", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55", Pod:"goldmane-666569f655-l9hl2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliaf545ce5fa8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.826 [INFO][4581] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.826 [INFO][4581] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" iface="eth0" netns="" Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.826 [INFO][4581] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.826 [INFO][4581] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.853 [INFO][4592] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" HandleID="k8s-pod-network.088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.853 [INFO][4592] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.853 [INFO][4592] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.863 [WARNING][4592] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" HandleID="k8s-pod-network.088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.863 [INFO][4592] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" HandleID="k8s-pod-network.088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.864 [INFO][4592] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:03.868345 env[1221]: 2025-10-31 00:53:03.866 [INFO][4581] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:53:03.868963 env[1221]: time="2025-10-31T00:53:03.868378147Z" level=info msg="TearDown network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\" successfully" Oct 31 00:53:03.868963 env[1221]: time="2025-10-31T00:53:03.868414188Z" level=info msg="StopPodSandbox for \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\" returns successfully" Oct 31 00:53:03.869035 env[1221]: time="2025-10-31T00:53:03.869003686Z" level=info msg="RemovePodSandbox for \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\"" Oct 31 00:53:03.869075 env[1221]: time="2025-10-31T00:53:03.869042327Z" level=info msg="Forcibly stopping sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\"" Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.907 [WARNING][4610] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--666569f655--l9hl2-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"2473b883-d21a-4d6d-b8b5-718e6f47949b", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a128291ba18b0d7f956d503022ebab7debb17159a68d1d1ebe561cf0a74fcf55", Pod:"goldmane-666569f655-l9hl2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"caliaf545ce5fa8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.907 [INFO][4610] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.907 [INFO][4610] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" iface="eth0" netns="" Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.907 [INFO][4610] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.907 [INFO][4610] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.926 [INFO][4619] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" HandleID="k8s-pod-network.088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.927 [INFO][4619] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.927 [INFO][4619] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.935 [WARNING][4619] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" HandleID="k8s-pod-network.088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.935 [INFO][4619] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" HandleID="k8s-pod-network.088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Workload="localhost-k8s-goldmane--666569f655--l9hl2-eth0" Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.937 [INFO][4619] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:03.940668 env[1221]: 2025-10-31 00:53:03.939 [INFO][4610] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7" Oct 31 00:53:03.941119 env[1221]: time="2025-10-31T00:53:03.940682076Z" level=info msg="TearDown network for sandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\" successfully" Oct 31 00:53:03.944994 env[1221]: time="2025-10-31T00:53:03.944945724Z" level=info msg="RemovePodSandbox \"088884e62d700f7514794b32ad2311e102cd15cfbd207ac3bec62356e17169c7\" returns successfully" Oct 31 00:53:03.945524 env[1221]: time="2025-10-31T00:53:03.945500901Z" level=info msg="StopPodSandbox for \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\"" Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:03.993 [WARNING][4637] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"741bf90a-a512-43fb-bece-a5b3433973d1", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337", Pod:"coredns-668d6bf9bc-dhzmj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali67dfed34f6c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:03.993 [INFO][4637] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:03.993 [INFO][4637] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" iface="eth0" netns="" Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:03.993 [INFO][4637] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:03.993 [INFO][4637] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:04.014 [INFO][4646] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" HandleID="k8s-pod-network.88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:04.015 [INFO][4646] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:04.015 [INFO][4646] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:04.027 [WARNING][4646] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" HandleID="k8s-pod-network.88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:04.027 [INFO][4646] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" HandleID="k8s-pod-network.88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:04.029 [INFO][4646] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.033334 env[1221]: 2025-10-31 00:53:04.031 [INFO][4637] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:53:04.034248 env[1221]: time="2025-10-31T00:53:04.033310765Z" level=info msg="TearDown network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\" successfully" Oct 31 00:53:04.034301 env[1221]: time="2025-10-31T00:53:04.034250793Z" level=info msg="StopPodSandbox for \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\" returns successfully" Oct 31 00:53:04.034774 env[1221]: time="2025-10-31T00:53:04.034744608Z" level=info msg="RemovePodSandbox for \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\"" Oct 31 00:53:04.034815 env[1221]: time="2025-10-31T00:53:04.034785449Z" level=info msg="Forcibly stopping sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\"" Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.069 [WARNING][4664] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"741bf90a-a512-43fb-bece-a5b3433973d1", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c53fa749fe82851fce1b67bfa15070a86f415e3d847c420aa06b0cc869c06337", Pod:"coredns-668d6bf9bc-dhzmj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali67dfed34f6c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.069 [INFO][4664] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.069 [INFO][4664] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" iface="eth0" netns="" Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.069 [INFO][4664] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.069 [INFO][4664] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.088 [INFO][4673] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" HandleID="k8s-pod-network.88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.088 [INFO][4673] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.088 [INFO][4673] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.097 [WARNING][4673] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" HandleID="k8s-pod-network.88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.098 [INFO][4673] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" HandleID="k8s-pod-network.88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Workload="localhost-k8s-coredns--668d6bf9bc--dhzmj-eth0" Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.099 [INFO][4673] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.102832 env[1221]: 2025-10-31 00:53:04.101 [INFO][4664] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d" Oct 31 00:53:04.103282 env[1221]: time="2025-10-31T00:53:04.102857030Z" level=info msg="TearDown network for sandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\" successfully" Oct 31 00:53:04.106525 env[1221]: time="2025-10-31T00:53:04.106484338Z" level=info msg="RemovePodSandbox \"88d78195dd1dc8214eb4d4f26f974a2e283678311aaaf2df590ed4e04927c12d\" returns successfully" Oct 31 00:53:04.107089 env[1221]: time="2025-10-31T00:53:04.107042154Z" level=info msg="StopPodSandbox for \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\"" Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.139 [WARNING][4691] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" WorkloadEndpoint="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.139 [INFO][4691] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.139 [INFO][4691] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" iface="eth0" netns="" Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.139 [INFO][4691] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.139 [INFO][4691] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.156 [INFO][4700] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" HandleID="k8s-pod-network.38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Workload="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.157 [INFO][4700] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.157 [INFO][4700] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.166 [WARNING][4700] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" HandleID="k8s-pod-network.38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Workload="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.166 [INFO][4700] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" HandleID="k8s-pod-network.38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Workload="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.167 [INFO][4700] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.171425 env[1221]: 2025-10-31 00:53:04.169 [INFO][4691] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:53:04.171798 env[1221]: time="2025-10-31T00:53:04.171408945Z" level=info msg="TearDown network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\" successfully" Oct 31 00:53:04.171798 env[1221]: time="2025-10-31T00:53:04.171446347Z" level=info msg="StopPodSandbox for \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\" returns successfully" Oct 31 00:53:04.171911 env[1221]: time="2025-10-31T00:53:04.171880759Z" level=info msg="RemovePodSandbox for \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\"" Oct 31 00:53:04.171956 env[1221]: time="2025-10-31T00:53:04.171917600Z" level=info msg="Forcibly stopping sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\"" Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.205 [WARNING][4719] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" WorkloadEndpoint="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.206 [INFO][4719] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.206 [INFO][4719] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" iface="eth0" netns="" Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.206 [INFO][4719] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.206 [INFO][4719] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.223 [INFO][4729] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" HandleID="k8s-pod-network.38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Workload="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.224 [INFO][4729] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.224 [INFO][4729] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.232 [WARNING][4729] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" HandleID="k8s-pod-network.38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Workload="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.232 [INFO][4729] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" HandleID="k8s-pod-network.38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Workload="localhost-k8s-whisker--96cd8b58d--jmxg2-eth0" Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.233 [INFO][4729] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.236830 env[1221]: 2025-10-31 00:53:04.235 [INFO][4719] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f" Oct 31 00:53:04.237222 env[1221]: time="2025-10-31T00:53:04.236869009Z" level=info msg="TearDown network for sandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\" successfully" Oct 31 00:53:04.239962 env[1221]: time="2025-10-31T00:53:04.239925500Z" level=info msg="RemovePodSandbox \"38e87b8a911ea6daf038438123998fbf0a28d146bdc17f222d8921b5e707a06f\" returns successfully" Oct 31 00:53:04.240479 env[1221]: time="2025-10-31T00:53:04.240439795Z" level=info msg="StopPodSandbox for \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\"" Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.286 [WARNING][4748] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--d7vjq-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a1446d6d-3b62-4890-8f90-ef3bb45fee6d", ResourceVersion:"1072", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9", Pod:"csi-node-driver-d7vjq", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0715ae90684", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.286 [INFO][4748] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.286 [INFO][4748] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" iface="eth0" netns="" Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.286 [INFO][4748] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.286 [INFO][4748] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.303 [INFO][4757] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" HandleID="k8s-pod-network.485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.304 [INFO][4757] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.304 [INFO][4757] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.313 [WARNING][4757] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" HandleID="k8s-pod-network.485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.313 [INFO][4757] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" HandleID="k8s-pod-network.485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.315 [INFO][4757] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.317998 env[1221]: 2025-10-31 00:53:04.316 [INFO][4748] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:53:04.317998 env[1221]: time="2025-10-31T00:53:04.317960576Z" level=info msg="TearDown network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\" successfully" Oct 31 00:53:04.317998 env[1221]: time="2025-10-31T00:53:04.317994457Z" level=info msg="StopPodSandbox for \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\" returns successfully" Oct 31 00:53:04.319551 env[1221]: time="2025-10-31T00:53:04.319511782Z" level=info msg="RemovePodSandbox for \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\"" Oct 31 00:53:04.319622 env[1221]: time="2025-10-31T00:53:04.319551064Z" level=info msg="Forcibly stopping sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\"" Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.350 [WARNING][4775] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--d7vjq-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a1446d6d-3b62-4890-8f90-ef3bb45fee6d", ResourceVersion:"1072", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dba105af6bac9caeaf3b5e3c1434e592fbc3bbad60f8bb0214d7ac5fddbfe7a9", Pod:"csi-node-driver-d7vjq", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali0715ae90684", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.350 [INFO][4775] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.350 [INFO][4775] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" iface="eth0" netns="" Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.350 [INFO][4775] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.350 [INFO][4775] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.369 [INFO][4784] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" HandleID="k8s-pod-network.485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.370 [INFO][4784] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.370 [INFO][4784] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.378 [WARNING][4784] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" HandleID="k8s-pod-network.485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.378 [INFO][4784] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" HandleID="k8s-pod-network.485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Workload="localhost-k8s-csi--node--driver--d7vjq-eth0" Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.379 [INFO][4784] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.383008 env[1221]: 2025-10-31 00:53:04.381 [INFO][4775] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e" Oct 31 00:53:04.383443 env[1221]: time="2025-10-31T00:53:04.383039908Z" level=info msg="TearDown network for sandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\" successfully" Oct 31 00:53:04.459313 env[1221]: time="2025-10-31T00:53:04.459248131Z" level=info msg="RemovePodSandbox \"485b540ad0c4c8a3a63032db7a18c506fd6befd7587fae4a203b8203cf0a3c6e\" returns successfully" Oct 31 00:53:04.459850 env[1221]: time="2025-10-31T00:53:04.459809508Z" level=info msg="StopPodSandbox for \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\"" Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.493 [WARNING][4802] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--47vlh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"45299de2-b3de-400b-8c19-f8a3dd1abc5a", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2", Pod:"coredns-668d6bf9bc-47vlh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali28a92a2a204", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.493 [INFO][4802] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.493 [INFO][4802] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" iface="eth0" netns="" Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.493 [INFO][4802] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.493 [INFO][4802] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.513 [INFO][4811] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" HandleID="k8s-pod-network.b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.513 [INFO][4811] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.513 [INFO][4811] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.523 [WARNING][4811] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" HandleID="k8s-pod-network.b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.523 [INFO][4811] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" HandleID="k8s-pod-network.b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.525 [INFO][4811] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.529147 env[1221]: 2025-10-31 00:53:04.527 [INFO][4802] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:53:04.529580 env[1221]: time="2025-10-31T00:53:04.529181767Z" level=info msg="TearDown network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\" successfully" Oct 31 00:53:04.529580 env[1221]: time="2025-10-31T00:53:04.529211768Z" level=info msg="StopPodSandbox for \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\" returns successfully" Oct 31 00:53:04.529814 env[1221]: time="2025-10-31T00:53:04.529784345Z" level=info msg="RemovePodSandbox for \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\"" Oct 31 00:53:04.529928 env[1221]: time="2025-10-31T00:53:04.529880228Z" level=info msg="Forcibly stopping sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\"" Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.563 [WARNING][4829] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--47vlh-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"45299de2-b3de-400b-8c19-f8a3dd1abc5a", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c891c9ff7bbf1b4135e2284535c7d4689a5b23766151ab6016350612cd4026d2", Pod:"coredns-668d6bf9bc-47vlh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali28a92a2a204", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.563 [INFO][4829] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.563 [INFO][4829] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" iface="eth0" netns="" Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.563 [INFO][4829] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.563 [INFO][4829] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.583 [INFO][4837] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" HandleID="k8s-pod-network.b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.583 [INFO][4837] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.583 [INFO][4837] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.592 [WARNING][4837] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" HandleID="k8s-pod-network.b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.592 [INFO][4837] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" HandleID="k8s-pod-network.b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Workload="localhost-k8s-coredns--668d6bf9bc--47vlh-eth0" Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.594 [INFO][4837] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.598074 env[1221]: 2025-10-31 00:53:04.596 [INFO][4829] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92" Oct 31 00:53:04.599086 env[1221]: time="2025-10-31T00:53:04.598049332Z" level=info msg="TearDown network for sandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\" successfully" Oct 31 00:53:04.628457 env[1221]: time="2025-10-31T00:53:04.628394233Z" level=info msg="RemovePodSandbox \"b3e065087a0065dbce5418acf70fd3a5b6fd6a6c15a07922801e1442c481bf92\" returns successfully" Oct 31 00:53:04.629059 env[1221]: time="2025-10-31T00:53:04.628994810Z" level=info msg="StopPodSandbox for \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\"" Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.664 [WARNING][4855] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0", GenerateName:"calico-apiserver-7b7f97cd5d-", Namespace:"calico-apiserver", SelfLink:"", UID:"c8e402bc-f445-4783-b321-f2c849228b0b", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b7f97cd5d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2", Pod:"calico-apiserver-7b7f97cd5d-b6qnj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie5e17720853", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.664 [INFO][4855] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.664 [INFO][4855] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" iface="eth0" netns="" Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.664 [INFO][4855] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.664 [INFO][4855] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.682 [INFO][4865] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" HandleID="k8s-pod-network.516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.682 [INFO][4865] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.682 [INFO][4865] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.691 [WARNING][4865] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" HandleID="k8s-pod-network.516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.691 [INFO][4865] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" HandleID="k8s-pod-network.516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.693 [INFO][4865] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.696512 env[1221]: 2025-10-31 00:53:04.694 [INFO][4855] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:53:04.696981 env[1221]: time="2025-10-31T00:53:04.696544856Z" level=info msg="TearDown network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\" successfully" Oct 31 00:53:04.696981 env[1221]: time="2025-10-31T00:53:04.696578977Z" level=info msg="StopPodSandbox for \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\" returns successfully" Oct 31 00:53:04.697523 env[1221]: time="2025-10-31T00:53:04.697495684Z" level=info msg="RemovePodSandbox for \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\"" Oct 31 00:53:04.697591 env[1221]: time="2025-10-31T00:53:04.697551446Z" level=info msg="Forcibly stopping sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\"" Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.732 [WARNING][4883] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0", GenerateName:"calico-apiserver-7b7f97cd5d-", Namespace:"calico-apiserver", SelfLink:"", UID:"c8e402bc-f445-4783-b321-f2c849228b0b", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b7f97cd5d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a6c57e2930e482071ac2814c63a30269d956dcb9157af021e9ee5ed486da1a2", Pod:"calico-apiserver-7b7f97cd5d-b6qnj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie5e17720853", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.732 [INFO][4883] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.732 [INFO][4883] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" iface="eth0" netns="" Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.732 [INFO][4883] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.732 [INFO][4883] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.749 [INFO][4892] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" HandleID="k8s-pod-network.516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.750 [INFO][4892] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.750 [INFO][4892] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.759 [WARNING][4892] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" HandleID="k8s-pod-network.516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.759 [INFO][4892] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" HandleID="k8s-pod-network.516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--b6qnj-eth0" Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.760 [INFO][4892] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.763835 env[1221]: 2025-10-31 00:53:04.762 [INFO][4883] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36" Oct 31 00:53:04.764286 env[1221]: time="2025-10-31T00:53:04.763862534Z" level=info msg="TearDown network for sandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\" successfully" Oct 31 00:53:04.766922 env[1221]: time="2025-10-31T00:53:04.766874864Z" level=info msg="RemovePodSandbox \"516b1eec46887cfdd8d82ecfc937d53181f77f8618bcd3fee468fc2960557c36\" returns successfully" Oct 31 00:53:04.767484 env[1221]: time="2025-10-31T00:53:04.767456281Z" level=info msg="StopPodSandbox for \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\"" Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.801 [WARNING][4910] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0", GenerateName:"calico-kube-controllers-5675d97fbf-", Namespace:"calico-system", SelfLink:"", UID:"3bc34509-f978-427a-9bb0-ccd41f4aa6f2", ResourceVersion:"1011", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5675d97fbf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5", Pod:"calico-kube-controllers-5675d97fbf-5qxcq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali87f6d984ec4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.801 [INFO][4910] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.801 [INFO][4910] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" iface="eth0" netns="" Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.801 [INFO][4910] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.801 [INFO][4910] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.833 [INFO][4919] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" HandleID="k8s-pod-network.30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.833 [INFO][4919] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.833 [INFO][4919] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.842 [WARNING][4919] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" HandleID="k8s-pod-network.30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.842 [INFO][4919] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" HandleID="k8s-pod-network.30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.844 [INFO][4919] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.848506 env[1221]: 2025-10-31 00:53:04.846 [INFO][4910] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:53:04.849284 env[1221]: time="2025-10-31T00:53:04.849143426Z" level=info msg="TearDown network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\" successfully" Oct 31 00:53:04.849554 env[1221]: time="2025-10-31T00:53:04.849457916Z" level=info msg="StopPodSandbox for \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\" returns successfully" Oct 31 00:53:04.850283 env[1221]: time="2025-10-31T00:53:04.850244299Z" level=info msg="RemovePodSandbox for \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\"" Oct 31 00:53:04.850353 env[1221]: time="2025-10-31T00:53:04.850286220Z" level=info msg="Forcibly stopping sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\"" Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.889 [WARNING][4936] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0", GenerateName:"calico-kube-controllers-5675d97fbf-", Namespace:"calico-system", SelfLink:"", UID:"3bc34509-f978-427a-9bb0-ccd41f4aa6f2", ResourceVersion:"1011", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5675d97fbf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"65469bc756ddba914f0328a9f8dd8d926148f00ae311395d08c69ac359e198a5", Pod:"calico-kube-controllers-5675d97fbf-5qxcq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali87f6d984ec4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.889 [INFO][4936] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.889 [INFO][4936] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" iface="eth0" netns="" Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.889 [INFO][4936] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.889 [INFO][4936] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.907 [INFO][4944] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" HandleID="k8s-pod-network.30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.907 [INFO][4944] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.907 [INFO][4944] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.916 [WARNING][4944] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" HandleID="k8s-pod-network.30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.916 [INFO][4944] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" HandleID="k8s-pod-network.30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Workload="localhost-k8s-calico--kube--controllers--5675d97fbf--5qxcq-eth0" Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.918 [INFO][4944] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:04.921234 env[1221]: 2025-10-31 00:53:04.920 [INFO][4936] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28" Oct 31 00:53:04.921861 env[1221]: time="2025-10-31T00:53:04.921270368Z" level=info msg="TearDown network for sandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\" successfully" Oct 31 00:53:04.961029 env[1221]: time="2025-10-31T00:53:04.960963146Z" level=info msg="RemovePodSandbox \"30bdef35ace348aecefdbee4222eb522dfdf822d957af450f17d59a8d5380f28\" returns successfully" Oct 31 00:53:04.961626 env[1221]: time="2025-10-31T00:53:04.961585245Z" level=info msg="StopPodSandbox for \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\"" Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.004 [WARNING][4962] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0", GenerateName:"calico-apiserver-7b7f97cd5d-", Namespace:"calico-apiserver", SelfLink:"", UID:"12689884-11c3-4d99-b0f3-8d3ed54d0141", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b7f97cd5d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582", Pod:"calico-apiserver-7b7f97cd5d-6rgcm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd5935c707f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.005 [INFO][4962] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.005 [INFO][4962] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" iface="eth0" netns="" Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.005 [INFO][4962] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.005 [INFO][4962] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.022 [INFO][4971] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" HandleID="k8s-pod-network.f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.023 [INFO][4971] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.023 [INFO][4971] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.031 [WARNING][4971] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" HandleID="k8s-pod-network.f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.031 [INFO][4971] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" HandleID="k8s-pod-network.f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.033 [INFO][4971] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:05.036795 env[1221]: 2025-10-31 00:53:05.035 [INFO][4962] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:53:05.037249 env[1221]: time="2025-10-31T00:53:05.036833268Z" level=info msg="TearDown network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\" successfully" Oct 31 00:53:05.037249 env[1221]: time="2025-10-31T00:53:05.036887590Z" level=info msg="StopPodSandbox for \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\" returns successfully" Oct 31 00:53:05.037454 env[1221]: time="2025-10-31T00:53:05.037424605Z" level=info msg="RemovePodSandbox for \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\"" Oct 31 00:53:05.037491 env[1221]: time="2025-10-31T00:53:05.037461167Z" level=info msg="Forcibly stopping sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\"" Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.070 [WARNING][4988] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0", GenerateName:"calico-apiserver-7b7f97cd5d-", Namespace:"calico-apiserver", SelfLink:"", UID:"12689884-11c3-4d99-b0f3-8d3ed54d0141", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.October, 31, 0, 52, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b7f97cd5d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ed303f40c5b4c461dd6aee9ddff3d542c763bb7764fadbcbf88620e8a711f582", Pod:"calico-apiserver-7b7f97cd5d-6rgcm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidd5935c707f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.070 [INFO][4988] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.070 [INFO][4988] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" iface="eth0" netns="" Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.070 [INFO][4988] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.070 [INFO][4988] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.088 [INFO][4996] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" HandleID="k8s-pod-network.f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.089 [INFO][4996] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.089 [INFO][4996] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.097 [WARNING][4996] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" HandleID="k8s-pod-network.f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.097 [INFO][4996] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" HandleID="k8s-pod-network.f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Workload="localhost-k8s-calico--apiserver--7b7f97cd5d--6rgcm-eth0" Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.099 [INFO][4996] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Oct 31 00:53:05.102175 env[1221]: 2025-10-31 00:53:05.100 [INFO][4988] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111" Oct 31 00:53:05.102175 env[1221]: time="2025-10-31T00:53:05.102150708Z" level=info msg="TearDown network for sandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\" successfully" Oct 31 00:53:05.114656 env[1221]: time="2025-10-31T00:53:05.114594034Z" level=info msg="RemovePodSandbox \"f89c0accc528d7e80704d47b820138031780f3d7e62720ac406f800d2d613111\" returns successfully" Oct 31 00:53:06.782870 kubelet[1951]: E1031 00:53:06.782815 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6795c95d78-ss2p9" podUID="a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94" Oct 31 00:53:08.291223 systemd[1]: Started sshd@13-10.0.0.85:22-10.0.0.1:50550.service. Oct 31 00:53:08.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.85:22-10.0.0.1:50550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:08.294554 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 31 00:53:08.294646 kernel: audit: type=1130 audit(1761871988.290:1405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.85:22-10.0.0.1:50550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:08.343000 audit[5005]: USER_ACCT pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.344544 sshd[5005]: Accepted publickey for core from 10.0.0.1 port 50550 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:08.346256 sshd[5005]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:08.344000 audit[5005]: CRED_ACQ pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.349660 kernel: audit: type=1101 audit(1761871988.343:1406): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.349731 kernel: audit: type=1103 audit(1761871988.344:1407): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.349752 kernel: audit: type=1006 audit(1761871988.344:1408): pid=5005 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 31 00:53:08.344000 audit[5005]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe248760 a2=3 a3=1 items=0 ppid=1 pid=5005 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:08.353836 kernel: audit: type=1300 audit(1761871988.344:1408): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe248760 a2=3 a3=1 items=0 ppid=1 pid=5005 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:08.353917 kernel: audit: type=1327 audit(1761871988.344:1408): proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:08.344000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:08.354196 systemd-logind[1206]: New session 14 of user core. Oct 31 00:53:08.355821 systemd[1]: Started session-14.scope. Oct 31 00:53:08.362000 audit[5005]: USER_START pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.363000 audit[5007]: CRED_ACQ pid=5007 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.368739 kernel: audit: type=1105 audit(1761871988.362:1409): pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.368816 kernel: audit: type=1103 audit(1761871988.363:1410): pid=5007 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.549386 sshd[5005]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:08.549000 audit[5005]: USER_END pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.549000 audit[5005]: CRED_DISP pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.555951 systemd[1]: sshd@13-10.0.0.85:22-10.0.0.1:50550.service: Deactivated successfully. Oct 31 00:53:08.556848 systemd[1]: session-14.scope: Deactivated successfully. Oct 31 00:53:08.557015 kernel: audit: type=1106 audit(1761871988.549:1411): pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.557064 kernel: audit: type=1104 audit(1761871988.549:1412): pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:08.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.85:22-10.0.0.1:50550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:08.558932 systemd-logind[1206]: Session 14 logged out. Waiting for processes to exit. Oct 31 00:53:08.560321 systemd-logind[1206]: Removed session 14. Oct 31 00:53:08.932342 systemd[1]: run-containerd-runc-k8s.io-f6cf387b193f7b2e2c22f23551a5545499e54dcc8aea8132933b39b93a7faa0d-runc.FM8dd8.mount: Deactivated successfully. Oct 31 00:53:09.006269 kubelet[1951]: E1031 00:53:09.006218 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:53:12.783237 kubelet[1951]: E1031 00:53:12.783186 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" podUID="3bc34509-f978-427a-9bb0-ccd41f4aa6f2" Oct 31 00:53:13.559944 systemd[1]: Started sshd@14-10.0.0.85:22-10.0.0.1:44780.service. Oct 31 00:53:13.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.85:22-10.0.0.1:44780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:13.564044 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 00:53:13.564147 kernel: audit: type=1130 audit(1761871993.559:1414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.85:22-10.0.0.1:44780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:13.598000 audit[5046]: USER_ACCT pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.599387 sshd[5046]: Accepted publickey for core from 10.0.0.1 port 44780 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:13.600873 sshd[5046]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:13.599000 audit[5046]: CRED_ACQ pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.604287 kernel: audit: type=1101 audit(1761871993.598:1415): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.604397 kernel: audit: type=1103 audit(1761871993.599:1416): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.604427 kernel: audit: type=1006 audit(1761871993.599:1417): pid=5046 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 31 00:53:13.606208 kernel: audit: type=1300 audit(1761871993.599:1417): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe19b9290 a2=3 a3=1 items=0 ppid=1 pid=5046 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:13.599000 audit[5046]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe19b9290 a2=3 a3=1 items=0 ppid=1 pid=5046 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:13.599000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:13.610599 kernel: audit: type=1327 audit(1761871993.599:1417): proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:13.611201 systemd-logind[1206]: New session 15 of user core. Oct 31 00:53:13.611557 systemd[1]: Started session-15.scope. Oct 31 00:53:13.618000 audit[5046]: USER_START pid=5046 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.623164 kernel: audit: type=1105 audit(1761871993.618:1418): pid=5046 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.622000 audit[5048]: CRED_ACQ pid=5048 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.626147 kernel: audit: type=1103 audit(1761871993.622:1419): pid=5048 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.757434 sshd[5046]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:13.757000 audit[5046]: USER_END pid=5046 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.761755 systemd[1]: sshd@14-10.0.0.85:22-10.0.0.1:44780.service: Deactivated successfully. Oct 31 00:53:13.762912 systemd[1]: session-15.scope: Deactivated successfully. Oct 31 00:53:13.757000 audit[5046]: CRED_DISP pid=5046 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.763678 systemd-logind[1206]: Session 15 logged out. Waiting for processes to exit. Oct 31 00:53:13.765909 kernel: audit: type=1106 audit(1761871993.757:1420): pid=5046 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.765985 kernel: audit: type=1104 audit(1761871993.757:1421): pid=5046 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:13.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.85:22-10.0.0.1:44780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:13.767148 systemd-logind[1206]: Removed session 15. Oct 31 00:53:13.789116 kubelet[1951]: E1031 00:53:13.789074 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" podUID="12689884-11c3-4d99-b0f3-8d3ed54d0141" Oct 31 00:53:14.783595 kubelet[1951]: E1031 00:53:14.783543 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:53:15.782653 kubelet[1951]: E1031 00:53:15.782612 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-l9hl2" podUID="2473b883-d21a-4d6d-b8b5-718e6f47949b" Oct 31 00:53:16.783099 kubelet[1951]: E1031 00:53:16.783050 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" podUID="c8e402bc-f445-4783-b321-f2c849228b0b" Oct 31 00:53:18.762198 systemd[1]: Started sshd@15-10.0.0.85:22-10.0.0.1:44792.service. Oct 31 00:53:18.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.85:22-10.0.0.1:44792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:18.766341 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 00:53:18.766402 kernel: audit: type=1130 audit(1761871998.761:1423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.85:22-10.0.0.1:44792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:18.803342 sshd[5064]: Accepted publickey for core from 10.0.0.1 port 44792 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:18.802000 audit[5064]: USER_ACCT pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.807265 sshd[5064]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:18.807969 kernel: audit: type=1101 audit(1761871998.802:1424): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.808039 kernel: audit: type=1103 audit(1761871998.805:1425): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.805000 audit[5064]: CRED_ACQ pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.812777 kernel: audit: type=1006 audit(1761871998.805:1426): pid=5064 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 31 00:53:18.814279 kernel: audit: type=1300 audit(1761871998.805:1426): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7238170 a2=3 a3=1 items=0 ppid=1 pid=5064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:18.805000 audit[5064]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7238170 a2=3 a3=1 items=0 ppid=1 pid=5064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:18.812449 systemd[1]: Started session-16.scope. Oct 31 00:53:18.813762 systemd-logind[1206]: New session 16 of user core. Oct 31 00:53:18.805000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:18.818571 kernel: audit: type=1327 audit(1761871998.805:1426): proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:18.821000 audit[5064]: USER_START pid=5064 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.822000 audit[5066]: CRED_ACQ pid=5066 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.829866 kernel: audit: type=1105 audit(1761871998.821:1427): pid=5064 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.829924 kernel: audit: type=1103 audit(1761871998.822:1428): pid=5066 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.953982 sshd[5064]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:18.955000 audit[5064]: USER_END pid=5064 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.958703 systemd[1]: Started sshd@16-10.0.0.85:22-10.0.0.1:44800.service. Oct 31 00:53:18.960675 systemd[1]: sshd@15-10.0.0.85:22-10.0.0.1:44792.service: Deactivated successfully. Oct 31 00:53:18.961363 systemd[1]: session-16.scope: Deactivated successfully. Oct 31 00:53:18.962767 systemd-logind[1206]: Session 16 logged out. Waiting for processes to exit. Oct 31 00:53:18.963854 systemd-logind[1206]: Removed session 16. Oct 31 00:53:18.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.85:22-10.0.0.1:44800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:18.967268 kernel: audit: type=1106 audit(1761871998.955:1429): pid=5064 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.967339 kernel: audit: type=1130 audit(1761871998.958:1430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.85:22-10.0.0.1:44800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:18.958000 audit[5064]: CRED_DISP pid=5064 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.85:22-10.0.0.1:44792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:18.998000 audit[5076]: USER_ACCT pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:18.999880 sshd[5076]: Accepted publickey for core from 10.0.0.1 port 44800 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:19.000000 audit[5076]: CRED_ACQ pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.000000 audit[5076]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd94eaab0 a2=3 a3=1 items=0 ppid=1 pid=5076 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:19.000000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:19.001588 sshd[5076]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:19.005751 systemd-logind[1206]: New session 17 of user core. Oct 31 00:53:19.006357 systemd[1]: Started session-17.scope. Oct 31 00:53:19.009000 audit[5076]: USER_START pid=5076 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.011000 audit[5079]: CRED_ACQ pid=5079 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.224703 sshd[5076]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:19.224000 audit[5076]: USER_END pid=5076 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.224000 audit[5076]: CRED_DISP pid=5076 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.227987 systemd[1]: sshd@16-10.0.0.85:22-10.0.0.1:44800.service: Deactivated successfully. Oct 31 00:53:19.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.85:22-10.0.0.1:44800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:19.228709 systemd[1]: session-17.scope: Deactivated successfully. Oct 31 00:53:19.229278 systemd-logind[1206]: Session 17 logged out. Waiting for processes to exit. Oct 31 00:53:19.230530 systemd[1]: Started sshd@17-10.0.0.85:22-10.0.0.1:52570.service. Oct 31 00:53:19.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.85:22-10.0.0.1:52570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:19.231361 systemd-logind[1206]: Removed session 17. Oct 31 00:53:19.267000 audit[5089]: USER_ACCT pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.269284 sshd[5089]: Accepted publickey for core from 10.0.0.1 port 52570 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:19.269000 audit[5089]: CRED_ACQ pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.269000 audit[5089]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaefa9d0 a2=3 a3=1 items=0 ppid=1 pid=5089 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:19.269000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:19.270973 sshd[5089]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:19.274845 systemd-logind[1206]: New session 18 of user core. Oct 31 00:53:19.275760 systemd[1]: Started session-18.scope. Oct 31 00:53:19.279000 audit[5089]: USER_START pid=5089 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.280000 audit[5091]: CRED_ACQ pid=5091 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.784237 env[1221]: time="2025-10-31T00:53:19.784170355Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Oct 31 00:53:19.851000 audit[5102]: NETFILTER_CFG table=filter:134 family=2 entries=26 op=nft_register_rule pid=5102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:53:19.851000 audit[5102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=fffff5efe630 a2=0 a3=1 items=0 ppid=2062 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:19.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:53:19.860386 sshd[5089]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:19.858000 audit[5102]: NETFILTER_CFG table=nat:135 family=2 entries=20 op=nft_register_rule pid=5102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:53:19.861000 audit[5089]: USER_END pid=5089 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.861000 audit[5089]: CRED_DISP pid=5089 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.864886 systemd[1]: Started sshd@18-10.0.0.85:22-10.0.0.1:52582.service. Oct 31 00:53:19.858000 audit[5102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff5efe630 a2=0 a3=1 items=0 ppid=2062 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:19.858000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:53:19.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.85:22-10.0.0.1:52582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:19.865832 systemd[1]: sshd@17-10.0.0.85:22-10.0.0.1:52570.service: Deactivated successfully. Oct 31 00:53:19.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.85:22-10.0.0.1:52570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:19.866858 systemd[1]: session-18.scope: Deactivated successfully. Oct 31 00:53:19.867813 systemd-logind[1206]: Session 18 logged out. Waiting for processes to exit. Oct 31 00:53:19.870331 systemd-logind[1206]: Removed session 18. Oct 31 00:53:19.878000 audit[5108]: NETFILTER_CFG table=filter:136 family=2 entries=38 op=nft_register_rule pid=5108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:53:19.878000 audit[5108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffcab1ed80 a2=0 a3=1 items=0 ppid=2062 pid=5108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:19.878000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:53:19.884000 audit[5108]: NETFILTER_CFG table=nat:137 family=2 entries=20 op=nft_register_rule pid=5108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:53:19.884000 audit[5108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffcab1ed80 a2=0 a3=1 items=0 ppid=2062 pid=5108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:19.884000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:53:19.903000 audit[5104]: USER_ACCT pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.904951 sshd[5104]: Accepted publickey for core from 10.0.0.1 port 52582 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:19.905000 audit[5104]: CRED_ACQ pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.905000 audit[5104]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc583a8a0 a2=3 a3=1 items=0 ppid=1 pid=5104 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:19.905000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:19.906635 sshd[5104]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:19.910832 systemd-logind[1206]: New session 19 of user core. Oct 31 00:53:19.911406 systemd[1]: Started session-19.scope. Oct 31 00:53:19.914000 audit[5104]: USER_START pid=5104 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:19.915000 audit[5109]: CRED_ACQ pid=5109 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:20.014915 env[1221]: time="2025-10-31T00:53:20.014850354Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:20.016014 env[1221]: time="2025-10-31T00:53:20.015960326Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Oct 31 00:53:20.016254 kubelet[1951]: E1031 00:53:20.016217 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 00:53:20.016543 kubelet[1951]: E1031 00:53:20.016267 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Oct 31 00:53:20.016543 kubelet[1951]: E1031 00:53:20.016375 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:8198d7d63758426fa7625a9bf0338b75,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-k9mnf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6795c95d78-ss2p9_calico-system(a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:20.018672 env[1221]: time="2025-10-31T00:53:20.018635957Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Oct 31 00:53:20.185622 sshd[5104]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:20.185000 audit[5104]: USER_END pid=5104 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:20.186000 audit[5104]: CRED_DISP pid=5104 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:20.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.85:22-10.0.0.1:52598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:20.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.85:22-10.0.0.1:52582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:20.190330 systemd[1]: Started sshd@19-10.0.0.85:22-10.0.0.1:52598.service. Oct 31 00:53:20.190843 systemd[1]: sshd@18-10.0.0.85:22-10.0.0.1:52582.service: Deactivated successfully. Oct 31 00:53:20.191596 systemd[1]: session-19.scope: Deactivated successfully. Oct 31 00:53:20.192432 systemd-logind[1206]: Session 19 logged out. Waiting for processes to exit. Oct 31 00:53:20.193341 systemd-logind[1206]: Removed session 19. Oct 31 00:53:20.225212 env[1221]: time="2025-10-31T00:53:20.224819317Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:20.225000 audit[5123]: USER_ACCT pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:20.227191 sshd[5123]: Accepted publickey for core from 10.0.0.1 port 52598 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:20.227635 env[1221]: time="2025-10-31T00:53:20.227577788Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Oct 31 00:53:20.227870 kubelet[1951]: E1031 00:53:20.227829 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 00:53:20.227921 kubelet[1951]: E1031 00:53:20.227885 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Oct 31 00:53:20.228037 kubelet[1951]: E1031 00:53:20.227990 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-k9mnf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-6795c95d78-ss2p9_calico-system(a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:20.229172 kubelet[1951]: E1031 00:53:20.229090 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6795c95d78-ss2p9" podUID="a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94" Oct 31 00:53:20.228000 audit[5123]: CRED_ACQ pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:20.228000 audit[5123]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8255ac0 a2=3 a3=1 items=0 ppid=1 pid=5123 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:20.228000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:20.229769 sshd[5123]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:20.234995 systemd-logind[1206]: New session 20 of user core. Oct 31 00:53:20.235780 systemd[1]: Started session-20.scope. Oct 31 00:53:20.240000 audit[5123]: USER_START pid=5123 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:20.242000 audit[5126]: CRED_ACQ pid=5126 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:20.380644 sshd[5123]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:20.380000 audit[5123]: USER_END pid=5123 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:20.380000 audit[5123]: CRED_DISP pid=5123 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:20.383222 systemd[1]: sshd@19-10.0.0.85:22-10.0.0.1:52598.service: Deactivated successfully. Oct 31 00:53:20.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.85:22-10.0.0.1:52598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:20.384052 systemd[1]: session-20.scope: Deactivated successfully. Oct 31 00:53:20.384609 systemd-logind[1206]: Session 20 logged out. Waiting for processes to exit. Oct 31 00:53:20.385441 systemd-logind[1206]: Removed session 20. Oct 31 00:53:23.782468 kubelet[1951]: E1031 00:53:23.782426 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:53:23.783318 env[1221]: time="2025-10-31T00:53:23.783277128Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Oct 31 00:53:23.981114 env[1221]: time="2025-10-31T00:53:23.981054799Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:23.982168 env[1221]: time="2025-10-31T00:53:23.982120012Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Oct 31 00:53:23.982372 kubelet[1951]: E1031 00:53:23.982323 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 00:53:23.982435 kubelet[1951]: E1031 00:53:23.982374 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Oct 31 00:53:23.982568 kubelet[1951]: E1031 00:53:23.982506 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-vzv8g,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5675d97fbf-5qxcq_calico-system(3bc34509-f978-427a-9bb0-ccd41f4aa6f2): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:23.983876 kubelet[1951]: E1031 00:53:23.983840 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" podUID="3bc34509-f978-427a-9bb0-ccd41f4aa6f2" Oct 31 00:53:25.222000 audit[5137]: NETFILTER_CFG table=filter:138 family=2 entries=26 op=nft_register_rule pid=5137 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:53:25.224251 kernel: kauditd_printk_skb: 57 callbacks suppressed Oct 31 00:53:25.224323 kernel: audit: type=1325 audit(1761872005.222:1472): table=filter:138 family=2 entries=26 op=nft_register_rule pid=5137 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:53:25.222000 audit[5137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffdea436d0 a2=0 a3=1 items=0 ppid=2062 pid=5137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:25.229660 kernel: audit: type=1300 audit(1761872005.222:1472): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffdea436d0 a2=0 a3=1 items=0 ppid=2062 pid=5137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:25.229711 kernel: audit: type=1327 audit(1761872005.222:1472): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:53:25.222000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:53:25.235000 audit[5137]: NETFILTER_CFG table=nat:139 family=2 entries=104 op=nft_register_chain pid=5137 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:53:25.235000 audit[5137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffdea436d0 a2=0 a3=1 items=0 ppid=2062 pid=5137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:25.242388 kernel: audit: type=1325 audit(1761872005.235:1473): table=nat:139 family=2 entries=104 op=nft_register_chain pid=5137 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 31 00:53:25.242453 kernel: audit: type=1300 audit(1761872005.235:1473): arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffdea436d0 a2=0 a3=1 items=0 ppid=2062 pid=5137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:25.242473 kernel: audit: type=1327 audit(1761872005.235:1473): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:53:25.235000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 31 00:53:25.385201 systemd[1]: Started sshd@20-10.0.0.85:22-10.0.0.1:52610.service. Oct 31 00:53:25.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.85:22-10.0.0.1:52610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:25.389141 kernel: audit: type=1130 audit(1761872005.384:1474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.85:22-10.0.0.1:52610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:25.419000 audit[5139]: USER_ACCT pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:25.420384 sshd[5139]: Accepted publickey for core from 10.0.0.1 port 52610 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:25.421619 sshd[5139]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:25.420000 audit[5139]: CRED_ACQ pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:25.425916 kernel: audit: type=1101 audit(1761872005.419:1475): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:25.426006 kernel: audit: type=1103 audit(1761872005.420:1476): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:25.426032 kernel: audit: type=1006 audit(1761872005.420:1477): pid=5139 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 31 00:53:25.420000 audit[5139]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffece52ba0 a2=3 a3=1 items=0 ppid=1 pid=5139 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:25.420000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:25.432089 systemd[1]: Started session-21.scope. Oct 31 00:53:25.432653 systemd-logind[1206]: New session 21 of user core. Oct 31 00:53:25.442000 audit[5139]: USER_START pid=5139 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:25.445000 audit[5141]: CRED_ACQ pid=5141 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:25.588407 sshd[5139]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:25.588000 audit[5139]: USER_END pid=5139 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:25.588000 audit[5139]: CRED_DISP pid=5139 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:25.591367 systemd[1]: sshd@20-10.0.0.85:22-10.0.0.1:52610.service: Deactivated successfully. Oct 31 00:53:25.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.85:22-10.0.0.1:52610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:25.592259 systemd[1]: session-21.scope: Deactivated successfully. Oct 31 00:53:25.593155 systemd-logind[1206]: Session 21 logged out. Waiting for processes to exit. Oct 31 00:53:25.594029 systemd-logind[1206]: Removed session 21. Oct 31 00:53:26.782766 env[1221]: time="2025-10-31T00:53:26.782726555Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 00:53:26.993930 env[1221]: time="2025-10-31T00:53:26.993869233Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:26.994945 env[1221]: time="2025-10-31T00:53:26.994895127Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 00:53:26.995178 kubelet[1951]: E1031 00:53:26.995122 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:53:26.995502 kubelet[1951]: E1031 00:53:26.995186 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:53:26.995502 kubelet[1951]: E1031 00:53:26.995307 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dj25l,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-7b7f97cd5d-6rgcm_calico-apiserver(12689884-11c3-4d99-b0f3-8d3ed54d0141): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:26.996778 kubelet[1951]: E1031 00:53:26.996743 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" podUID="12689884-11c3-4d99-b0f3-8d3ed54d0141" Oct 31 00:53:27.783868 env[1221]: time="2025-10-31T00:53:27.783591644Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Oct 31 00:53:27.998744 env[1221]: time="2025-10-31T00:53:27.998679440Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:27.999791 env[1221]: time="2025-10-31T00:53:27.999746175Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Oct 31 00:53:28.000048 kubelet[1951]: E1031 00:53:27.999994 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 00:53:28.000361 kubelet[1951]: E1031 00:53:28.000051 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Oct 31 00:53:28.001517 kubelet[1951]: E1031 00:53:28.000509 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sgr4h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d7vjq_calico-system(a1446d6d-3b62-4890-8f90-ef3bb45fee6d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:28.004588 env[1221]: time="2025-10-31T00:53:28.004308639Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Oct 31 00:53:28.209810 env[1221]: time="2025-10-31T00:53:28.209520478Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:28.211407 env[1221]: time="2025-10-31T00:53:28.211213102Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Oct 31 00:53:28.211625 kubelet[1951]: E1031 00:53:28.211545 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 00:53:28.211625 kubelet[1951]: E1031 00:53:28.211618 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Oct 31 00:53:28.212272 kubelet[1951]: E1031 00:53:28.211738 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-sgr4h,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-d7vjq_calico-system(a1446d6d-3b62-4890-8f90-ef3bb45fee6d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:28.212909 kubelet[1951]: E1031 00:53:28.212850 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d" Oct 31 00:53:28.782876 env[1221]: time="2025-10-31T00:53:28.782833403Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Oct 31 00:53:28.993140 env[1221]: time="2025-10-31T00:53:28.993063592Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:28.994118 env[1221]: time="2025-10-31T00:53:28.994065006Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Oct 31 00:53:28.994356 kubelet[1951]: E1031 00:53:28.994320 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:53:28.994461 kubelet[1951]: E1031 00:53:28.994444 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Oct 31 00:53:28.994686 kubelet[1951]: E1031 00:53:28.994643 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-z4z4p,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-7b7f97cd5d-b6qnj_calico-apiserver(c8e402bc-f445-4783-b321-f2c849228b0b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:28.996008 kubelet[1951]: E1031 00:53:28.995954 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" podUID="c8e402bc-f445-4783-b321-f2c849228b0b" Oct 31 00:53:30.592267 systemd[1]: Started sshd@21-10.0.0.85:22-10.0.0.1:60394.service. Oct 31 00:53:30.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.85:22-10.0.0.1:60394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:30.593243 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 31 00:53:30.593320 kernel: audit: type=1130 audit(1761872010.592:1483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.85:22-10.0.0.1:60394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:30.630000 audit[5156]: USER_ACCT pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.631458 sshd[5156]: Accepted publickey for core from 10.0.0.1 port 60394 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:30.633695 sshd[5156]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:30.633000 audit[5156]: CRED_ACQ pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.637237 kernel: audit: type=1101 audit(1761872010.630:1484): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.637303 kernel: audit: type=1103 audit(1761872010.633:1485): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.637324 kernel: audit: type=1006 audit(1761872010.633:1486): pid=5156 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 31 00:53:30.633000 audit[5156]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeaef80d0 a2=3 a3=1 items=0 ppid=1 pid=5156 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:30.641599 kernel: audit: type=1300 audit(1761872010.633:1486): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeaef80d0 a2=3 a3=1 items=0 ppid=1 pid=5156 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:30.633000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:30.642774 kernel: audit: type=1327 audit(1761872010.633:1486): proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:30.643973 systemd-logind[1206]: New session 22 of user core. Oct 31 00:53:30.644511 systemd[1]: Started session-22.scope. Oct 31 00:53:30.648000 audit[5156]: USER_START pid=5156 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.652000 audit[5158]: CRED_ACQ pid=5158 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.655111 kernel: audit: type=1105 audit(1761872010.648:1487): pid=5156 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.655196 kernel: audit: type=1103 audit(1761872010.652:1488): pid=5158 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.779113 sshd[5156]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:30.780000 audit[5156]: USER_END pid=5156 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.782374 systemd[1]: sshd@21-10.0.0.85:22-10.0.0.1:60394.service: Deactivated successfully. Oct 31 00:53:30.783313 systemd[1]: session-22.scope: Deactivated successfully. Oct 31 00:53:30.780000 audit[5156]: CRED_DISP pid=5156 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.784711 systemd-logind[1206]: Session 22 logged out. Waiting for processes to exit. Oct 31 00:53:30.785353 env[1221]: time="2025-10-31T00:53:30.785315572Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Oct 31 00:53:30.786783 systemd-logind[1206]: Removed session 22. Oct 31 00:53:30.787116 kernel: audit: type=1106 audit(1761872010.780:1489): pid=5156 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.787171 kernel: audit: type=1104 audit(1761872010.780:1490): pid=5156 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:30.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.85:22-10.0.0.1:60394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:31.000236 env[1221]: time="2025-10-31T00:53:31.000077703Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Oct 31 00:53:31.002390 env[1221]: time="2025-10-31T00:53:31.002324057Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Oct 31 00:53:31.002611 kubelet[1951]: E1031 00:53:31.002571 1951 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 00:53:31.002971 kubelet[1951]: E1031 00:53:31.002625 1951 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Oct 31 00:53:31.002971 kubelet[1951]: E1031 00:53:31.002758 1951 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-wbnq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-l9hl2_calico-system(2473b883-d21a-4d6d-b8b5-718e6f47949b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Oct 31 00:53:31.004005 kubelet[1951]: E1031 00:53:31.003942 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-l9hl2" podUID="2473b883-d21a-4d6d-b8b5-718e6f47949b" Oct 31 00:53:31.782263 kubelet[1951]: E1031 00:53:31.782220 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:53:32.783521 kubelet[1951]: E1031 00:53:32.783467 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-6795c95d78-ss2p9" podUID="a8fc4166-ef9c-4e92-9cd9-cff4ec9f9c94" Oct 31 00:53:34.783122 kubelet[1951]: E1031 00:53:34.783048 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5675d97fbf-5qxcq" podUID="3bc34509-f978-427a-9bb0-ccd41f4aa6f2" Oct 31 00:53:35.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.85:22-10.0.0.1:60404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:35.784663 systemd[1]: Started sshd@22-10.0.0.85:22-10.0.0.1:60404.service. Oct 31 00:53:35.787356 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 00:53:35.787431 kernel: audit: type=1130 audit(1761872015.784:1492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.85:22-10.0.0.1:60404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:35.820556 sshd[5170]: Accepted publickey for core from 10.0.0.1 port 60404 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:35.819000 audit[5170]: USER_ACCT pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.819000 audit[5170]: CRED_ACQ pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.821953 sshd[5170]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:35.833827 kernel: audit: type=1101 audit(1761872015.819:1493): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.833932 kernel: audit: type=1103 audit(1761872015.819:1494): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.833951 kernel: audit: type=1006 audit(1761872015.819:1495): pid=5170 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 31 00:53:35.833497 systemd[1]: Started session-23.scope. Oct 31 00:53:35.834181 systemd-logind[1206]: New session 23 of user core. Oct 31 00:53:35.837772 kernel: audit: type=1300 audit(1761872015.819:1495): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe572c520 a2=3 a3=1 items=0 ppid=1 pid=5170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:35.819000 audit[5170]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe572c520 a2=3 a3=1 items=0 ppid=1 pid=5170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:35.819000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:35.841963 kernel: audit: type=1327 audit(1761872015.819:1495): proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:35.846000 audit[5170]: USER_START pid=5170 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.854788 kernel: audit: type=1105 audit(1761872015.846:1496): pid=5170 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.854899 kernel: audit: type=1103 audit(1761872015.850:1497): pid=5172 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.850000 audit[5172]: CRED_ACQ pid=5172 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.979491 sshd[5170]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:35.980000 audit[5170]: USER_END pid=5170 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.982652 systemd[1]: sshd@22-10.0.0.85:22-10.0.0.1:60404.service: Deactivated successfully. Oct 31 00:53:35.983505 systemd[1]: session-23.scope: Deactivated successfully. Oct 31 00:53:35.980000 audit[5170]: CRED_DISP pid=5170 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.984450 systemd-logind[1206]: Session 23 logged out. Waiting for processes to exit. Oct 31 00:53:35.985881 kernel: audit: type=1106 audit(1761872015.980:1498): pid=5170 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.985934 kernel: audit: type=1104 audit(1761872015.980:1499): pid=5170 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:35.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.85:22-10.0.0.1:60404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:35.986931 systemd-logind[1206]: Removed session 23. Oct 31 00:53:37.782951 kubelet[1951]: E1031 00:53:37.782905 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-6rgcm" podUID="12689884-11c3-4d99-b0f3-8d3ed54d0141" Oct 31 00:53:37.784089 kubelet[1951]: E1031 00:53:37.784050 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 31 00:53:38.926888 systemd[1]: run-containerd-runc-k8s.io-f6cf387b193f7b2e2c22f23551a5545499e54dcc8aea8132933b39b93a7faa0d-runc.jCz9bD.mount: Deactivated successfully. Oct 31 00:53:40.986594 systemd[1]: Started sshd@23-10.0.0.85:22-10.0.0.1:59014.service. Oct 31 00:53:40.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.85:22-10.0.0.1:59014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:40.990492 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 31 00:53:40.990618 kernel: audit: type=1130 audit(1761872020.985:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.85:22-10.0.0.1:59014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:41.038945 sshd[5208]: Accepted publickey for core from 10.0.0.1 port 59014 ssh2: RSA SHA256:U8uh4tNlAoztP9XwPhxxRCHpcOqZ9ym/JukaPHih73U Oct 31 00:53:41.036000 audit[5208]: USER_ACCT pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.041835 sshd[5208]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 31 00:53:41.041000 audit[5208]: CRED_ACQ pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.045920 kernel: audit: type=1101 audit(1761872021.036:1502): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.046010 kernel: audit: type=1103 audit(1761872021.041:1503): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.046032 kernel: audit: type=1006 audit(1761872021.041:1504): pid=5208 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 31 00:53:41.047220 systemd[1]: Started session-24.scope. Oct 31 00:53:41.041000 audit[5208]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3206430 a2=3 a3=1 items=0 ppid=1 pid=5208 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:41.047823 systemd-logind[1206]: New session 24 of user core. Oct 31 00:53:41.050319 kernel: audit: type=1300 audit(1761872021.041:1504): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3206430 a2=3 a3=1 items=0 ppid=1 pid=5208 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 31 00:53:41.050385 kernel: audit: type=1327 audit(1761872021.041:1504): proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:41.041000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 31 00:53:41.050000 audit[5208]: USER_START pid=5208 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.055351 kernel: audit: type=1105 audit(1761872021.050:1505): pid=5208 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.052000 audit[5210]: CRED_ACQ pid=5210 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.057928 kernel: audit: type=1103 audit(1761872021.052:1506): pid=5210 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.230350 sshd[5208]: pam_unix(sshd:session): session closed for user core Oct 31 00:53:41.231000 audit[5208]: USER_END pid=5208 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.231000 audit[5208]: CRED_DISP pid=5208 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.235894 systemd[1]: session-24.scope: Deactivated successfully. Oct 31 00:53:41.236858 systemd-logind[1206]: Session 24 logged out. Waiting for processes to exit. Oct 31 00:53:41.237079 systemd[1]: sshd@23-10.0.0.85:22-10.0.0.1:59014.service: Deactivated successfully. Oct 31 00:53:41.237703 kernel: audit: type=1106 audit(1761872021.231:1507): pid=5208 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.237796 kernel: audit: type=1104 audit(1761872021.231:1508): pid=5208 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 31 00:53:41.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.85:22-10.0.0.1:59014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 31 00:53:41.241526 systemd-logind[1206]: Removed session 24. Oct 31 00:53:41.785615 kubelet[1951]: E1031 00:53:41.785565 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-l9hl2" podUID="2473b883-d21a-4d6d-b8b5-718e6f47949b" Oct 31 00:53:41.785615 kubelet[1951]: E1031 00:53:41.785565 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-7b7f97cd5d-b6qnj" podUID="c8e402bc-f445-4783-b321-f2c849228b0b" Oct 31 00:53:42.783933 kubelet[1951]: E1031 00:53:42.783889 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-d7vjq" podUID="a1446d6d-3b62-4890-8f90-ef3bb45fee6d"